Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289191f-e4dc-455d-9489-a1ebc7ea58b4.roa
File: 0289191f-e4dc-455d-9489-a1ebc7ea58b4.roa (raw, json)
Hash identifier: F1ijPv8+wyn5vS4ubhqq5iznKsv+5cFmdClIvIB+M7o=
Subject key identifier: 27:D9:78:1E:92:2C:1D:00:1E:B7:AB:09:5C:59:03:4F:CF:12:75:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55A309F14D2EEFA6C7365839AB8320366F1BE8AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289191f-e4dc-455d-9489-a1ebc7ea58b4.roa
Signing time: Tue 04 Mar 2025 16:40:13 +0000
ROA not before: Tue 04 Mar 2025 16:40:13 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.22.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a3:09:f1:4d:2e:ef:a6:c7:36:58:39:ab:83:20:36:6f:1b:e8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 16:40:13 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:3b:c6:d0:fc:26:2b:51:df:94:e0:3d:76:
bf:01:4c:84:29:a6:b3:a1:e4:eb:7c:17:25:1c:3e:
ce:d7:f0:7e:1e:40:5e:45:59:cb:79:58:1a:6d:17:
ae:d8:6a:0e:5e:aa:aa:f3:c4:4b:eb:4c:78:76:e6:
0e:f4:00:a2:01:71:00:69:f6:77:0a:86:bb:cf:0f:
e9:63:d8:69:0c:37:59:c5:80:0f:61:e5:2d:f6:6a:
2b:ad:11:2f:ed:b4:06:3b:a8:03:08:03:71:d7:02:
13:fd:a8:32:af:12:99:80:af:18:f0:44:12:7f:fe:
fa:5b:60:bf:7e:5e:81:90:11:fd:50:88:18:a3:ec:
aa:08:22:8f:3f:e6:6b:30:58:d1:d1:18:20:47:45:
d6:7c:01:c1:67:91:64:6c:6b:92:6b:fe:a8:40:81:
ea:40:c5:90:da:33:37:b2:4c:b1:63:28:02:2e:38:
9a:c2:99:3a:d0:53:93:fe:1b:6b:fe:7a:22:fb:48:
5a:d3:8e:e1:22:b9:78:f6:17:7e:6a:30:60:8d:20:
b0:56:d7:b7:1c:e7:dd:36:36:8f:c2:a2:aa:46:f9:
f2:26:33:a0:ee:63:5b:35:9e:ab:40:c7:35:33:48:
31:2b:1e:9b:06:26:bc:ba:3e:0e:c3:8d:60:8a:5f:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:78:1E:92:2C:1D:00:1E:B7:AB:09:5C:59:03:4F:CF:12:75:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289191f-e4dc-455d-9489-a1ebc7ea58b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.0.0/18
Signature Algorithm: sha256WithRSAEncryption
20:72:e8:e8:36:20:55:3b:fd:02:20:2a:d0:12:44:50:f9:9c:
f7:9e:b1:1c:39:46:f3:b6:8f:95:82:e6:98:4d:ee:35:4b:34:
5c:0c:fc:b8:23:7f:78:cc:e0:9a:3c:94:da:38:17:36:90:4f:
82:b6:84:bc:ab:f5:ab:d4:69:c3:3b:05:f0:69:d7:a4:cd:c0:
b1:03:78:80:a4:6e:65:29:49:ed:df:3e:26:0a:da:68:46:c5:
ab:f2:f1:7f:c9:cf:38:26:8d:3c:22:04:d8:b7:8b:e8:a0:18:
14:ee:85:36:4a:0f:5f:e5:7d:79:a5:9a:3f:3f:d4:6c:bc:db:
56:5f:66:d4:70:84:f4:7b:94:48:af:d9:74:41:15:ae:93:39:
e7:a4:ef:32:fd:0c:50:53:e7:88:41:f7:4e:7f:99:f5:25:ca:
f3:b7:72:7d:d4:e7:37:fd:7d:43:2d:94:68:7c:29:db:28:41:
ad:77:79:ac:36:67:97:9d:d2:0f:b7:f3:b5:6e:15:22:06:98:
bb:1c:28:6f:43:04:32:70:c8:e3:3b:1b:29:73:b9:8c:f9:9e:
f5:90:b7:2b:2e:e4:31:71:c3:56:f8:9e:63:d7:d6:0f:fc:5c:
fe:58:69:30:b2:22:b6:4c:70:1a:dd:f6:54:18:1a:0b:91:0e:
ae:0c:27:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVaMJ8U0u76bHNlg5q4MgNm8b6K0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA0MTY0MDEzWhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNjJlMTBiMzZkMGQwMGU4NGM5ZTdiMzk0MGMzODM5ZmU3
NWEzM2Q0ZmNlN2IyNTViOGEyOGQyZmQ1ZWVkYWNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjqTvG0PwmK1HflOA9dr8BTIQpprOh5Ot8FyUcPs7X8H4e
QF5FWct5WBptF67Yag5eqqrzxEvrTHh25g70AKIBcQBp9ncKhrvPD+lj2GkMN1nF
gA9h5S32aiutES/ttAY7qAMIA3HXAhP9qDKvEpmArxjwRBJ//vpbYL9+XoGQEf1Q
iBij7KoIIo8/5mswWNHRGCBHRdZ8AcFnkWRsa5Jr/qhAgepAxZDaMzeyTLFjKAIu
OJrCmTrQU5P+G2v+eiL7SFrTjuEiuXj2F35qMGCNILBW17cc5902No/CoqpG+fIm
M6DuY1s1nqtAxzUzSDErHpsGJry6Pg7DjWCKX1UTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJ9l4HpIsHQAet6sJXFkDT88Sde0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAyODkxOTFmLWU0ZGMtNDU1ZC05NDg5LWExZWJjN2VhNThiNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYXFgAwDQYJKoZIhvcNAQELBQADggEBACBy6Og2IFU7/QIgKtASRFD5nPee
sRw5RvO2j5WC5phN7jVLNFwM/Lgjf3jM4Jo8lNo4FzaQT4K2hLyr9avUacM7BfBp
16TNwLEDeICkbmUpSe3fPiYK2mhGxavy8X/JzzgmjTwiBNi3i+igGBTuhTZKD1/l
fXmlmj8/1Gy821ZfZtRwhPR7lEiv2XRBFa6TOeek7zL9DFBT54hB905/mfUlyvO3
cn3U5zf9fUMtlGh8KdsoQa13eaw2Z5ed0g+387VuFSIGmLscKG9DBDJwyOM7Gylz
uYz5nvWQtysu5DFxw1b4nmPX1g/8XP5YaTCyIrZMcBrd9lQYGguRDq4MJ2w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:58 2025 by rpki-client