Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4401cca8-5964-48b1-b1b5-2ab2021ddf02.roa
File: 4401cca8-5964-48b1-b1b5-2ab2021ddf02.roa (raw, json)
Hash identifier: KJ/aXG+TeF1vcMRLxGJSCAs6ZbYMbFHlW8MwWDZnunM=
Subject key identifier: 4B:0C:FF:F6:2F:D7:BD:22:4B:50:B6:D2:03:76:51:6A:4E:6D:EF:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24A026E8D3E551D9FFDF79991A5A72BB3A45900A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4401cca8-5964-48b1-b1b5-2ab2021ddf02.roa
Signing time: Sat 08 Mar 2025 00:10:13 +0000
ROA not before: Sat 08 Mar 2025 00:10:13 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a0:26:e8:d3:e5:51:d9:ff:df:79:99:1a:5a:72:bb:3a:45:90:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 8 00:10:13 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:e8:10:30:f8:31:93:37:ce:17:7b:e8:71:
9d:92:24:c3:8d:9b:aa:07:88:7f:5c:a5:77:b2:9c:
df:da:4c:2d:23:a9:cb:b5:ae:e3:13:ea:13:7b:7f:
07:aa:eb:44:42:0d:44:eb:04:65:32:26:43:f6:ff:
ef:68:dc:02:d4:7d:9c:39:ec:c0:67:f3:02:0e:12:
2b:4c:08:8f:47:80:d5:a6:c5:de:90:c5:26:0d:35:
9a:ab:d5:1d:c7:34:0d:af:63:6e:55:29:bb:ed:4e:
89:52:e6:ad:77:ea:18:7a:52:2a:61:30:85:bd:f5:
3f:56:ea:67:30:a1:bf:cf:f2:cd:f5:f5:b9:cb:47:
97:78:61:e6:12:0c:de:4a:95:49:b9:a2:87:31:60:
f8:51:b9:d7:6f:04:8f:6e:52:f6:79:dd:e9:69:94:
5d:b3:0d:ec:bf:2d:07:17:84:a1:a5:0c:a9:38:3b:
ec:73:fc:c7:81:0e:ae:31:b4:9e:1e:dd:a7:ea:d4:
e6:5e:8b:fc:f2:2a:58:77:f0:0b:5b:92:13:8e:2a:
78:57:b8:b3:41:77:5c:46:4f:ac:3c:b6:ae:2b:00:
e8:13:7c:95:96:02:39:5a:c7:5c:61:ee:4d:7f:dd:
cd:8a:64:90:69:fb:98:8a:ca:ea:c8:a2:57:91:b2:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:FF:F6:2F:D7:BD:22:4B:50:B6:D2:03:76:51:6A:4E:6D:EF:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4401cca8-5964-48b1-b1b5-2ab2021ddf02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d6:59:21:b8:15:1b:93:fd:b7:60:36:96:a1:a9:44:1b:c5:6e:
3f:d7:2a:f7:80:a0:48:53:d2:01:52:7d:1a:75:c9:fb:7b:23:
df:94:42:6b:d2:6f:c9:ef:6f:46:55:df:10:c2:b2:26:a4:ff:
0c:40:57:01:b5:d4:2c:fc:93:63:e0:89:6f:13:2f:4a:5a:07:
5e:02:4b:9a:e3:9f:32:44:0d:95:f8:1e:0e:7e:c1:e8:0a:ed:
62:bc:0c:a9:ac:07:e8:4d:37:ff:f8:67:51:2b:4b:c0:c7:0a:
bb:95:cc:63:26:54:78:19:74:35:43:88:a1:4d:a0:aa:be:d8:
0e:78:61:2d:04:ed:51:a4:2f:72:78:73:65:16:fa:c5:8e:4a:
72:2a:4e:06:1b:b4:81:f8:64:4e:60:dd:5c:ff:b7:1e:20:12:
1c:09:c1:8b:6c:47:19:7f:ef:aa:01:5e:54:d0:91:f0:87:70:
98:da:2b:8a:47:60:b7:79:b9:56:f6:10:bb:16:b1:f6:a5:e5:
e9:f3:03:ba:b3:d6:3b:c3:42:40:6a:04:6c:1e:ef:34:63:c0:
2a:f0:7e:ed:17:8a:d6:10:53:c0:ce:43:87:37:e8:3a:d2:3b:
ff:94:47:9d:7a:a8:5b:71:ae:4e:4b:57:ae:81:31:1d:a3:7d:
36:15:cf:cf
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJKAm6NPlUdn/33mZGlpyuzpFkAowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA4MDAxMDEzWhcNMjUwNDEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjOGQ2NWEyMmYxYjI3ODcwY2UwMmFlZGZmMTcyN2E0YTlj
MDg5NGMxZmI1N2FlMmRiMGJmNmY3ODZlZTA5Njc4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC26OgQMPgxkzfOF3vocZ2SJMONm6oHiH9cpXeynN/aTC0j
qcu1ruMT6hN7fweq60RCDUTrBGUyJkP2/+9o3ALUfZw57MBn8wIOEitMCI9HgNWm
xd6QxSYNNZqr1R3HNA2vY25VKbvtTolS5q136hh6UiphMIW99T9W6mcwob/P8s31
9bnLR5d4YeYSDN5KlUm5oocxYPhRuddvBI9uUvZ53elplF2zDey/LQcXhKGlDKk4
O+xz/MeBDq4xtJ4e3afq1OZei/zyKlh38AtbkhOOKnhXuLNBd1xGT6w8tq4rAOgT
fJWWAjlax1xh7k1/3c2KZJBp+5iKyurIoleRsuo1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUSwz/9i/XvSJLULbSA3ZRak5t70UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ0MDFjY2E4LTU5NjQtNDhiMS1iMWI1LTJhYjIwMjFkZGYwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP8DANBgkqhkiG9w0BAQsFAAOCAQEA1lkhuBUbk/23YDaWoalEG8VuP9cq
94CgSFPSAVJ9GnXJ+3sj35RCa9Jvye9vRlXfEMKyJqT/DEBXAbXULPyTY+CJbxMv
SloHXgJLmuOfMkQNlfgeDn7B6ArtYrwMqawH6E03//hnUStLwMcKu5XMYyZUeBl0
NUOIoU2gqr7YDnhhLQTtUaQvcnhzZRb6xY5KcipOBhu0gfhkTmDdXP+3HiASHAnB
i2xHGX/vqgFeVNCR8IdwmNorikdgt3m5VvYQuxax9qXl6fMDurPWO8NCQGoEbB7v
NGPAKvB+7ReK1hBTwM5DhzfoOtI7/5RHnXqoW3GuTktXroExHaN9NhXPzw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:31 2025 by rpki-client