Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/696c1b1e-0246-458d-a96e-56b6b29e333d.roa
File: 696c1b1e-0246-458d-a96e-56b6b29e333d.roa (raw, json)
Hash identifier: 6atXk3/q7nC5bsUT//DGnRhln4LJEUxSDBAHocpqbH0=
Subject key identifier: 35:33:5E:33:2C:6C:EB:B3:FB:28:07:52:23:74:86:C7:F1:4D:91:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A50D25739367246CC43F30EBE5B0D8038FED185
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/696c1b1e-0246-458d-a96e-56b6b29e333d.roa
Signing time: Wed 05 Mar 2025 00:21:17 +0000
ROA not before: Wed 05 Mar 2025 00:21:17 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:50:d2:57:39:36:72:46:cc:43:f3:0e:be:5b:0d:80:38:fe:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 5 00:21:17 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:f4:e0:50:91:54:7b:1a:49:4c:cc:d2:e2:
15:68:57:34:e9:fb:eb:77:b9:4a:c2:73:66:e0:2c:
11:ed:56:a4:bf:77:bd:96:dc:f0:af:98:ba:5e:02:
c1:f8:58:a2:01:48:09:91:2f:29:83:95:56:9c:88:
05:54:68:6c:92:5c:7b:0c:60:38:96:11:3d:db:43:
8f:57:20:fa:61:9f:d9:75:a0:27:95:5b:ec:1e:dd:
a6:d9:8f:ac:79:03:12:c1:0c:ca:5b:45:85:66:70:
21:f1:eb:7f:58:ea:9f:39:71:b9:31:c7:e9:ad:06:
ec:47:3a:33:db:b9:8d:e8:26:96:97:dc:d9:fb:f6:
d1:da:72:e2:9e:24:ea:2b:23:81:bb:53:9a:c0:35:
ed:b1:31:97:db:bd:75:f9:9d:a1:7c:02:71:87:80:
17:89:12:e6:20:cf:9a:b7:fe:31:f4:2c:39:07:9f:
cb:b0:86:e7:14:fa:c7:bd:31:d1:2a:f3:5c:f2:ef:
5c:e0:98:10:48:c2:36:33:08:8a:2c:cc:59:67:4f:
ef:97:57:01:7e:66:de:69:36:53:5c:6f:9c:31:d7:
b7:ea:12:fd:ca:ec:bc:d0:b6:80:42:c6:bb:57:4e:
75:0e:37:ea:27:b6:85:60:cf:33:a9:29:1b:16:47:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:33:5E:33:2C:6C:EB:B3:FB:28:07:52:23:74:86:C7:F1:4D:91:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/696c1b1e-0246-458d-a96e-56b6b29e333d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:66:5e:b4:8c:67:87:26:4e:de:af:7b:d5:cd:1b:6f:d2:03:
33:52:a7:37:15:79:f0:e2:9a:9b:67:80:11:f4:ca:fd:2a:ce:
4f:2f:75:9d:7d:69:02:fa:62:91:cc:8a:89:97:70:3f:c6:ea:
8c:d0:49:1e:ae:98:7c:ad:f1:3b:1d:90:a3:af:c0:8b:ca:b4:
5a:3e:a1:f4:64:cd:9d:ab:ed:bf:8f:b9:8e:e4:f3:81:e0:40:
21:0c:2d:9e:40:ed:29:3e:65:b8:4f:bc:87:c9:45:30:17:98:
85:9f:26:f2:35:94:43:c4:9d:df:31:01:84:09:b4:99:70:6b:
45:12:29:a6:59:de:7e:d7:7d:0c:37:ff:36:c2:1d:2c:dc:18:
c7:8d:be:2b:d8:ce:4f:e4:48:84:f7:38:47:5f:a1:03:9e:05:
22:9d:0e:12:3f:f0:82:e2:18:1f:ca:c9:0a:c9:33:11:44:66:
93:a2:ac:f3:b7:09:7f:2a:b1:44:18:48:ec:b8:f8:ac:30:70:
0f:48:25:a4:b1:0e:9b:11:0b:19:eb:dc:fc:5f:86:d4:d1:02:
7e:09:15:65:f4:d9:fc:cc:3a:99:76:0d:5b:ab:73:5c:af:96:
9a:83:8e:8d:ba:df:b7:75:cd:c1:06:ce:4a:77:be:e4:2a:5b:
01:3b:48:48
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGlDSVzk2ckbMQ/MOvlsNgDj+0YUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA1MDAyMTE3WhcNMjUwNDA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMGZhZjA5OWViNjU3MjE0MGZiODkyMDg3NmJhZTcwYTNm
NDlkMDY5ZDM1NDBiOWNkMGM2ZTI4YjE5NmEyYmMxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDU9fTgUJFUexpJTMzS4hVoVzTp++t3uUrCc2bgLBHtVqS/
d72W3PCvmLpeAsH4WKIBSAmRLymDlVaciAVUaGySXHsMYDiWET3bQ49XIPphn9l1
oCeVW+we3abZj6x5AxLBDMpbRYVmcCHx639Y6p85cbkxx+mtBuxHOjPbuY3oJpaX
3Nn79tHacuKeJOorI4G7U5rANe2xMZfbvXX5naF8AnGHgBeJEuYgz5q3/jH0LDkH
n8uwhucU+se9MdEq81zy71zgmBBIwjYzCIoszFlnT++XVwF+Zt5pNlNcb5wx17fq
Ev3K7LzQtoBCxrtXTnUON+ontoVgzzOpKRsWRzBHAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUNTNeMyxs67P7KAdSI3SGx/FNkeswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY5NmMxYjFlLTAyNDYtNDU4ZC1hOTZlLTU2YjZiMjllMzMzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQRjANBgkqhkiG9w0BAQsFAAOCAQEAiWZetIxnhyZO3q971c0bb9IDM1Kn
NxV58OKam2eAEfTK/SrOTy91nX1pAvpikcyKiZdwP8bqjNBJHq6YfK3xOx2Qo6/A
i8q0Wj6h9GTNnavtv4+5juTzgeBAIQwtnkDtKT5luE+8h8lFMBeYhZ8m8jWUQ8Sd
3zEBhAm0mXBrRRIpplneftd9DDf/NsIdLNwYx42+K9jOT+RIhPc4R1+hA54FIp0O
Ej/wguIYH8rJCskzEURmk6Ks87cJfyqxRBhI7Lj4rDBwD0glpLEOmxELGevc/F+G
1NECfgkVZfTZ/Mw6mXYNW6tzXK+WmoOOjbrft3XNwQbOSne+5CpbATtISA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:11 2025 by rpki-client