Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa
File: e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa (raw, json)
Hash identifier: EYKSaXka0trqHAehnkmUdWB0Xlmgy7Fv05bcIAe34D4=
Subject key identifier: 8B:34:33:7A:43:16:6C:91:A9:29:46:DE:7C:81:EB:6D:50:65:CB:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DD7BA014CD44CC75A1F56BEAD8A134701BC3E76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 159.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d7:ba:01:4c:d4:4c:c7:5a:1f:56:be:ad:8a:13:47:01:bc:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=43305c2a40c6157561e85901be6306957f74b73f1f12c02edecc249b9b05e9d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:b4:c5:2e:6d:b5:54:99:8e:f0:6e:58:b6:
a8:b4:cc:a5:f4:bb:dc:ac:ef:d1:e4:82:98:51:de:
6b:21:9c:c7:2b:86:82:8b:5e:31:c6:fe:b6:74:28:
7b:3e:50:37:b8:8e:7f:5c:bf:43:68:ed:92:9c:fe:
ae:4f:e1:ad:e6:7f:ae:d5:31:70:b1:e8:07:1c:ba:
e3:37:c3:89:6e:19:ab:ef:f3:38:91:25:22:80:9d:
0d:a9:97:e5:0f:ca:2d:f2:30:b6:2e:53:74:6b:c2:
52:44:c5:cb:4b:ae:9e:05:91:d8:a9:dd:56:a3:32:
3e:15:fe:79:c7:84:7b:c7:45:f7:86:fe:a8:76:dd:
1a:68:cc:b2:f3:83:2a:44:15:c8:de:29:27:7b:03:
8e:d5:c4:40:16:15:6b:a4:cd:f2:0c:3e:45:b5:dc:
ee:6a:59:d0:98:3c:24:61:a1:9f:43:56:bd:ef:10:
3b:3e:c9:64:f3:19:75:1d:e6:47:db:74:e1:c0:87:
33:15:7b:de:b6:9c:36:5b:fb:fd:7f:46:f8:8f:17:
92:dd:06:cf:6e:7b:51:42:57:11:b6:4d:78:6a:00:
5c:28:62:e0:56:5a:e0:e8:08:36:0a:53:6c:76:a3:
63:b2:06:a0:11:02:c2:00:1b:2a:d4:41:fd:54:54:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:33:7A:43:16:6C:91:A9:29:46:DE:7C:81:EB:6D:50:65:CB:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:fa:dd:7a:1b:44:8b:c3:84:a8:5b:9f:00:b1:9b:b2:61:0a:
9f:de:8c:87:e7:c9:61:da:1b:7a:7a:5b:d4:f2:e6:ed:82:d9:
de:52:38:72:fc:4d:19:46:6a:2c:24:b9:54:63:a2:c1:bc:b7:
f1:91:5a:9b:4b:aa:a2:80:11:ff:4c:b5:1f:1c:af:07:20:84:
0e:ea:00:c3:d6:2e:c8:17:48:53:b3:53:26:7b:0b:8d:83:a2:
79:3d:e1:19:70:b3:05:42:35:3a:23:d3:5c:d3:5c:77:be:1c:
8e:0c:36:3d:7d:f5:9d:19:d5:ed:b3:8f:b3:fc:54:7d:f7:6e:
d2:53:77:47:4d:64:1e:c3:3b:e1:4f:52:48:84:9d:e7:7f:c6:
7f:1a:ac:28:03:43:8b:b0:24:3d:be:33:54:5d:7b:02:1c:20:
6e:41:d9:6f:9c:55:eb:d6:05:64:71:2a:91:86:32:68:e0:12:
35:d3:78:f9:d9:5f:b6:91:cd:c5:b6:5f:b0:89:e3:a0:c6:4a:
c2:4c:ae:5c:0a:32:7b:92:3e:16:8e:23:16:3b:0f:c5:c5:2a:
1b:a6:f5:1e:91:26:5b:cb:16:5b:13:5d:43:25:7f:5d:b1:10:
4c:be:b6:f7:d7:98:85:dc:0c:d7:6a:4f:3d:25:e2:3b:86:19:
27:8c:c8:b2
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHde6AUzUTMdaH1a+rYoTRwG8PnYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MzMwNWMyYTQwYzYxNTc1NjFlODU5MDFiZTYzMDY5NTdm
NzRiNzNmMWYxMmMwMmVkZWNjMjQ5YjliMDVlOWQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmOrTFLm21VJmO8G5Ytqi0zKX0u9ys79HkgphR3mshnMcr
hoKLXjHG/rZ0KHs+UDe4jn9cv0No7ZKc/q5P4a3mf67VMXCx6AccuuM3w4luGavv
8ziRJSKAnQ2pl+UPyi3yMLYuU3RrwlJExctLrp4Fkdip3VajMj4V/nnHhHvHRfeG
/qh23RpozLLzgypEFcjeKSd7A47VxEAWFWukzfIMPkW13O5qWdCYPCRhoZ9DVr3v
EDs+yWTzGXUd5kfbdOHAhzMVe962nDZb+/1/RviPF5LdBs9ue1FCVxG2TXhqAFwo
YuBWWuDoCDYKU2x2o2OyBqARAsIAGyrUQf1UVBIPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUizQzekMWbJGpKUbefIHrbVBlyzQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U3NmJhODg4LWUxYWMtNDhhNS04MTZmLTg1ZmY5MGRjMmY5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCfLzANBgkqhkiG9w0BAQsFAAOCAQEAN/rdehtEi8OEqFufALGbsmEKn96M
h+fJYdobenpb1PLm7YLZ3lI4cvxNGUZqLCS5VGOiwby38ZFam0uqooAR/0y1Hxyv
ByCEDuoAw9YuyBdIU7NTJnsLjYOieT3hGXCzBUI1OiPTXNNcd74cjgw2PX31nRnV
7bOPs/xUffdu0lN3R01kHsM74U9SSISd53/GfxqsKANDi7AkPb4zVF17AhwgbkHZ
b5xV69YFZHEqkYYyaOASNdN4+dlftpHNxbZfsInjoMZKwkyuXAoye5I+Fo4jFjsP
xcUqG6b1HpEmW8sWWxNdQyV/XbEQTL6299eYhdwM12pPPSXiO4YZJ4zIsg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:01 2025 by rpki-client