Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa
File: 235ba01b-bc16-4244-a93f-06a145b0732c.roa (raw, json)
Hash identifier: 7y5wHMPer+K+2YE4Cno54WsKDNv/2CE7KplLvBQnLGY=
Subject key identifier: 7B:91:31:4C:E1:DF:D0:3D:EB:E0:E5:F5:F2:E0:FA:0A:3A:94:B5:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BFC30AD4305D782C0BFB728F5D1B3A876897244
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa
Signing time: Fri 28 Mar 2025 00:00:43 +0000
ROA not before: Fri 28 Mar 2025 00:00:43 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 147.106.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fc:30:ad:43:05:d7:82:c0:bf:b7:28:f5:d1:b3:a8:76:89:72:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:00:43 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:c0:dd:ce:45:ed:97:f6:37:4d:db:30:f8:
95:5f:be:0b:8e:7c:49:b8:93:6a:3f:d0:32:4b:33:
99:59:21:d9:36:43:a1:7a:31:24:25:82:1c:53:3c:
ff:17:03:cc:37:b4:bb:b8:f3:28:60:de:92:2f:91:
8d:be:31:19:ca:14:81:fa:45:9f:4d:2b:08:9d:3f:
90:3b:4e:ba:a1:9d:ca:2f:55:6d:56:bf:a9:c9:a0:
a7:d6:fd:41:fe:fc:d8:26:e9:e2:a8:8b:90:02:d2:
8e:9f:4d:92:f8:ad:15:c0:ab:e6:90:9b:5f:da:cc:
2a:73:3d:47:07:f3:8b:14:d6:d7:37:2c:cd:f6:74:
3e:20:1c:99:9f:ac:b9:1f:b9:34:0c:af:67:31:00:
e8:29:b4:91:c2:fe:4b:8a:b8:8a:35:d4:e9:6e:b9:
10:22:87:e6:e6:36:ad:b1:c1:5c:24:c1:af:61:6a:
74:5b:c8:49:80:65:6f:d1:0a:de:77:75:ef:56:fd:
58:ed:32:0a:b0:24:71:e2:a0:67:04:5c:63:6f:67:
4e:1f:3f:60:6e:ab:3b:11:65:43:a5:c4:6b:a1:7d:
09:c0:33:d9:f8:38:5a:a8:4a:eb:7f:3e:d7:9b:06:
38:b1:44:9a:e6:3e:2a:eb:79:dc:50:6a:af:ef:20:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:91:31:4C:E1:DF:D0:3D:EB:E0:E5:F5:F2:E0:FA:0A:3A:94:B5:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.106.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:8d:c3:33:41:5e:48:53:4d:b9:9f:f7:2c:cf:b1:65:61:56:
0a:97:08:ba:47:8a:cb:51:00:96:dc:ad:51:01:85:d9:80:bc:
64:34:c7:7f:b8:5d:8b:53:94:f2:60:01:27:8f:64:3b:ea:0d:
81:0f:6f:af:c0:45:70:a4:f2:f0:48:6b:2b:c5:03:f0:6e:e1:
24:15:8e:3f:aa:e2:1e:2b:ff:12:0b:cd:4b:f8:22:05:84:d7:
c5:09:c4:dc:42:6a:61:ba:db:ac:b0:f9:48:f8:1e:e2:76:b1:
ea:ae:57:ba:0c:78:35:e0:ad:4d:95:2e:cc:48:8b:b5:93:26:
57:64:96:57:a8:60:7d:d8:1a:18:19:e7:1a:0e:8b:65:ee:a2:
88:28:e4:19:c4:d9:0e:80:de:11:6d:45:4c:9e:f6:5d:d3:11:
c1:af:5b:da:88:68:62:db:db:bb:d1:9f:de:ae:9b:2a:09:e6:
19:79:22:fe:12:70:81:3f:e7:d6:ed:ec:2a:3a:37:30:cd:4f:
f5:f0:8b:f0:b2:2e:51:fd:07:cd:9d:5d:5b:0f:4c:e4:65:f3:
3c:fa:ee:af:09:65:90:5e:5c:c0:44:58:8e:8e:de:c4:b7:52:
39:1d:61:c6:1d:31:22:c7:1c:11:ec:b1:d4:87:f5:36:69:6e:
d9:6e:b9:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe/wwrUMF14LAv7co9dGzqHaJckQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAwMDQzWhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MDI4NTE3N2JmZmU0MjdmMjNmYTk5ODRmNmY5NTVjNDk5
NGUzZTAyMGRmMjU1Nzk1MTQ3MjJkNTVhZjc5MjU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCazMDdzkXtl/Y3Tdsw+JVfvguOfEm4k2o/0DJLM5lZIdk2
Q6F6MSQlghxTPP8XA8w3tLu48yhg3pIvkY2+MRnKFIH6RZ9NKwidP5A7Trqhncov
VW1Wv6nJoKfW/UH+/Ngm6eKoi5AC0o6fTZL4rRXAq+aQm1/azCpzPUcH84sU1tc3
LM32dD4gHJmfrLkfuTQMr2cxAOgptJHC/kuKuIo11OluuRAih+bmNq2xwVwkwa9h
anRbyEmAZW/RCt53de9W/VjtMgqwJHHioGcEXGNvZ04fP2BuqzsRZUOlxGuhfQnA
M9n4OFqoSut/PtebBjixRJrmPirredxQaq/vIIydAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUe5ExTOHf0D3r4OX18uD6CjqUtRQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIzNWJhMDFiLWJjMTYtNDI0NC1hOTNmLTA2YTE0NWIwNzMyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAaTaoAwDQYJKoZIhvcNAQELBQADggEBALCNwzNBXkhTTbmf9yzPsWVhVgqX
CLpHistRAJbcrVEBhdmAvGQ0x3+4XYtTlPJgASePZDvqDYEPb6/ARXCk8vBIayvF
A/Bu4SQVjj+q4h4r/xILzUv4IgWE18UJxNxCamG626yw+Uj4HuJ2sequV7oMeDXg
rU2VLsxIi7WTJldklleoYH3YGhgZ5xoOi2Xuoogo5BnE2Q6A3hFtRUye9l3TEcGv
W9qIaGLb27vRn96umyoJ5hl5Iv4ScIE/59bt7Co6NzDNT/Xwi/CyLlH9B82dXVsP
TORl8zz67q8JZZBeXMBEWI6O3sS3UjkdYcYdMSLHHBHssdSH9TZpbtluuVo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:06 2025 by rpki-client