Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6047ec3f-7f05-487d-9a1f-485fb38ab9fe.roa
File: 6047ec3f-7f05-487d-9a1f-485fb38ab9fe.roa (raw, json)
Hash identifier: kI0jEpHrE4fWo/lHp9to4+dVDIKU+1m+KwUj+z/B6iw=
Subject key identifier: 61:09:D6:FC:6E:66:84:F8:88:8F:FF:85:62:27:C1:31:C0:E0:0A:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2AE51E135140C364FE307030157B4DC874239646
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6047ec3f-7f05-487d-9a1f-485fb38ab9fe.roa
Signing time: Tue 04 Mar 2025 17:10:14 +0000
ROA not before: Tue 04 Mar 2025 17:10:14 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.112.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e5:1e:13:51:40:c3:64:fe:30:70:30:15:7b:4d:c8:74:23:96:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 17:10:14 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:b3:85:fe:1f:0d:c7:46:ac:33:ef:ae:c9:
12:9a:44:5b:8b:c0:a5:9a:91:a3:9b:2f:de:67:c6:
b7:4c:1c:18:57:c5:46:de:ad:03:a0:18:69:6e:32:
15:09:1d:1f:7e:3a:92:47:61:29:e2:17:9d:b7:a4:
62:05:c8:2f:57:42:cd:1a:58:1f:c7:48:ad:be:3d:
08:1d:6e:9e:52:53:5f:fd:7b:e1:b6:49:84:2b:2e:
9d:d5:a6:a6:2a:b0:7c:8f:40:91:3a:8b:5d:b6:0d:
db:88:2b:1f:5b:76:71:6f:83:18:ab:f2:a9:8b:87:
14:c3:e4:84:44:8e:63:33:1f:41:d7:fa:a4:43:d9:
18:3d:9a:b0:50:40:4a:1c:6a:63:e9:c4:8e:81:86:
04:44:f0:92:69:56:4d:be:02:96:a2:6c:be:f1:39:
17:84:8a:15:87:23:be:aa:c9:f1:2c:04:35:dc:25:
0b:19:df:93:77:d2:55:60:60:cd:c7:2b:0e:e5:21:
91:78:dd:b0:31:6a:57:2c:1f:c6:43:13:ac:57:84:
53:41:82:05:75:f5:cd:ae:91:df:45:a8:38:10:fa:
99:6a:07:e1:66:04:94:6f:b2:67:f8:0f:2b:3e:3d:
e3:96:a4:d1:a1:97:0c:a1:49:27:5e:06:21:9f:4a:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:D6:FC:6E:66:84:F8:88:8F:FF:85:62:27:C1:31:C0:E0:0A:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6047ec3f-7f05-487d-9a1f-485fb38ab9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:37:41:43:c6:1c:d0:08:2a:ef:1d:07:9a:4d:75:46:16:98:
16:c9:35:23:c9:f2:a4:5a:a4:19:ab:bb:c0:8e:dd:fe:71:57:
11:b8:4c:5e:12:08:0a:2f:0c:67:0e:fb:47:43:de:85:53:08:
7f:63:db:93:a1:9b:8a:3b:7d:7c:a8:1f:ad:3b:c1:c2:d7:52:
c7:f7:85:88:d6:16:c5:7b:bd:8e:14:73:03:78:55:ee:e1:f6:
8e:bf:e5:4f:a8:51:e8:cd:cb:51:a3:77:2f:de:02:dd:a6:93:
03:2b:71:b3:33:0d:13:2a:4a:7c:a1:b5:86:94:83:4c:05:a6:
7d:87:d1:fb:55:d6:59:d2:12:73:c1:a7:1b:64:f8:9c:af:a2:
df:0f:8e:d7:8e:88:36:53:49:e1:30:07:11:e0:1e:47:d0:d6:
11:3d:ae:fc:a5:72:47:47:b7:93:75:7f:bb:a7:94:88:c3:4d:
86:3a:79:1d:9b:42:d2:7c:19:f9:84:3c:2e:f5:a3:a6:43:d2:
42:f6:ba:cb:64:a1:2b:3e:47:f6:b5:1d:c8:19:40:0c:4f:b8:
13:ed:db:ef:a0:d2:34:c5:dc:63:08:cb:16:0d:a0:5a:8d:11:
81:16:cf:61:dc:b5:0d:5e:09:e9:f9:6b:be:5a:0c:ed:fa:14:
c6:e8:61:9c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKuUeE1FAw2T+MHAwFXtNyHQjlkYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA0MTcxMDE0WhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjcxZDM5NTZhMjliNjAzYjQzN2Q3ZjNlNmYwYmJkZjZl
ZTlkNmVmMTQ2YmE4YmQ3OTg1MWJkMzM5M2E0ODgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCHjrOF/h8Nx0asM++uyRKaRFuLwKWakaObL95nxrdMHBhX
xUberQOgGGluMhUJHR9+OpJHYSniF523pGIFyC9XQs0aWB/HSK2+PQgdbp5SU1/9
e+G2SYQrLp3VpqYqsHyPQJE6i122DduIKx9bdnFvgxir8qmLhxTD5IREjmMzH0HX
+qRD2Rg9mrBQQEocamPpxI6BhgRE8JJpVk2+ApaibL7xOReEihWHI76qyfEsBDXc
JQsZ35N30lVgYM3HKw7lIZF43bAxalcsH8ZDE6xXhFNBggV19c2ukd9FqDgQ+plq
B+FmBJRvsmf4Dys+PeOWpNGhlwyhSSdeBiGfShLVAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUYQnW/G5mhPiIj/+FYifBMcDgCmowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYwNDdlYzNmLTdmMDUtNDg3ZC05YTFmLTQ4NWZiMzhhYjlmZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2cDANBgkqhkiG9w0BAQsFAAOCAQEAAjdBQ8Yc0Agq7x0Hmk11RhaYFsk1
I8nypFqkGau7wI7d/nFXEbhMXhIICi8MZw77R0PehVMIf2Pbk6Gbijt9fKgfrTvB
wtdSx/eFiNYWxXu9jhRzA3hV7uH2jr/lT6hR6M3LUaN3L94C3aaTAytxszMNEypK
fKG1hpSDTAWmfYfR+1XWWdISc8GnG2T4nK+i3w+O146INlNJ4TAHEeAeR9DWET2u
/KVyR0e3k3V/u6eUiMNNhjp5HZtC0nwZ+YQ8LvWjpkPSQva6y2ShKz5H9rUdyBlA
DE+4E+3b76DSNMXcYwjLFg2gWo0RgRbPYdy1DV4J6flrvloM7foUxuhhnA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:41 2025 by rpki-client