Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32a489d5-a860-420d-b8b0-ce06cb8942f4.roa
File: 32a489d5-a860-420d-b8b0-ce06cb8942f4.roa (raw, json)
Hash identifier: 5TVW9NiZYMdibvO+LGDk0uLqJoN2qKSwXeekEaTN1Qs=
Subject key identifier: B3:C3:79:57:84:DB:0A:68:05:A4:29:D2:2E:A4:07:05:E2:DF:90:5E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22DDF4AB16926EC2098FE003E40B57ED3CFEDB7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32a489d5-a860-420d-b8b0-ce06cb8942f4.roa
Signing time: Tue 25 Mar 2025 16:50:35 +0000
ROA not before: Tue 25 Mar 2025 16:50:35 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:dd:f4:ab:16:92:6e:c2:09:8f:e0:03:e4:0b:57:ed:3c:fe:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 25 16:50:35 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:39:c7:01:e2:de:1e:d5:49:af:fa:fd:51:
30:f6:15:58:0a:04:85:6b:f7:5a:93:15:a1:3a:85:
3c:4a:cf:02:52:79:2e:53:e2:4b:72:6b:23:49:67:
c8:5c:37:2d:01:31:00:70:4c:fe:19:7e:69:23:bf:
21:5c:24:4e:96:18:83:98:89:1b:1e:a2:33:9f:1a:
b9:40:8d:9a:a6:6a:64:ad:2e:f5:67:d4:d1:62:43:
81:8d:06:bb:35:cb:aa:a1:1e:1a:25:42:73:e2:98:
ea:f7:63:34:de:2f:ca:cc:64:9b:3d:87:91:1a:74:
8f:f8:53:48:a8:a0:c6:5e:50:14:a5:0e:a3:ae:3e:
27:15:48:13:e8:d2:b6:c8:3a:cf:e8:ea:aa:d9:a0:
dc:ae:08:fe:f1:57:82:97:63:90:65:c9:ef:4e:61:
cf:f7:73:52:1c:0c:65:73:13:91:cd:cf:6d:54:6a:
52:21:13:2a:6f:08:56:df:86:88:fb:8d:20:6d:37:
1d:0f:9b:ed:a5:31:16:0b:6d:1f:3a:50:6c:2e:6c:
ae:b7:e6:a4:05:a0:11:b0:cd:97:54:7d:b5:35:74:
1e:74:5b:32:3f:f3:c9:cb:7b:dd:8a:68:91:e6:47:
cc:75:7a:fb:ee:77:13:b0:4a:7c:4c:00:ba:95:bd:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:79:57:84:DB:0A:68:05:A4:29:D2:2E:A4:07:05:E2:DF:90:5E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32a489d5-a860-420d-b8b0-ce06cb8942f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.3.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e2:de:0e:f5:ae:0f:13:49:d0:07:21:39:d3:16:f7:51:10:
56:40:c3:34:37:c4:82:7f:d3:3b:e6:a2:94:d6:aa:74:f7:b7:
d5:48:96:b5:d1:18:2a:2f:28:3e:b3:8d:07:b0:2e:db:c5:80:
d0:7a:f6:f2:c3:24:f6:5c:d8:79:f5:09:ab:74:de:e8:25:66:
54:9e:48:51:29:be:68:cc:3e:09:75:53:d9:20:3f:45:7e:04:
ec:53:2e:b7:61:15:6f:9c:77:c8:fc:4b:82:43:c6:a4:5a:a0:
77:43:e0:ab:d5:76:9a:6a:d0:d4:0f:7e:85:db:c7:96:31:48:
23:c6:b0:b1:f2:5d:40:46:9e:5f:48:65:0a:08:d3:04:b3:25:
73:d0:50:87:2b:0f:0f:25:f5:3c:e0:6d:f8:1c:34:a1:2d:41:
7f:e6:8f:58:b8:96:9d:00:6b:81:4b:9f:f7:97:a6:9b:bf:9b:
b8:22:0d:1a:19:e7:b8:61:24:eb:81:94:91:22:f9:d8:d4:f0:
33:a4:d2:3b:8e:c7:93:9a:cb:3b:b7:46:78:d3:bb:62:7b:44:
b4:d3:cf:61:69:2a:2a:ba:67:8f:f2:e7:10:41:d3:d4:90:58:
61:7a:68:06:c3:4a:b8:20:04:2b:d3:44:03:17:17:27:5f:fe:
93:25:b3:e8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIt30qxaSbsIJj+AD5AtX7Tz+23swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTY1MDM1WhcNMjUwNDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDJkOWFhN2U4YzRhMDQzYWE0NjI0Njg5YTQ0OGM4YjU4
NTgxMDQ0MDQ0NzdkYjdjMGJlMTUzYzJlY2M1MjI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD/DnHAeLeHtVJr/r9UTD2FVgKBIVr91qTFaE6hTxKzwJS
eS5T4ktyayNJZ8hcNy0BMQBwTP4ZfmkjvyFcJE6WGIOYiRseojOfGrlAjZqmamSt
LvVn1NFiQ4GNBrs1y6qhHholQnPimOr3YzTeL8rMZJs9h5EadI/4U0iooMZeUBSl
DqOuPicVSBPo0rbIOs/o6qrZoNyuCP7xV4KXY5Blye9OYc/3c1IcDGVzE5HNz21U
alIhEypvCFbfhoj7jSBtNx0Pm+2lMRYLbR86UGwubK635qQFoBGwzZdUfbU1dB50
WzI/88nLe92KaJHmR8x1evvudxOwSnxMALqVvUY/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUs8N5V4TbCmgFpCnSLqQHBeLfkF4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMyYTQ4OWQ1LWE4NjAtNDIwZC1iOGIwLWNlMDZjYjg5NDJmNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACIEgMwDQYJKoZIhvcNAQELBQADggEBAAfi3g71rg8TSdAHITnTFvdREFZA
wzQ3xIJ/0zvmopTWqnT3t9VIlrXRGCovKD6zjQewLtvFgNB69vLDJPZc2Hn1Cat0
3uglZlSeSFEpvmjMPgl1U9kgP0V+BOxTLrdhFW+cd8j8S4JDxqRaoHdD4KvVdppq
0NQPfoXbx5YxSCPGsLHyXUBGnl9IZQoI0wSzJXPQUIcrDw8l9TzgbfgcNKEtQX/m
j1i4lp0Aa4FLn/eXppu/m7giDRoZ57hhJOuBlJEi+djU8DOk0juOx5Oayzu3RnjT
u2J7RLTTz2FpKiq6Z4/y5xBB09SQWGF6aAbDSrggBCvTRAMXFydf/pMls+g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:45 2025 by rpki-client