Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4a399bd-92c0-4ab0-8b7a-be88117e012b.roa
File: e4a399bd-92c0-4ab0-8b7a-be88117e012b.roa (raw, json)
Hash identifier: X/jV4gK96SmG5E7q7xeoIXkKIRxha9j/nSkAGUH7VtU=
Subject key identifier: 19:1E:AD:8A:01:7C:1A:06:7C:C9:B5:16:3D:78:95:FA:50:1D:57:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C4FE8D76E559CF95D9254AC50B025EF847451B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4a399bd-92c0-4ab0-8b7a-be88117e012b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f32:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4f:e8:d7:6e:55:9c:f9:5d:92:54:ac:50:b0:25:ef:84:74:51:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=99ec45fd4ba2d38a0d172d9fbb2c0d55c2f5a06421a1bae87fe8bafd0406b84b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:c3:2a:56:b0:f7:08:b3:b0:9f:be:46:13:
15:b6:31:32:25:08:cc:a4:27:08:4d:79:80:84:03:
5a:4b:0b:e6:48:80:75:5b:66:80:8a:2b:d9:73:90:
01:da:22:0b:cd:b7:4a:b5:b1:94:6b:0c:92:e5:5f:
67:6f:5d:38:f9:f9:75:aa:d0:1a:da:92:62:70:f3:
b0:26:32:3a:b8:93:7a:6b:d8:1f:a3:10:8f:65:23:
80:a3:36:d3:c0:bb:2d:cf:34:50:ba:1a:6a:8b:49:
7b:c5:b0:14:3e:55:65:e3:b6:b4:67:fa:66:c9:f6:
ce:26:f4:b7:d1:19:b7:70:68:6f:44:37:6f:5d:af:
98:c2:7d:f4:d7:90:56:de:fa:24:d5:6c:88:d6:04:
72:71:cb:37:50:8a:cf:71:69:08:8e:9f:ed:5a:ed:
32:57:da:2e:92:2a:fb:a3:d2:72:9b:c8:36:7d:f1:
6a:a9:62:9d:3a:0c:1a:82:54:04:fa:4f:f9:79:77:
e7:bc:e9:eb:29:d8:f0:63:1c:14:54:e9:c1:84:4c:
d1:ff:1d:50:d7:29:6d:e8:8d:cb:fb:f2:92:d9:42:
94:fd:d1:48:37:a4:c6:04:47:9e:c7:0b:07:32:14:
e8:a1:f9:dc:94:de:c0:c6:1e:18:2c:93:cf:99:a1:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1E:AD:8A:01:7C:1A:06:7C:C9:B5:16:3D:78:95:FA:50:1D:57:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4a399bd-92c0-4ab0-8b7a-be88117e012b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f32:6000::/40
Signature Algorithm: sha256WithRSAEncryption
ce:7b:71:d0:a6:6c:ad:9e:2b:fe:5b:8a:07:40:5b:7c:3d:fd:
5d:8c:7b:e0:5c:35:72:f9:7d:3c:39:01:5a:cf:06:1f:ad:8f:
4c:99:92:93:a6:31:c9:d7:c1:0a:81:1b:2d:10:ad:ee:eb:75:
b9:e9:2b:8f:41:2b:da:6e:5e:4d:12:87:89:b7:37:b9:dc:dc:
46:4c:d2:59:67:0a:39:38:8c:aa:b9:8a:88:2f:23:ab:4d:66:
fc:cf:ac:1d:bd:5b:8e:ae:e5:12:ce:3b:a1:6a:79:80:a8:3c:
1b:4c:0e:df:f7:87:4b:d6:0c:1b:0a:aa:cc:24:a1:f0:4c:bc:
f5:8f:a1:60:9a:eb:aa:01:6d:5e:75:99:36:4e:67:02:0d:b4:
de:7c:f4:61:92:16:36:24:ca:33:9b:bc:b9:13:0e:ca:8e:d6:
be:21:5e:7f:b2:e3:6d:2b:c0:ea:bf:a4:67:08:00:7e:08:ce:
06:34:89:4c:fb:43:fb:6f:42:9f:36:f4:9e:ad:e8:61:04:6d:
9c:15:39:ec:1c:28:df:01:15:31:93:30:aa:ec:02:59:ee:ff:
ab:51:0c:20:7e:ff:23:d6:e5:0a:c5:86:c5:2d:27:4e:16:b4:
72:10:93:f0:7c:ba:b0:23:bc:c1:b3:93:9e:55:67:2a:ce:8b:
b0:d4:92:94
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUPE/o125VnPldklSsULAl74R0UbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A5OWVjNDVmZDRiYTJkMzhhMGQxNzJkOWZiYjJjMGQ1NWMy
ZjVhMDY0MjFhMWJhZTg3ZmU4YmFmZDA0MDZiODRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDE2cMqVrD3CLOwn75GExW2MTIlCMykJwhNeYCEA1pLC+ZI
gHVbZoCKK9lzkAHaIgvNt0q1sZRrDJLlX2dvXTj5+XWq0BrakmJw87AmMjq4k3pr
2B+jEI9lI4CjNtPAuy3PNFC6GmqLSXvFsBQ+VWXjtrRn+mbJ9s4m9LfRGbdwaG9E
N29dr5jCffTXkFbe+iTVbIjWBHJxyzdQis9xaQiOn+1a7TJX2i6SKvuj0nKbyDZ9
8WqpYp06DBqCVAT6T/l5d+e86esp2PBjHBRU6cGETNH/HVDXKW3ojcv78pLZQpT9
0Ug3pMYER57HCwcyFOih+dyU3sDGHhgsk8+ZoST1AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUGR6tigF8GgZ8ybUWPXiV+lAdV5QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U0YTM5OWJkLTkyYzAtNGFiMC04YjdhLWJlODgxMTdlMDEyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB8yYDANBgkqhkiG9w0BAQsFAAOCAQEAzntx0KZsrZ4r/luKB0BbfD39
XYx74Fw1cvl9PDkBWs8GH62PTJmSk6YxydfBCoEbLRCt7ut1uekrj0Er2m5eTRKH
ibc3udzcRkzSWWcKOTiMqrmKiC8jq01m/M+sHb1bjq7lEs47oWp5gKg8G0wO3/eH
S9YMGwqqzCSh8Ey89Y+hYJrrqgFtXnWZNk5nAg203nz0YZIWNiTKM5u8uRMOyo7W
viFef7LjbSvA6r+kZwgAfgjOBjSJTPtD+29Cnzb0nq3oYQRtnBU57Bwo3wEVMZMw
quwCWe7/q1EMIH7/I9blCsWGxS0nTha0chCT8Hy6sCO8wbOTnlVnKs6LsNSSlA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:10 2025 by rpki-client