Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa
File: 37e5da86-98ab-4d9c-889e-6ab6e277d866.roa (raw, json)
Hash identifier: ivuxo0Zi/ETo0wgKDBsG//huvU6vOCPcH5ZoTd6np08=
Subject key identifier: 97:6F:DA:27:B8:F8:F1:BC:EC:DD:BA:18:00:00:0E:33:7F:AE:09:1A
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 041794EE1454406215B0426891F34CE316C4FD2A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:17:94:ee:14:54:40:62:15:b0:42:68:91:f3:4c:e3:16:c4:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=38dcac2a3c6ceba3afd99b960cdcb44c5cb8ee76e2e308a21b5b569b383405ea, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:5f:87:72:8d:be:4c:f6:17:d1:f1:94:ed:
22:3f:e6:e0:3c:5b:90:2f:08:25:d9:6a:2c:31:c8:
7c:ab:d8:e0:18:f5:7b:9e:be:28:d9:c4:94:ae:de:
53:8c:6d:f1:89:ae:ca:6f:ed:bb:3c:c3:7d:44:be:
52:c2:c6:a9:86:6f:07:bd:d1:28:0d:96:1a:fd:cf:
52:e8:73:aa:7b:05:bf:67:a7:cd:7d:e9:75:b2:42:
5f:a9:f0:0d:a0:01:2d:9d:91:37:fb:74:1d:29:6f:
aa:a1:16:62:06:08:9e:e8:85:fa:a8:0c:4b:47:31:
b1:99:66:8b:cc:11:50:16:8e:1a:b3:f5:da:f9:28:
a9:d6:4e:5f:a3:cd:36:56:a8:4d:1f:44:84:2f:64:
7f:07:11:b0:c2:7e:42:af:28:45:52:f9:af:21:90:
d0:d2:78:fb:6e:f4:d5:0d:22:4e:45:95:21:66:65:
ff:cc:f7:dd:a1:f8:dc:67:d0:ce:f7:82:b9:8a:6d:
8d:eb:7c:6e:86:31:52:fe:66:04:d2:03:5d:f1:23:
5b:eb:8a:f2:a1:3c:2c:06:6d:19:a1:cd:7b:62:7b:
65:ea:f5:fe:1a:69:2f:36:38:7b:3a:95:a6:f0:b2:
b0:e3:11:ef:a7:58:16:8c:74:60:50:5e:f5:b2:e5:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6F:DA:27:B8:F8:F1:BC:EC:DD:BA:18:00:00:0E:33:7F:AE:09:1A
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:1::/48
Signature Algorithm: sha256WithRSAEncryption
79:83:16:bc:7e:f0:d2:66:b5:f8:d8:bb:4e:06:75:69:c8:97:
98:27:b6:84:73:1d:2b:d8:f9:24:c9:ec:07:a2:62:0f:85:f8:
83:2e:28:58:ce:54:6b:47:e6:8e:30:25:cb:7b:8f:e7:d3:3d:
a8:11:28:f8:29:cf:31:f4:30:ba:54:23:f6:ca:41:ed:65:0a:
f3:e2:a3:18:60:f2:3c:91:a2:6d:d0:d5:fe:07:7d:78:13:36:
99:17:25:b2:ed:93:e9:fe:51:0e:08:32:bc:d0:e7:c4:4e:5e:
29:1f:70:aa:91:c2:88:2e:d5:32:84:84:9e:ad:eb:4e:fe:ce:
08:24:c3:a9:e2:70:9c:94:72:6c:ea:91:9f:7e:9b:5d:5e:80:
74:1b:e3:9c:20:eb:b4:00:fb:6d:d4:80:f2:99:6f:14:f6:f2:
d4:10:75:6b:b1:f5:9b:09:c5:e1:66:14:ee:4a:d3:ad:00:7b:
15:44:6c:87:04:26:f1:72:fb:bf:b9:a0:cb:8f:ff:89:6f:88:
86:5d:0c:aa:ce:ff:d2:21:33:4d:60:c0:e5:1e:38:cf:2a:37:
b7:3b:b1:83:28:2e:01:73:0d:f6:d5:69:e0:00:4f:19:fc:2a:
a9:71:f0:4f:50:9f:6a:1e:b9:ff:e1:40:d1:81:f5:49:98:80:
cc:d3:b6:77
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBBeU7hRUQGIVsEJokfNM4xbE/SowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzOGRjYWMyYTNjNmNlYmEzYWZkOTliOTYwY2RjYjQ0YzVj
YjhlZTc2ZTJlMzA4YTIxYjViNTY5YjM4MzQwNWVhMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8Al+Hco2+TPYX0fGU7SI/5uA8W5AvCCXZaiwxyHyr2OAY
9XuevijZxJSu3lOMbfGJrspv7bs8w31EvlLCxqmGbwe90SgNlhr9z1Loc6p7Bb9n
p8196XWyQl+p8A2gAS2dkTf7dB0pb6qhFmIGCJ7ohfqoDEtHMbGZZovMEVAWjhqz
9dr5KKnWTl+jzTZWqE0fRIQvZH8HEbDCfkKvKEVS+a8hkNDSePtu9NUNIk5FlSFm
Zf/M992h+Nxn0M73grmKbY3rfG6GMVL+ZgTSA13xI1vrivKhPCwGbRmhzXtie2Xq
9f4aaS82OHs6labwsrDjEe+nWBaMdGBQXvWy5T6hAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUl2/aJ7j48bzs3boYAAAOM3+uCRowHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzM3ZTVkYTg2LTk4YWItNGQ5Yy04ODllLTZhYjZlMjc3ZDg2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwAAEwDQYJKoZIhvcNAQELBQADggEBAHmDFrx+8NJmtfjYu04GdWnI
l5gntoRzHSvY+STJ7AeiYg+F+IMuKFjOVGtH5o4wJct7j+fTPagRKPgpzzH0MLpU
I/bKQe1lCvPioxhg8jyRom3Q1f4HfXgTNpkXJbLtk+n+UQ4IMrzQ58ROXikfcKqR
wogu1TKEhJ6t607+zggkw6nicJyUcmzqkZ9+m11egHQb45wg67QA+23UgPKZbxT2
8tQQdWux9ZsJxeFmFO5K060AexVEbIcEJvFy+7+5oMuP/4lviIZdDKrO/9IhM01g
wOUeOM8qN7c7sYMoLgFzDfbVaeAATxn8Kqlx8E9Qn2oeuf/hQNGB9UmYgMzTtnc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:16 2025 by rpki-client