Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3fc5871-a159-4c3b-84ff-ef51ff0080f9.roa
File: d3fc5871-a159-4c3b-84ff-ef51ff0080f9.roa (raw, json)
Hash identifier: c39M6HKo+5pZi7iBHX0L6DexYEzr9xe/4FXaOTc8SdQ=
Subject key identifier: F5:3E:8B:17:6A:54:F3:15:5A:A7:1B:2B:C1:23:37:99:83:11:72:56
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F96925466A9FD121CD50BD2F2B34EB4ED1A5BAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3fc5871-a159-4c3b-84ff-ef51ff0080f9.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 163.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:96:92:54:66:a9:fd:12:1c:d5:0b:d2:f2:b3:4e:b4:ed:1a:5b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=b6582da2dbf1485fd53d9a001adae77b96b0de8e7c497d316b45cbe79d17e91f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:5f:e8:bc:f3:81:63:bb:c7:ed:03:8d:c2:
cd:d8:d3:68:3f:cb:ed:20:64:78:d6:4b:c9:a7:27:
20:2c:a7:64:68:5d:81:81:16:66:76:38:57:14:a8:
49:91:fc:c4:97:d9:04:a1:58:ee:a2:ea:cd:b2:19:
5a:9c:87:28:2e:0f:26:4b:bf:30:bd:f3:75:a5:af:
a7:d6:51:11:2a:38:af:a6:6b:d9:77:27:63:c5:ae:
98:0c:2a:bc:32:f6:6e:1c:0f:ea:1e:3e:47:55:e3:
bc:ee:c9:a5:c5:7d:dc:c9:cf:a6:9f:8c:b6:17:62:
69:7e:c7:b5:fe:1b:05:fa:9a:52:e1:89:70:fc:cc:
10:b5:36:f0:16:37:39:5e:22:2d:ff:dc:2a:92:3d:
e2:c3:cf:56:a7:b8:36:4b:8b:43:81:a5:6f:9c:00:
bd:02:cc:45:6c:60:71:50:78:81:30:5d:37:30:29:
cc:76:57:b3:d7:1c:ba:d8:b1:b7:4e:6a:79:fe:bc:
80:a4:d8:8f:be:74:6c:f7:1c:0a:38:aa:53:9d:8f:
c7:93:0b:95:6b:4e:f7:ce:5e:ab:0b:7b:3b:89:e0:
bb:df:e4:46:b9:c8:2f:14:2c:bd:c8:6c:56:f8:be:
2d:fa:56:30:86:b7:87:e7:0d:04:77:24:d6:b3:9b:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:8B:17:6A:54:F3:15:5A:A7:1B:2B:C1:23:37:99:83:11:72:56
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3fc5871-a159-4c3b-84ff-ef51ff0080f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:bb:30:58:e5:61:79:e8:6a:cb:dc:8a:31:71:87:ba:54:50:
bc:57:bf:23:43:b6:ea:fe:37:47:e3:5f:60:e9:5a:10:e7:ae:
dc:1d:00:c9:86:2c:e5:63:23:fd:55:65:45:99:bb:de:03:a4:
bb:ef:cc:21:99:d6:6a:76:68:0b:af:fd:a8:8f:cf:e8:9f:2b:
e8:53:c8:26:57:5b:24:c6:b9:1e:a6:54:16:9e:a2:90:e2:26:
d7:26:ad:7f:4b:2c:d1:35:b1:35:71:4b:e1:ee:d7:f0:22:fb:
0e:7d:f3:e4:0b:e4:b0:04:91:8f:56:95:ca:df:11:2a:9b:1d:
59:25:26:9a:ca:94:10:d0:ae:90:be:73:ab:db:e4:3a:c3:46:
ae:4a:5f:01:68:f1:36:3c:6f:24:85:67:bb:bd:39:72:02:29:
bd:5e:fb:5d:c4:4c:c7:f2:4f:59:3d:3e:5f:70:69:f7:ea:be:
8d:67:fc:8c:ac:2e:c8:1d:00:99:93:35:96:e0:6e:8b:bf:1b:
dd:1f:51:84:a5:68:bd:6d:d2:08:27:b2:f3:df:0e:24:c6:ed:
4d:8c:d2:ac:2c:69:c7:bd:5e:db:9b:ba:0a:2c:ab:c6:cf:7e:
ee:0e:eb:71:84:93:c5:a8:09:3a:4d:1e:1d:21:1a:11:ae:70:
6f:72:62:7d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUP5aSVGap/RIc1QvS8rNOtO0aW64wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjU4MmRhMmRiZjE0ODVmZDUzZDlhMDAxYWRhZTc3Yjk2
YjBkZThlN2M0OTdkMzE2YjQ1Y2JlNzlkMTdlOTFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCK1/ovPOBY7vH7QONws3Y02g/y+0gZHjWS8mnJyAsp2Ro
XYGBFmZ2OFcUqEmR/MSX2QShWO6i6s2yGVqchyguDyZLvzC983Wlr6fWUREqOK+m
a9l3J2PFrpgMKrwy9m4cD+oePkdV47zuyaXFfdzJz6afjLYXYml+x7X+GwX6mlLh
iXD8zBC1NvAWNzleIi3/3CqSPeLDz1anuDZLi0OBpW+cAL0CzEVsYHFQeIEwXTcw
Kcx2V7PXHLrYsbdOann+vICk2I++dGz3HAo4qlOdj8eTC5VrTvfOXqsLezuJ4Lvf
5Ea5yC8ULL3IbFb4vi36VjCGt4fnDQR3JNazm1HXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU9T6LF2pU8xVapxsrwSM3mYMRclYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzZmM1ODcxLWExNTktNGMzYi04NGZmLWVmNTFmZjAwODBmOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCjnjANBgkqhkiG9w0BAQsFAAOCAQEAJbswWOVheehqy9yKMXGHulRQvFe/
I0O26v43R+NfYOlaEOeu3B0AyYYs5WMj/VVlRZm73gOku+/MIZnWanZoC6/9qI/P
6J8r6FPIJldbJMa5HqZUFp6ikOIm1yatf0ss0TWxNXFL4e7X8CL7Dn3z5AvksASR
j1aVyt8RKpsdWSUmmsqUENCukL5zq9vkOsNGrkpfAWjxNjxvJIVnu705cgIpvV77
XcRMx/JPWT0+X3Bp9+q+jWf8jKwuyB0AmZM1luBui78b3R9RhKVovW3SCCey898O
JMbtTYzSrCxpx71e25u6Ciyrxs9+7g7rcYSTxagJOk0eHSEaEa5wb3JifQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:27 2025 by rpki-client