Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa
File: 558c9df2-c6fb-4925-840a-5de1f74ec31b.roa (raw, json)
Hash identifier: b0uKGbTmVFQt+cekevC23FuKdmbP61iqPwsxGaywgi4=
Subject key identifier: DF:C1:4F:89:21:05:19:ED:8A:08:A0:EA:F9:EC:7D:2D:4F:6E:3E:6A
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 73791E3240F28F476470EAD168BEBFC2102CB9A9
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:386::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:79:1e:32:40:f2:8f:47:64:70:ea:d1:68:be:bf:c2:10:2c:b9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=4fe1206478f8c29fabc4c4b74b00da25b8baddd3bc1c4e3c2f10e329e069b851, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:4f:19:6d:18:28:d1:e3:37:5b:4a:c1:cb:
20:c7:28:fa:78:3d:69:f8:90:cd:b3:56:b1:3a:4b:
c8:1d:1d:c1:df:bd:db:22:0e:1b:cc:49:ef:a0:bf:
88:3b:85:8d:e6:64:37:a4:bc:bf:f1:bb:db:08:31:
98:83:01:a3:48:73:5d:dd:45:47:eb:b8:4b:97:8c:
7e:78:53:b1:bb:ea:19:c4:b7:c4:8a:5e:99:df:e4:
06:e4:a5:53:c7:32:2c:4e:81:b7:91:e9:7a:3e:89:
df:5d:c4:78:b6:e8:61:9e:c3:c4:eb:15:25:99:71:
2d:ea:b9:21:f5:7d:dd:47:ad:67:d9:00:5c:85:de:
5c:05:9c:00:76:7b:0c:f1:44:60:31:1a:71:1b:97:
fd:9d:c5:55:4b:b9:56:74:01:c4:23:88:ea:33:a0:
c7:66:67:d5:f8:cf:bc:a4:c1:26:2c:ab:6f:fa:71:
1a:b0:40:11:0a:83:01:45:71:a2:d9:a9:d3:a7:82:
d1:d5:c1:a1:d4:16:d3:1b:c4:a7:e5:d6:da:d1:90:
ba:55:a4:b0:b4:93:4b:fc:dd:98:0c:62:fc:48:f5:
91:3f:05:c6:33:c9:3c:ca:40:36:1f:af:64:4a:8c:
d9:3f:c9:30:aa:86:0e:3c:f0:75:c8:9f:46:ce:a3:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C1:4F:89:21:05:19:ED:8A:08:A0:EA:F9:EC:7D:2D:4F:6E:3E:6A
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:386::/48
Signature Algorithm: sha256WithRSAEncryption
3c:da:89:61:c8:33:2c:cd:d1:00:0d:4a:26:5a:0b:a3:1b:41:
b7:60:1d:b1:68:a3:b0:26:c2:8e:ed:30:db:12:c6:f2:ba:7c:
72:ff:21:ec:da:f7:a5:70:49:49:8e:71:e2:e7:5c:83:12:94:
13:6d:15:01:21:83:f2:cc:f3:94:23:37:50:d9:61:8c:81:d1:
1e:2e:23:7f:74:fe:cd:cf:43:76:34:61:2c:38:3b:24:a2:e3:
f5:99:5c:e1:80:2d:21:d7:c3:b3:92:1a:46:f7:a4:8b:bd:94:
b2:37:f3:96:7a:71:7b:09:7a:e6:ae:48:a7:d9:dc:32:e9:70:
dc:e1:3c:7e:3a:1e:02:3a:3e:17:d8:b1:bb:b3:01:71:ed:47:
80:c0:1a:61:a2:0a:9f:b4:23:06:85:cb:e2:6a:b7:6b:90:39:
7e:b7:c4:ff:77:41:89:71:fa:93:4d:c2:af:cd:7f:43:2d:87:
d0:a2:72:90:9c:46:2f:d4:6b:39:9b:37:7e:f0:ef:0b:35:44:
90:0d:be:fa:81:19:05:a6:60:fb:dc:9b:28:a4:8b:eb:26:bb:
66:7e:27:51:15:57:41:10:ab:a1:f7:a2:fc:bc:08:fe:eb:ff:
00:ee:b6:f7:3d:19:46:f3:d7:fc:14:ad:0e:ec:f3:df:be:9a:
f9:aa:ff:08
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUc3keMkDyj0dkcOrRaL6/whAsuakwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZmUxMjA2NDc4ZjhjMjlmYWJjNGM0Yjc0YjAwZGEyNWI4
YmFkZGQzYmMxYzRlM2MyZjEwZTMyOWUwNjliODUxMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2OE8ZbRgo0eM3W0rByyDHKPp4PWn4kM2zVrE6S8gdHcHf
vdsiDhvMSe+gv4g7hY3mZDekvL/xu9sIMZiDAaNIc13dRUfruEuXjH54U7G76hnE
t8SKXpnf5AbkpVPHMixOgbeR6Xo+id9dxHi26GGew8TrFSWZcS3quSH1fd1HrWfZ
AFyF3lwFnAB2ewzxRGAxGnEbl/2dxVVLuVZ0AcQjiOozoMdmZ9X4z7ykwSYsq2/6
cRqwQBEKgwFFcaLZqdOngtHVwaHUFtMbxKfl1trRkLpVpLC0k0v83ZgMYvxI9ZE/
BcYzyTzKQDYfr2RKjNk/yTCqhg488HXIn0bOo04xAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU38FPiSEFGe2KCKDq+ex9LU9uPmowHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzU1OGM5ZGYyLWM2ZmItNDkyNS04NDBhLTVkZTFmNzRlYzMxYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAA4YwDQYJKoZIhvcNAQELBQADggEBADzaiWHIMyzN0QANSiZaC6Mb
QbdgHbFoo7Amwo7tMNsSxvK6fHL/Ieza96VwSUmOceLnXIMSlBNtFQEhg/LM85Qj
N1DZYYyB0R4uI390/s3PQ3Y0YSw4OySi4/WZXOGALSHXw7OSGkb3pIu9lLI385Z6
cXsJeuauSKfZ3DLpcNzhPH46HgI6PhfYsbuzAXHtR4DAGmGiCp+0IwaFy+Jqt2uQ
OX63xP93QYlx+pNNwq/Nf0Mth9CicpCcRi/UazmbN37w7ws1RJANvvqBGQWmYPvc
myiki+smu2Z+J1EVV0EQq6H3ovy8CP7r/wDutvc9GUbz1/wUrQ7s89++mvmq/wg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:29 2025 by rpki-client