Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa
File: c18b0845-fc95-41d6-b476-af4e1e466849.roa (raw, json)
Hash identifier: U5gsrRcOEiF3it87jNAEtnjVP3Fk0OjpCX8syjidUr4=
Subject key identifier: EB:12:67:85:98:B5:F4:8C:E4:27:50:2E:83:AD:B3:C8:4F:3B:76:62
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 1248CDC52D38ACF91F7ACF151523D1D18A043154
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa
Signing time: Mon 17 Mar 2025 17:23:51 +0000
ROA not before: Mon 17 Mar 2025 17:23:51 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 159.248.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:48:cd:c5:2d:38:ac:f9:1f:7a:cf:15:15:23:d1:d1:8a:04:31:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 17 17:23:51 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:97:de:eb:e2:fc:43:5a:da:dd:27:54:90:
00:d8:ec:ff:48:c8:b0:41:40:c2:f0:04:a0:4a:41:
91:81:d7:7f:b9:bc:f0:40:86:16:e2:d0:fa:7e:d8:
02:62:5f:83:6c:88:f4:bd:94:f6:7b:7d:cb:d0:bc:
54:9a:46:9e:6a:ee:37:49:dd:63:e8:0c:4b:dd:0b:
cd:ec:7b:47:47:c9:fb:c7:34:eb:36:ce:9a:48:b6:
6d:e9:6b:c4:2b:ef:5d:70:33:84:c4:7f:b3:4a:57:
10:85:8f:d0:dd:09:03:2d:8b:9f:9e:37:c5:20:81:
eb:43:05:eb:3a:92:4b:72:47:49:f1:05:55:da:b8:
81:23:7c:e5:19:7d:ab:2d:b1:7a:70:28:49:f3:9c:
31:fc:5e:f2:81:69:92:26:fa:fc:ea:53:0f:c2:06:
81:61:51:c8:d6:36:e1:eb:02:27:f8:ff:f7:5e:3f:
35:6e:c6:34:8c:c1:e1:e7:75:4b:e6:90:f0:c1:34:
fd:5d:31:bc:ba:05:ac:fa:2c:1c:35:f8:0f:a7:4e:
b5:36:b4:52:5d:47:51:dd:6b:b3:b9:eb:49:aa:1f:
8c:e8:68:e4:71:78:85:64:f6:f4:43:1c:81:09:84:
1d:75:4f:9e:31:a4:7d:0d:3d:ff:0b:43:75:2b:7d:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:12:67:85:98:B5:F4:8C:E4:27:50:2E:83:AD:B3:C8:4F:3B:76:62
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.248.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e6:47:3f:6b:36:32:c8:05:50:6e:2a:10:af:6b:4f:55:bb:
01:b7:04:f9:d1:3c:4b:36:83:e5:85:9b:ed:7f:59:55:0d:83:
ad:24:1b:c8:ea:a1:d4:67:43:42:9b:4e:6a:c6:c2:8b:5f:97:
e7:1d:2c:c9:78:0f:eb:1d:a4:c1:1a:a3:e4:f5:8e:56:04:bf:
85:3e:d3:fc:d5:60:44:d2:67:ff:5a:61:91:01:1d:6f:3c:34:
af:ca:0b:e8:f5:43:e7:57:6f:1d:45:c1:2e:6d:30:76:d7:52:
ff:3b:b2:72:13:da:a4:bc:31:ac:2b:74:d1:c5:e2:1b:d7:38:
73:fc:df:d3:d1:fe:e0:d9:8d:fd:eb:69:d0:1c:53:02:eb:c7:
ea:32:ad:3a:70:f9:b5:89:29:d4:d3:72:92:66:1d:5f:86:b3:
cb:15:e9:73:c6:31:9c:bc:98:7a:7b:b2:c0:5b:9c:c6:fe:03:
f1:ab:82:d6:78:21:f0:6c:61:d3:45:7f:7e:05:c1:ae:e6:95:
01:29:49:0e:12:d5:b4:b7:b7:d3:6b:00:70:ca:29:74:79:fd:
73:a5:27:ba:68:0b:5f:fe:c9:81:99:81:93:8c:06:09:b9:3b:
4e:e8:9a:97:75:57:3c:23:aa:89:e2:3e:30:41:32:a0:d1:8c:
02:d9:f0:61
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUEkjNxS04rPkfes8VFSPR0YoEMVQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG
QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDMxNzE3MjM1MVoX
DTI1MDQyMTIzNTk1OVowejFJMEcGA1UEBRNANjY0MWQ1MjM5Nzk3ZDFmNGY0OWU3
Yjg5MGRkNWY1NzY5NjhiOWIyM2MxNTQ0M2FiY2ZiOWYxNTY1NGZiZTY3MzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngWX3uvi/ENa2t0nVJAA2Oz/SMiw
QUDC8ASgSkGRgdd/ubzwQIYW4tD6ftgCYl+DbIj0vZT2e33L0LxUmkaeau43Sd1j
6AxL3QvN7HtHR8n7xzTrNs6aSLZt6WvEK+9dcDOExH+zSlcQhY/Q3QkDLYufnjfF
IIHrQwXrOpJLckdJ8QVV2riBI3zlGX2rLbF6cChJ85wx/F7ygWmSJvr86lMPwgaB
YVHI1jbh6wIn+P/3Xj81bsY0jMHh53VL5pDwwTT9XTG8ugWs+iwcNfgPp061NrRS
XUdR3WuzuetJqh+M6GjkcXiFZPb0QxyBCYQddU+eMaR9DT3/C0N1K30pnwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFOsSZ4WYtfSM5CdQLoOts8hPO3ZiMB8GA1UdIwQY
MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt
alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2MxOGIwODQ1LWZjOTUtNDFkNi1iNDc2LWFmNGUxZTQ2Njg0OS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAn/iFMA0GCSqGSIb3DQEBCwUAA4IBAQCP5kc/azYyyAVQbioQr2tP
VbsBtwT50TxLNoPlhZvtf1lVDYOtJBvI6qHUZ0NCm05qxsKLX5fnHSzJeA/rHaTB
GqPk9Y5WBL+FPtP81WBE0mf/WmGRAR1vPDSvygvo9UPnV28dRcEubTB211L/O7Jy
E9qkvDGsK3TRxeIb1zhz/N/T0f7g2Y3962nQHFMC68fqMq06cPm1iSnU03KSZh1f
hrPLFelzxjGcvJh6e7LAW5zG/gPxq4LWeCHwbGHTRX9+BcGu5pUBKUkOEtW0t7fT
awBwyil0ef1zpSe6aAtf/smBmYGTjAYJuTtO6JqXdVc8I6qJ4j4wQTKg0YwC2fBh
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:12 2025 by rpki-client