Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da9cb1b7-043f-462f-9b26-e14c3ca7eacb.roa
File: da9cb1b7-043f-462f-9b26-e14c3ca7eacb.roa (raw, json)
Hash identifier: Ht9cPK66pUNSXdmxffBjkRM42+eVQp1857hT+CT5anE=
Subject key identifier: D8:37:CC:D8:F3:27:C1:79:88:F7:CF:E3:97:5D:22:65:EC:1F:34:AB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5414885AB8EF3D5DDCF5D0FC85417CB9D2B3331D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da9cb1b7-043f-462f-9b26-e14c3ca7eacb.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:14:88:5a:b8:ef:3d:5d:dc:f5:d0:fc:85:41:7c:b9:d2:b3:33:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=9f42f87a5e579073426b360c2c6e6166dfc972914d0a9d5854528347d9f95500, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:f6:c7:3c:bc:e3:db:5a:40:76:0a:99:df:
f4:38:d6:26:7c:b6:17:0a:5e:b0:63:45:82:a7:f7:
ce:19:ff:59:e8:7c:d9:40:58:48:04:fc:92:68:d2:
ed:97:2b:7e:a0:b1:cb:3d:4a:86:35:f1:56:37:65:
f2:58:54:41:64:aa:2a:ee:45:c9:e8:a7:25:ae:0a:
fd:63:30:5b:90:1d:8c:8f:e8:73:30:30:4d:dd:6c:
8c:14:c0:0a:39:2b:78:78:e8:2f:e4:ab:e7:87:43:
db:85:ec:8a:1e:3e:52:2d:d7:0e:1e:0d:74:88:ab:
d8:32:2c:1f:c9:24:6c:68:11:a9:69:10:6c:ad:e5:
e9:04:96:f7:c4:a1:13:db:ba:2f:f9:80:0a:f4:4c:
6b:f8:e9:90:c4:ee:6e:cf:8f:65:d1:a6:87:05:ad:
d0:31:a5:5a:9f:d3:7e:cd:91:cb:39:ce:93:e1:ba:
be:51:01:75:30:a3:f1:47:3d:f5:ac:0b:8a:70:09:
4f:90:a7:cc:de:e5:49:0a:45:57:31:47:51:ae:da:
e9:79:fd:d3:a4:56:2c:26:7a:dc:f1:a9:ad:ff:91:
46:44:5a:fe:14:83:f9:30:0b:ac:d3:28:c9:3e:cb:
38:74:9b:b5:ce:85:95:3b:e5:d9:cc:48:74:6b:c6:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:CC:D8:F3:27:C1:79:88:F7:CF:E3:97:5D:22:65:EC:1F:34:AB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da9cb1b7-043f-462f-9b26-e14c3ca7eacb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:6000::/40
Signature Algorithm: sha256WithRSAEncryption
11:39:12:a6:a5:41:e0:99:ef:79:5c:ee:ed:20:b1:a7:c5:98:
12:87:39:6b:3c:d3:a8:7b:d5:a0:4e:e7:2e:9b:a6:d0:53:e6:
55:ce:24:2e:cc:47:ed:78:79:17:cc:6f:44:c1:4e:ac:40:54:
8a:77:fc:02:a0:4c:7e:29:94:d8:d8:d7:09:cc:5a:26:d5:03:
b9:56:85:4e:08:a7:ea:67:5d:2e:50:72:14:36:9d:29:fa:da:
4c:d4:46:22:7c:02:94:0d:5d:a0:ff:6d:4c:7d:cd:0c:f1:00:
e2:6f:b1:ee:7a:b5:8e:ba:7e:84:96:e2:0d:3d:cb:c1:f9:30:
59:95:33:5b:c1:32:b9:9c:8d:ee:23:5a:1f:65:ba:a6:99:6a:
f6:3f:fd:c1:8d:fb:52:3d:1f:a0:4b:6b:6b:02:36:35:ab:1b:
76:dc:5c:ff:4f:ad:12:71:58:e4:2a:70:2d:b0:b0:bc:81:c7:
ca:fe:40:90:94:39:04:3c:ea:89:01:3c:3c:90:9b:e4:93:1e:
22:e5:3d:9a:6a:6d:90:d0:37:43:96:75:3f:88:49:4e:83:50:
4f:f4:8f:2d:86:ae:83:c3:40:b5:a5:28:a9:c5:ee:2d:36:e0:
fd:a5:5b:7c:62:fa:a6:96:fa:0e:54:45:34:0e:12:6b:15:29:
38:1c:0d:95
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUVBSIWrjvPV3c9dD8hUF8udKzMx0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA4MDAwMDAwWhcNMjUwMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZjQyZjg3YTVlNTc5MDczNDI2YjM2MGMyYzZlNjE2NmRm
Yzk3MjkxNGQwYTlkNTg1NDUyODM0N2Q5Zjk1NTAwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRCfbHPLzj21pAdgqZ3/Q41iZ8thcKXrBjRYKn984Z/1no
fNlAWEgE/JJo0u2XK36gscs9SoY18VY3ZfJYVEFkqiruRcnopyWuCv1jMFuQHYyP
6HMwME3dbIwUwAo5K3h46C/kq+eHQ9uF7IoePlIt1w4eDXSIq9gyLB/JJGxoEalp
EGyt5ekElvfEoRPbui/5gAr0TGv46ZDE7m7Pj2XRpocFrdAxpVqf037Nkcs5zpPh
ur5RAXUwo/FHPfWsC4pwCU+Qp8ze5UkKRVcxR1Gu2ul5/dOkViwmetzxqa3/kUZE
Wv4Ug/kwC6zTKMk+yzh0m7XOhZU75dnMSHRrxpJnAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU2DfM2PMnwXmI98/jl10iZewfNKswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RhOWNiMWI3LTA0M2YtNDYyZi05YjI2LWUxNGMzY2E3ZWFjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/7YDANBgkqhkiG9w0BAQsFAAOCAQEAETkSpqVB4JnveVzu7SCxp8WY
Eoc5azzTqHvVoE7nLpum0FPmVc4kLsxH7Xh5F8xvRMFOrEBUinf8AqBMfimU2NjX
CcxaJtUDuVaFTgin6mddLlByFDadKfraTNRGInwClA1doP9tTH3NDPEA4m+x7nq1
jrp+hJbiDT3LwfkwWZUzW8EyuZyN7iNaH2W6pplq9j/9wY37Uj0foEtrawI2Nasb
dtxc/0+tEnFY5CpwLbCwvIHHyv5AkJQ5BDzqiQE8PJCb5JMeIuU9mmptkNA3Q5Z1
P4hJToNQT/SPLYaug8NAtaUoqcXuLTbg/aVbfGL6ppb6DlRFNA4SaxUpOBwNlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:22 2025 by rpki-client