Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa
File: 7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa (raw, json)
Hash identifier: uH1/ab+diCF/XiF/ImtfPEf8Zwh8VkdQyujAVSoyLj4=
Subject key identifier: 0E:D8:63:53:15:FC:CE:A2:36:FE:06:95:D6:CB:19:69:C8:12:0B:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54F3EB7A4C1DAE039D3434DBBE9D169498C704E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa
Signing time: Fri 21 Mar 2025 00:20:29 +0000
ROA not before: Fri 21 Mar 2025 00:20:29 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f3:eb:7a:4c:1d:ae:03:9d:34:34:db:be:9d:16:94:98:c7:04:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:20:29 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:4b:eb:61:64:98:0c:d6:d3:02:b6:09:83:
81:46:eb:21:84:f8:cd:71:e7:c7:fc:68:fb:3b:89:
d5:91:b5:77:8c:14:6e:a6:7c:b3:1f:d5:30:71:1b:
91:a3:b3:22:89:c0:59:b9:5c:f0:d5:bd:a0:ab:2d:
13:ce:34:e0:3b:72:a9:e6:ca:12:3d:c3:22:b6:1e:
21:68:0c:01:1a:3b:b2:01:41:56:db:9b:bd:73:aa:
39:8d:8a:e5:96:9b:56:f6:c5:20:11:b0:d4:eb:33:
fc:f4:38:61:bb:4e:7f:e6:29:b5:24:6e:93:df:3b:
17:b6:e5:96:16:af:31:00:37:5d:02:06:7c:68:76:
16:e6:0c:77:e3:a7:76:f2:85:4b:c7:03:28:bb:f2:
e0:45:08:2d:eb:d3:d3:86:ba:57:98:bf:dd:02:35:
6f:47:c1:e5:76:4a:4e:2b:7c:a8:63:a8:53:da:f9:
80:0a:73:6d:35:18:e8:23:1f:00:29:4b:6f:1e:8c:
8f:a0:1b:88:f8:89:02:8c:91:89:8c:71:ef:d6:d3:
96:67:90:c7:4f:64:ef:b0:46:47:eb:1b:a5:05:87:
eb:61:00:29:22:d6:20:76:13:b1:37:33:2a:90:4c:
a3:e3:85:77:b0:9b:28:7f:ae:6f:ca:90:7f:ba:17:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D8:63:53:15:FC:CE:A2:36:FE:06:95:D6:CB:19:69:C8:12:0B:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.18.0/24
Signature Algorithm: sha256WithRSAEncryption
25:43:b2:6a:6d:a9:d6:68:3b:b0:b3:db:c1:9a:12:cc:e4:e1:
d4:27:55:88:68:7c:5d:4f:74:bd:42:be:d0:df:ce:69:01:c1:
96:1f:0b:12:f5:21:27:58:4a:d0:b5:84:71:2d:43:45:08:58:
9b:f7:a3:fe:92:1a:94:f7:6c:39:1d:7d:d0:d9:6b:d3:01:61:
84:62:41:87:96:f4:a2:85:63:ab:08:57:4c:60:78:ac:9d:aa:
78:e5:4a:e9:90:b5:94:a2:62:80:31:c8:99:10:c1:6e:21:d3:
02:5d:de:4a:1c:95:4d:4e:20:61:95:b2:49:c2:7d:72:ec:59:
49:77:d9:54:33:17:22:8b:ae:93:59:6b:46:a3:da:40:30:d2:
28:dc:03:cf:5b:95:4a:30:bf:c7:b6:22:6a:b5:2b:e8:44:a2:
eb:15:00:65:7c:86:e4:a1:61:08:56:92:35:3c:81:94:f5:88:
fc:4c:74:b6:d2:07:28:ba:b4:ad:f2:ed:30:60:0f:36:e8:c1:
0a:f2:f1:21:60:9e:e9:25:f2:73:71:2a:c5:a6:77:c2:38:d5:
05:f5:56:11:0f:a5:44:78:55:d9:13:35:3a:44:8d:d9:ef:aa:
df:13:dc:da:24:87:31:31:bb:93:68:de:ff:89:83:c1:af:2a:
4f:04:bb:c6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVPPrekwdrgOdNDTbvp0WlJjHBOEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDAyMDI5WhcNMjUwNDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzc1N2UwMmE0ODhkYTY1OTdmOTQyODRhMmUzOWY5YjNm
YjljMGExODU0MzQxNDcxNzUyNjViOGExYjdiNDYyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIakvrYWSYDNbTArYJg4FG6yGE+M1x58f8aPs7idWRtXeM
FG6mfLMf1TBxG5GjsyKJwFm5XPDVvaCrLRPONOA7cqnmyhI9wyK2HiFoDAEaO7IB
QVbbm71zqjmNiuWWm1b2xSARsNTrM/z0OGG7Tn/mKbUkbpPfOxe25ZYWrzEAN10C
BnxodhbmDHfjp3byhUvHAyi78uBFCC3r09OGuleYv90CNW9HweV2Sk4rfKhjqFPa
+YAKc201GOgjHwApS28ejI+gG4j4iQKMkYmMce/W05ZnkMdPZO+wRkfrG6UFh+th
ACki1iB2E7E3MyqQTKPjhXewmyh/rm/KkH+6F0WvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDthjUxX8zqI2/gaV1ssZacgSC9cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc1NjFhNzAwLTBkYTYtNGY0ZC05ZTNlLTk2YTAxMGM3Y2I5MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjlhIwDQYJKoZIhvcNAQELBQADggEBACVDsmptqdZoO7Cz28GaEszk4dQn
VYhofF1PdL1CvtDfzmkBwZYfCxL1ISdYStC1hHEtQ0UIWJv3o/6SGpT3bDkdfdDZ
a9MBYYRiQYeW9KKFY6sIV0xgeKydqnjlSumQtZSiYoAxyJkQwW4h0wJd3koclU1O
IGGVsknCfXLsWUl32VQzFyKLrpNZa0aj2kAw0ijcA89blUowv8e2Imq1K+hEousV
AGV8huShYQhWkjU8gZT1iPxMdLbSByi6tK3y7TBgDzbowQry8SFgnukl8nNxKsWm
d8I41QX1VhEPpUR4VdkTNTpEjdnvqt8T3NokhzExu5No3v+Jg8GvKk8Eu8Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:58 2025 by rpki-client