Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d88e47ad-805d-4e85-a905-4da3418fe143.roa
File: d88e47ad-805d-4e85-a905-4da3418fe143.roa (raw, json)
Hash identifier: ZBcFlVkyvInv9vL1Yp7DTaElibgDJhNZvyGzg5PQYzQ=
Subject key identifier: A0:8C:06:5B:64:5E:E2:7D:42:1E:4B:5A:FB:04:93:A0:72:07:E8:D5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B49F8808FEE4C01E84F5C8FBF9D7A44DD22FD9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d88e47ad-805d-4e85-a905-4da3418fe143.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:49:f8:80:8f:ee:4c:01:e8:4f:5c:8f:bf:9d:7a:44:dd:22:fd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=d1ca8e18db1b29b8b282c2a43218959735a6595c3d7ef470cfadd89d70c63a27, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:0e:2c:ee:b9:ac:59:63:00:9e:19:a8:27:
3a:35:33:5d:34:24:92:06:61:d5:69:f0:af:58:7b:
1c:15:20:6f:99:fd:79:f6:ba:97:60:e6:c4:5e:fd:
bf:53:d1:34:bf:43:b4:dd:d2:de:43:2c:ce:bb:b8:
52:10:80:9d:b3:03:81:03:c1:20:d0:93:05:e2:01:
a6:87:b0:41:6b:ae:c9:97:ca:c9:82:fe:c2:f2:06:
12:e1:42:8d:ca:ed:cb:a8:52:d9:b2:cc:58:61:95:
75:62:b2:bf:a0:8c:fd:df:89:5a:fa:a0:3e:64:90:
78:13:a9:b1:76:8e:a4:e1:f3:fc:aa:cd:c3:e0:cc:
d7:d8:88:ca:b5:e2:66:c3:3f:dc:e5:b5:39:18:1c:
d4:d9:6e:7a:24:43:04:24:2c:6a:3b:a5:b6:36:f7:
0a:ad:e8:8c:84:da:f2:39:87:22:48:b5:66:e0:35:
a8:00:01:39:8c:15:b3:13:1f:b4:8a:fb:2d:00:f7:
3c:f0:ae:47:f0:d3:50:d3:82:25:5a:33:df:4b:29:
8a:7f:6b:8b:a9:a7:33:03:a1:b2:82:a6:44:fd:7c:
64:b5:78:54:b7:7e:82:28:9e:66:de:f7:4b:ad:00:
d0:1d:b6:33:92:26:e9:d6:4b:7b:59:2c:9b:86:63:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:06:5B:64:5E:E2:7D:42:1E:4B:5A:FB:04:93:A0:72:07:E8:D5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d88e47ad-805d-4e85-a905-4da3418fe143.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.88.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:bc:d8:c6:64:c5:57:01:03:9e:6f:9f:95:8d:3f:d1:19:3c:
1e:5c:52:b4:37:24:5f:81:35:f9:e4:ca:72:5c:c9:18:63:71:
76:20:1e:1e:f5:8e:b2:57:21:54:01:78:6e:9c:5b:f9:0c:80:
94:8f:d4:5a:87:ab:71:8b:64:fb:70:91:16:9b:0b:07:fd:ba:
e8:b0:b3:44:d3:e4:17:3d:2d:0e:42:28:4b:df:4f:37:2f:8a:
08:d8:f3:0c:8a:b3:ca:0b:c0:04:3c:06:58:48:59:f4:fd:31:
3c:eb:35:41:54:0e:9f:a5:48:48:c9:9e:62:8b:65:2d:f1:36:
65:dd:04:e4:f7:56:aa:4d:b5:db:76:e4:a2:4d:59:56:1d:e9:
73:c1:3c:8e:3d:ab:9a:19:61:8c:54:ad:d7:d3:87:75:62:b5:
c9:25:12:63:8d:74:fc:a0:fb:1b:05:5c:77:a2:f3:20:fb:82:
32:5a:62:c5:9c:29:37:c3:71:e3:50:8f:96:21:15:6b:2c:bb:
16:d9:d6:ab:ee:3f:80:e8:c5:93:f8:57:63:a4:3c:22:2b:b7:
4a:74:7e:4e:28:ab:a1:5d:ba:09:f2:06:45:32:4b:8d:da:8b:
42:8d:22:55:a0:2a:3f:2e:dd:ec:29:ae:ca:3b:ec:2a:9e:9b:
0d:f5:3d:56
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW0n4gI/uTAHoT1yPv516RN0i/Z8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMWNhOGUxOGRiMWIyOWI4YjI4MmMyYTQzMjE4OTU5NzM1
YTY1OTVjM2Q3ZWY0NzBjZmFkZDg5ZDcwYzYzYTI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuWA4s7rmsWWMAnhmoJzo1M100JJIGYdVp8K9YexwVIG+Z
/Xn2updg5sRe/b9T0TS/Q7Td0t5DLM67uFIQgJ2zA4EDwSDQkwXiAaaHsEFrrsmX
ysmC/sLyBhLhQo3K7cuoUtmyzFhhlXVisr+gjP3fiVr6oD5kkHgTqbF2jqTh8/yq
zcPgzNfYiMq14mbDP9zltTkYHNTZbnokQwQkLGo7pbY29wqt6IyE2vI5hyJItWbg
NagAATmMFbMTH7SK+y0A9zzwrkfw01DTgiVaM99LKYp/a4uppzMDobKCpkT9fGS1
eFS3foIonmbe90utANAdtjOSJunWS3tZLJuGY/jXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoIwGW2Re4n1CHkta+wSToHIH6NUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q4OGU0N2FkLTgwNWQtNGU4NS1hOTA1LTRkYTM0MThmZTE0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjl1gwDQYJKoZIhvcNAQELBQADggEBAL282MZkxVcBA55vn5WNP9EZPB5c
UrQ3JF+BNfnkynJcyRhjcXYgHh71jrJXIVQBeG6cW/kMgJSP1FqHq3GLZPtwkRab
Cwf9uuiws0TT5Bc9LQ5CKEvfTzcvigjY8wyKs8oLwAQ8BlhIWfT9MTzrNUFUDp+l
SEjJnmKLZS3xNmXdBOT3VqpNtdt25KJNWVYd6XPBPI49q5oZYYxUrdfTh3Vitckl
EmONdPyg+xsFXHei8yD7gjJaYsWcKTfDceNQj5YhFWssuxbZ1qvuP4DoxZP4V2Ok
PCIrt0p0fk4oq6FdugnyBkUyS43ai0KNIlWgKj8u3ewprso77Cqemw31PVY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:39 2025 by rpki-client