Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed277978-c4a1-47f1-9478-00cd4d39bda9.roa
File: ed277978-c4a1-47f1-9478-00cd4d39bda9.roa (raw, json)
Hash identifier: zKPfQXLxEFPMd0KVnxtJwSFra1VHWLmtNVpL7NPSwKI=
Subject key identifier: C3:CA:27:C0:E9:B1:C9:81:03:95:6D:74:A3:4B:6A:B0:0A:DE:7D:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 43C605F9D14B73B8D84A3F40DB2F34D15497F387
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed277978-c4a1-47f1-9478-00cd4d39bda9.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c6:05:f9:d1:4b:73:b8:d8:4a:3f:40:db:2f:34:d1:54:97:f3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=ef391d485fa41f510f0b68aff36fe79606b343b2d7da151a460110d8a8146aa6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:ad:46:8f:68:61:78:ed:17:e7:a8:19:99:
de:50:14:fc:65:b3:88:af:ec:20:4d:1d:e4:b1:67:
32:48:e0:81:ae:eb:16:d5:20:66:bd:5d:02:69:2b:
76:9e:c7:59:bf:1f:68:37:12:38:7c:ce:8d:3f:03:
79:6c:18:0c:fe:a1:2c:af:fb:86:cd:10:8b:7b:82:
cc:e3:2e:42:c3:cc:9f:34:f8:be:dd:8b:61:1e:07:
a8:c4:bc:c5:92:fb:a5:86:f9:c3:79:ce:c7:e3:09:
d2:88:97:79:35:36:b0:98:79:6c:0b:ca:58:44:b1:
25:09:68:6a:b6:9d:b6:30:a1:55:9a:ff:46:bc:94:
f5:7a:a3:c8:32:6c:63:1c:ea:10:2c:4b:71:24:62:
71:cc:4f:f4:59:46:5e:ec:1a:8c:cf:a0:4d:77:98:
ae:95:8e:98:03:c4:9c:19:2d:51:b8:d9:be:28:10:
f9:2e:c1:ef:64:cd:98:4a:dc:69:b3:9d:83:06:a4:
9d:b6:67:af:93:6a:39:63:cd:69:0c:69:d1:58:26:
d1:34:b7:4b:e8:cb:24:f1:20:e9:fa:15:21:f6:f4:
a8:0c:5f:06:83:e1:c4:c1:a9:97:25:89:be:af:f9:
ae:91:c6:cd:88:fe:bd:42:bb:8c:47:77:7c:85:d8:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:27:C0:E9:B1:C9:81:03:95:6D:74:A3:4B:6A:B0:0A:DE:7D:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed277978-c4a1-47f1-9478-00cd4d39bda9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.91.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:b7:97:c1:9d:17:ac:38:c8:21:86:fb:57:9a:15:d0:8d:0d:
62:e2:cb:cb:fe:b2:9d:36:d9:59:d6:ff:2e:2b:0a:f1:16:4e:
d1:76:5d:1a:22:d7:57:a5:fb:0f:7b:0d:28:91:1a:de:52:d0:
04:b3:ac:85:33:60:de:a0:0f:a7:b5:e7:52:e9:a6:8c:fd:11:
86:0a:2e:e0:05:56:67:77:b0:9b:36:45:52:50:00:fa:70:00:
8e:c8:77:c0:94:b4:da:c2:f7:a9:37:60:81:81:59:1e:02:fe:
d1:3e:03:f0:4e:ce:1f:aa:5a:ba:c3:ca:91:f3:30:2e:84:7f:
c7:e7:ac:81:ad:11:00:3f:1f:40:4d:13:be:9a:c0:0b:76:9e:
52:dd:2f:26:fc:b1:aa:3c:c1:51:2b:0c:34:24:6e:18:a3:2a:
47:50:06:f1:26:cb:4d:d3:94:4e:7e:49:c5:92:19:77:68:51:
ab:ca:1f:0d:6a:7e:ad:ba:96:4d:a2:94:51:44:6c:00:2b:09:
15:c4:83:53:a1:29:83:e9:12:57:e7:3c:06:33:df:a7:c6:e9:
23:23:c3:d2:b2:88:6b:46:9f:86:16:2b:e8:44:84:7d:3a:e1:
05:22:7f:b0:73:e4:42:19:73:a5:a3:27:06:97:ba:f5:8e:39:
3f:a9:c5:bb
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQ8YF+dFLc7jYSj9A2y800VSX84cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZjM5MWQ0ODVmYTQxZjUxMGYwYjY4YWZmMzZmZTc5NjA2
YjM0M2IyZDdkYTE1MWE0NjAxMTBkOGE4MTQ2YWE2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIsq1Gj2hheO0X56gZmd5QFPxls4iv7CBNHeSxZzJI4IGu
6xbVIGa9XQJpK3aex1m/H2g3Ejh8zo0/A3lsGAz+oSyv+4bNEIt7gszjLkLDzJ80
+L7di2EeB6jEvMWS+6WG+cN5zsfjCdKIl3k1NrCYeWwLylhEsSUJaGq2nbYwoVWa
/0a8lPV6o8gybGMc6hAsS3EkYnHMT/RZRl7sGozPoE13mK6VjpgDxJwZLVG42b4o
EPkuwe9kzZhK3GmznYMGpJ22Z6+TajljzWkMadFYJtE0t0voyyTxIOn6FSH29KgM
XwaD4cTBqZclib6v+a6Rxs2I/r1Cu4xHd3yF2AUlAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUw8onwOmxyYEDlW10o0tqsArefTwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkMjc3OTc4LWM0YTEtNDdmMS05NDc4LTAwY2Q0ZDM5YmRhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQWzANBgkqhkiG9w0BAQsFAAOCAQEAaLeXwZ0XrDjIIYb7V5oV0I0NYuLL
y/6ynTbZWdb/LisK8RZO0XZdGiLXV6X7D3sNKJEa3lLQBLOshTNg3qAPp7XnUumm
jP0Rhgou4AVWZ3ewmzZFUlAA+nAAjsh3wJS02sL3qTdggYFZHgL+0T4D8E7OH6pa
usPKkfMwLoR/x+esga0RAD8fQE0TvprAC3aeUt0vJvyxqjzBUSsMNCRuGKMqR1AG
8SbLTdOUTn5JxZIZd2hRq8ofDWp+rbqWTaKUUURsACsJFcSDU6Epg+kSV+c8BjPf
p8bpIyPD0rKIa0afhhYr6ESEfTrhBSJ/sHPkQhlzpaMnBpe69Y45P6nFuw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:10 2025 by rpki-client