Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/529f0e1a-7620-45bf-8b48-555386b97be2.roa
File: 529f0e1a-7620-45bf-8b48-555386b97be2.roa (raw, json)
Hash identifier: LlNQAhkeS70E1+9GJ8kgzlA5reCRPKftYg3N0UkxVWk=
Subject key identifier: 49:BD:6C:09:BA:4A:CA:7A:8D:66:8F:11:10:9F:84:49:67:B6:A4:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D8B8666D0623E47F8B64332C6111B1F394D1174
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/529f0e1a-7620-45bf-8b48-555386b97be2.roa
Signing time: Tue 04 Mar 2025 17:20:55 +0000
ROA not before: Tue 04 Mar 2025 17:20:55 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.68.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8b:86:66:d0:62:3e:47:f8:b6:43:32:c6:11:1b:1f:39:4d:11:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 17:20:55 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:ce:7e:5c:29:1a:e4:e6:21:0b:9c:61:2e:
9c:6e:8b:a1:07:cd:e2:b8:97:79:78:6a:e5:47:92:
6f:2f:05:5c:5a:53:6f:dd:58:ae:3e:cc:3f:f1:d4:
70:3b:b5:0b:75:6d:09:cf:18:58:e0:8a:71:93:fa:
09:c3:b6:ef:1e:b0:ff:ef:d5:fe:99:b7:0b:b9:ae:
53:1f:5f:2d:16:7a:9e:13:a1:0e:fe:8e:6b:d0:b9:
05:7c:69:30:63:65:8b:32:eb:06:e6:cc:64:85:2a:
35:b0:c5:d8:b0:ca:40:93:79:aa:fd:cf:d2:3d:4f:
e5:59:fe:41:81:7f:e7:1e:3f:b4:99:a6:23:7d:53:
09:96:cd:b5:bd:6d:07:4c:68:ca:d1:db:70:fe:68:
8a:9c:1d:36:64:fd:f9:92:74:4f:ec:fd:20:6a:b7:
60:16:27:ec:5a:0f:b7:1b:e2:c0:e7:0d:58:3d:e2:
cb:4d:88:0b:d3:b2:57:93:71:4d:d9:3e:57:be:40:
c1:fa:4f:ab:51:49:f7:bd:dd:8d:b1:b4:23:e6:5e:
f0:1d:9b:3d:43:c9:0f:23:86:69:e6:88:68:09:8b:
a0:4f:34:e1:79:36:99:15:d6:6b:73:1f:ec:27:d6:
4c:92:27:38:b1:ca:c5:a2:93:2a:52:7b:f6:4f:68:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BD:6C:09:BA:4A:CA:7A:8D:66:8F:11:10:9F:84:49:67:B6:A4:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/529f0e1a-7620-45bf-8b48-555386b97be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.68.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:2f:80:19:e4:33:4d:52:23:5b:04:f5:67:a3:14:73:22:ed:
2e:5b:e3:5d:29:0c:33:69:7f:5d:b7:63:06:1d:76:94:ef:d5:
dc:22:59:dc:ff:8d:ff:ae:ad:dd:5f:69:e0:50:02:8b:b1:09:
a7:8d:e2:b0:87:d6:2f:69:21:65:8c:9f:cf:75:b2:c7:3c:d0:
bf:54:df:2d:e0:69:ef:05:4d:43:d1:d6:22:6e:a9:a7:47:08:
fd:31:3e:a9:d4:cd:90:5a:bf:bf:62:b3:eb:5b:97:60:57:12:
87:38:d9:79:54:77:cd:ef:96:fc:66:c2:a0:2e:93:6e:c0:d8:
87:05:27:f4:da:db:97:91:53:ce:23:4d:e4:d8:2c:b1:c0:e1:
4b:31:4d:0d:8d:10:27:c1:22:44:ca:16:e5:7a:0b:eb:04:9b:
64:2f:bb:95:de:f2:c0:e6:ac:d2:ee:f7:ee:bb:c1:31:99:b0:
f5:a8:de:ec:54:24:31:23:34:93:78:68:28:d1:5d:a9:fb:69:
00:18:4d:d3:29:a4:02:78:92:d4:a4:84:ae:08:db:32:c7:d5:
f3:03:bc:ff:bc:45:1e:67:2c:22:ef:ba:76:a2:15:4b:ec:9d:
1f:93:b9:93:b5:06:6c:94:30:06:f4:37:2f:0f:75:cc:28:da:
af:11:da:b1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXYuGZtBiPkf4tkMyxhEbHzlNEXQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA0MTcyMDU1WhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwOGQxOTNlMjY3YmQyZDgyMGEwMjI0ZTk0ZTMyMjFjY2Y3
ODYzNGQxY2VkN2YxY2NmYzY4ZDM5ZDI4N2FhYjM3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgDc5+XCka5OYhC5xhLpxui6EHzeK4l3l4auVHkm8vBVxa
U2/dWK4+zD/x1HA7tQt1bQnPGFjginGT+gnDtu8esP/v1f6Ztwu5rlMfXy0Wep4T
oQ7+jmvQuQV8aTBjZYsy6wbmzGSFKjWwxdiwykCTear9z9I9T+VZ/kGBf+ceP7SZ
piN9UwmWzbW9bQdMaMrR23D+aIqcHTZk/fmSdE/s/SBqt2AWJ+xaD7cb4sDnDVg9
4stNiAvTsleTcU3ZPle+QMH6T6tRSfe93Y2xtCPmXvAdmz1DyQ8jhmnmiGgJi6BP
NOF5NpkV1mtzH+wn1kySJzixysWikypSe/ZPaCUbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUSb1sCbpKynqNZo8REJ+ESWe2pCwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUyOWYwZTFhLTc2MjAtNDViZi04YjQ4LTU1NTM4NmI5N2JlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4RDANBgkqhkiG9w0BAQsFAAOCAQEATS+AGeQzTVIjWwT1Z6MUcyLtLlvj
XSkMM2l/XbdjBh12lO/V3CJZ3P+N/66t3V9p4FACi7EJp43isIfWL2khZYyfz3Wy
xzzQv1TfLeBp7wVNQ9HWIm6pp0cI/TE+qdTNkFq/v2Kz61uXYFcShzjZeVR3ze+W
/GbCoC6TbsDYhwUn9Nrbl5FTziNN5NgsscDhSzFNDY0QJ8EiRMoW5XoL6wSbZC+7
ld7ywOas0u737rvBMZmw9aje7FQkMSM0k3hoKNFdqftpABhN0ymkAniS1KSErgjb
MsfV8wO8/7xFHmcsIu+6dqIVS+ydH5O5k7UGbJQwBvQ3Lw91zCjarxHasQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:16:49 2025 by rpki-client