Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e4fb981-8119-4aef-97f8-88c225def4ee.roa
File: 3e4fb981-8119-4aef-97f8-88c225def4ee.roa (raw, json)
Hash identifier: 9g5a1ceCTJTMdsrzKngsWIvAYeXUIsniycajQOOXlC8=
Subject key identifier: D7:2E:09:B9:C8:C2:6E:CC:0C:10:A3:91:E5:65:ED:CE:0E:2D:34:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5FCB2A1308D221968916955792521652A9F3BE34
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e4fb981-8119-4aef-97f8-88c225def4ee.roa
Signing time: Fri 28 Mar 2025 16:00:23 +0000
ROA not before: Fri 28 Mar 2025 16:00:23 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff7:7400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:cb:2a:13:08:d2:21:96:89:16:95:57:92:52:16:52:a9:f3:be:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:00:23 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:06:83:ad:88:75:7a:81:c7:b4:3c:52:74:87:
8d:ef:2f:37:b2:8e:cc:8d:1e:35:be:b0:ad:ba:61:
99:b7:ad:a7:fa:c0:a7:0a:c2:e6:cb:30:f2:ec:b0:
c6:33:5c:7b:a6:ef:c3:56:e6:3a:4a:97:bb:ac:34:
24:d2:0e:58:2f:d3:ff:e3:1e:dd:f1:8b:0a:62:bb:
61:ea:86:26:ae:4a:e1:e3:9e:a3:a9:e6:c6:a9:84:
1e:b5:4d:0b:aa:33:75:e5:9d:0a:3c:6d:53:7c:08:
4a:48:c3:4f:a1:97:2a:00:df:e3:2f:c2:45:6f:32:
1c:72:ec:30:62:04:50:ae:94:16:81:af:d6:70:ee:
04:a8:06:e7:3f:1c:0c:5c:d2:7b:81:99:dd:b5:61:
28:f5:1d:b3:62:b0:b9:59:46:14:dc:6f:a2:d0:d5:
31:e0:1e:6c:b9:fc:f1:ac:0e:f6:7d:ee:63:6a:27:
af:9b:e4:e6:15:e7:5e:60:56:37:f2:36:a4:d7:9e:
fc:81:8a:7a:46:6a:69:26:22:c3:87:e4:72:36:19:
bb:6d:06:78:5d:4c:cc:01:28:f0:37:39:f6:64:00:
94:40:48:8a:1c:fd:2e:d1:e0:e6:90:b0:ca:af:bb:
ce:58:73:f3:eb:ba:4e:43:23:23:cc:3a:dd:1f:a7:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2E:09:B9:C8:C2:6E:CC:0C:10:A3:91:E5:65:ED:CE:0E:2D:34:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e4fb981-8119-4aef-97f8-88c225def4ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:7400::/40
Signature Algorithm: sha256WithRSAEncryption
21:ec:49:d0:2b:52:a0:52:fd:1d:1e:2b:10:62:4d:61:0a:2e:
2f:b5:41:74:0a:d9:9e:de:c8:c9:74:3b:7e:ac:f7:ba:3b:33:
18:81:32:c4:56:02:89:e2:96:96:bd:80:a3:da:e8:b1:2a:24:
ef:42:f3:66:5a:9a:6d:79:63:5f:83:e1:4c:c4:69:f3:3a:f8:
f3:5f:77:d7:7f:3f:5c:2e:9b:d6:ae:74:b8:81:c1:86:e0:fe:
3c:a1:1d:7a:39:a5:b2:d8:5d:35:f2:6e:78:97:b4:ce:42:a5:
f4:c3:68:20:17:1c:45:7f:c4:ef:2f:cc:ff:57:19:a0:a2:29:
62:01:4f:32:31:7c:6e:04:5b:0a:bc:d4:80:97:44:3b:04:94:
2f:a9:29:a8:62:2a:76:c2:26:7c:28:d2:b1:5d:b9:ac:1d:b1:
4a:84:c6:c7:5b:6a:f6:97:8d:40:75:04:30:ae:29:2e:1c:40:
ca:0d:84:fd:a4:fa:06:c1:2f:10:88:65:0c:61:61:9a:d2:54:
67:00:ed:c3:65:4e:95:f2:a1:bc:ce:0b:27:a3:0d:88:ea:99:
32:92:35:12:01:ee:dd:f1:6d:2a:05:5a:4e:65:78:d4:c5:13:
c0:67:ce:e1:4a:f1:89:c6:ac:46:45:08:28:bc:42:f9:53:fd:
2a:f3:41:b8
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUX8sqEwjSIZaJFpVXklIWUqnzvjQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYwMDIzWhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTUzYzI2YzliNTQxZDA0YmFjMjU5NWNhNGIwNDc5ZGQ4
ZTkwMDRjM2U0ZjA5NWNlNzMwNmEzMDU1MzNlNjNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDyBoOtiHV6gce0PFJ0h43vLzeyjsyNHjW+sK26YZm3raf6
wKcKwubLMPLssMYzXHum78NW5jpKl7usNCTSDlgv0//jHt3xiwpiu2HqhiauSuHj
nqOp5saphB61TQuqM3XlnQo8bVN8CEpIw0+hlyoA3+MvwkVvMhxy7DBiBFCulBaB
r9Zw7gSoBuc/HAxc0nuBmd21YSj1HbNisLlZRhTcb6LQ1THgHmy5/PGsDvZ97mNq
J6+b5OYV515gVjfyNqTXnvyBinpGamkmIsOH5HI2GbttBnhdTMwBKPA3OfZkAJRA
SIoc/S7R4OaQsMqvu85Yc/Pruk5DIyPMOt0fp5lfAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU1y4JucjCbswMEKOR5WXtzg4tNMMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNlNGZiOTgxLTgxMTktNGFlZi05N2Y4LTg4YzIyNWRlZjRlZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/3dDANBgkqhkiG9w0BAQsFAAOCAQEAIexJ0CtSoFL9HR4rEGJNYQou
L7VBdArZnt7IyXQ7fqz3ujszGIEyxFYCieKWlr2Ao9rosSok70LzZlqabXljX4Ph
TMRp8zr48193138/XC6b1q50uIHBhuD+PKEdejmlsthdNfJueJe0zkKl9MNoIBcc
RX/E7y/M/1cZoKIpYgFPMjF8bgRbCrzUgJdEOwSUL6kpqGIqdsImfCjSsV25rB2x
SoTGx1tq9peNQHUEMK4pLhxAyg2E/aT6BsEvEIhlDGFhmtJUZwDtw2VOlfKhvM4L
J6MNiOqZMpI1EgHu3fFtKgVaTmV41MUTwGfO4UrxicasRkUIKLxC+VP9KvNBuA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:13 2025 by rpki-client