Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d258d7d0-8534-4ab8-9863-894ac2df3975.roa
File: d258d7d0-8534-4ab8-9863-894ac2df3975.roa (raw, json)
Hash identifier: p21iI+QvUrfRWnRNCkaPXciZJexijhpCvPAld9Rlrlo=
Subject key identifier: CB:B4:60:6C:69:36:CD:ED:54:FA:C2:7C:0F:CE:AD:9E:B7:8A:06:EC
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 465FC5D5B5D357F59FCDFEC20E30D90047D97617
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d258d7d0-8534-4ab8-9863-894ac2df3975.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:c16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5f:c5:d5:b5:d3:57:f5:9f:cd:fe:c2:0e:30:d9:00:47:d9:76:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=f55cbac7a1717b752e01812e0c1c2cef5cc74356e579b6c916f4a52d63a00012, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:f7:6f:06:29:73:29:68:92:d5:09:36:4b:
47:2e:e9:75:47:e1:66:a5:17:54:36:da:a3:dd:3c:
e6:01:81:e1:35:35:4c:5d:b3:69:f6:d6:04:f8:44:
56:73:93:fe:e1:51:51:c2:e7:26:6a:c5:38:03:4a:
66:23:02:49:2c:ff:8f:44:aa:1f:4f:8f:1c:e3:4b:
6f:87:7e:44:c4:0f:c1:b4:0c:5e:bc:2b:da:a8:d2:
ce:3d:6f:31:a7:fc:10:80:9c:ed:f1:a2:14:5e:ed:
9e:ec:c3:85:a3:8b:a5:26:c6:db:96:95:e8:c6:63:
dd:51:9c:96:b7:30:4d:b7:34:29:b8:f5:1c:17:c0:
70:c4:fe:87:64:b3:d1:77:f5:1f:1a:1c:12:93:a6:
3d:80:a6:06:e6:89:ef:69:5c:8d:0f:db:0e:6d:5b:
e8:cf:ab:d8:5c:47:58:91:44:58:60:76:6a:4c:cf:
6b:82:68:dc:79:42:11:88:09:88:d0:16:7f:ec:f8:
72:e7:7a:5a:c0:02:66:d4:55:51:28:4a:e1:cc:af:
1e:d4:73:83:53:18:15:09:4c:e8:e5:d9:6b:e8:23:
f8:dd:29:b3:eb:6b:15:46:d9:4f:5b:f0:fe:29:9b:
c9:46:57:56:ca:dd:f2:53:ab:57:8e:da:02:a1:f0:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B4:60:6C:69:36:CD:ED:54:FA:C2:7C:0F:CE:AD:9E:B7:8A:06:EC
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d258d7d0-8534-4ab8-9863-894ac2df3975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c16::/48
Signature Algorithm: sha256WithRSAEncryption
1c:1e:9b:94:0f:a4:33:c8:9a:37:f5:98:c5:99:3e:5a:7b:4a:
fd:88:e4:3f:ad:d2:d1:36:16:05:c8:d3:70:61:bb:91:cc:9c:
1d:c7:9a:ae:40:71:3f:1b:77:92:9a:27:ae:b8:4e:8f:82:f0:
06:0a:31:cf:c4:fb:ef:2b:d0:8d:ac:27:9e:64:0d:c5:27:ad:
67:4f:1b:5a:91:38:95:18:8d:61:6a:c1:d8:f8:a3:7d:6a:d0:
3a:dc:b5:a4:76:1f:b2:e1:01:4e:6a:f1:07:17:76:ab:01:c0:
a2:0b:1a:d3:22:3f:df:fe:d6:75:44:e8:78:25:1a:42:11:0c:
b7:cb:60:cd:a0:1d:00:76:b2:78:b8:6e:e7:6f:50:b0:da:bb:
4e:92:ed:fe:27:0c:87:19:5f:86:e2:5c:0e:85:89:46:ea:ff:
06:59:46:ef:3c:5a:1d:f5:c2:a6:c8:b7:2b:cc:34:8f:fd:34:
27:d6:42:77:ef:6b:3e:81:3b:91:f0:7c:68:5d:ee:fd:55:a0:
ce:41:57:02:07:7a:4f:2f:b4:35:a4:c4:73:af:23:31:fd:1e:
44:1d:a5:9e:95:59:b5:f4:df:e1:3d:26:e2:69:e9:62:3f:a0:
7a:a6:7d:ec:32:1a:96:80:62:13:36:74:42:66:83:09:5e:e7:
28:62:bb:65
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURl/F1bXTV/Wfzf7CDjDZAEfZdhcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNTVjYmFjN2ExNzE3Yjc1MmUwMTgxMmUwYzFjMmNlZjVj
Yzc0MzU2ZTU3OWI2YzkxNmY0YTUyZDYzYTAwMDEyMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCflPdvBilzKWiS1Qk2S0cu6XVH4WalF1Q22qPdPOYBgeE1
NUxds2n21gT4RFZzk/7hUVHC5yZqxTgDSmYjAkks/49Eqh9PjxzjS2+HfkTED8G0
DF68K9qo0s49bzGn/BCAnO3xohRe7Z7sw4Wji6UmxtuWlejGY91RnJa3ME23NCm4
9RwXwHDE/odks9F39R8aHBKTpj2Apgbmie9pXI0P2w5tW+jPq9hcR1iRRFhgdmpM
z2uCaNx5QhGICYjQFn/s+HLnelrAAmbUVVEoSuHMrx7Uc4NTGBUJTOjl2WvoI/jd
KbPraxVG2U9b8P4pm8lGV1bK3fJTq1eO2gKh8PMfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUy7RgbGk2ze1U+sJ8D86tnreKBuwwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2QyNThkN2QwLTg1MzQtNGFiOC05ODYzLTg5NGFjMmRmMzk3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADBYwDQYJKoZIhvcNAQELBQADggEBABwem5QPpDPImjf1mMWZPlp7
Sv2I5D+t0tE2FgXI03Bhu5HMnB3Hmq5AcT8bd5KaJ664To+C8AYKMc/E++8r0I2s
J55kDcUnrWdPG1qROJUYjWFqwdj4o31q0DrctaR2H7LhAU5q8QcXdqsBwKILGtMi
P9/+1nVE6HglGkIRDLfLYM2gHQB2sni4budvULDau06S7f4nDIcZX4biXA6FiUbq
/wZZRu88Wh31wqbItyvMNI/9NCfWQnfvaz6BO5HwfGhd7v1VoM5BVwIHek8vtDWk
xHOvIzH9HkQdpZ6VWbX03+E9JuJp6WI/oHqmfewyGpaAYhM2dEJmgwle5yhiu2U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:21 2025 by rpki-client