Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7682c1c0-6fa3-49ec-a3ac-f422ddfe1f72.roa
File: 7682c1c0-6fa3-49ec-a3ac-f422ddfe1f72.roa (raw, json)
Hash identifier: y77iGwCVAWmsg4KIjxqRTgTZFxBjLX5FYsm8VMAT1Io=
Subject key identifier: 08:88:28:3E:C3:4E:74:FA:E2:1D:31:2B:7C:0B:01:7B:B3:D9:7B:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 05CF00C63AA9E8741A8B81F719B22FCCB3A93680
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7682c1c0-6fa3-49ec-a3ac-f422ddfe1f72.roa
Signing time: Fri 28 Mar 2025 16:32:00 +0000
ROA not before: Fri 28 Mar 2025 16:32:00 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb8:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:cf:00:c6:3a:a9:e8:74:1a:8b:81:f7:19:b2:2f:cc:b3:a9:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:32:00 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:a4:b5:89:13:5f:f4:24:a6:51:f2:a4:1b:
8a:14:c9:cf:30:5f:e3:34:b8:a3:cd:d2:45:3e:04:
83:96:65:75:e1:3f:6b:6b:30:5a:f6:f7:9b:a8:17:
ad:70:11:1c:10:48:37:a7:d5:d7:6e:13:e9:72:47:
be:6d:07:3f:c1:ea:c3:24:82:27:36:00:68:65:a2:
8c:3a:4b:94:69:74:a7:fe:76:c9:82:aa:18:b6:b4:
63:9d:02:d4:64:10:e0:70:4b:1c:26:57:ca:5c:9f:
4b:56:75:c5:11:6f:e2:14:a0:74:e4:6f:10:8c:dd:
82:dc:c1:70:9d:5d:45:ee:fc:32:cb:58:80:69:26:
74:dc:2d:8b:68:9f:82:9d:e1:f9:fe:b4:16:cb:5b:
af:87:38:56:3f:31:98:c4:e9:97:11:4a:fa:b3:28:
9d:fd:e5:e0:10:db:2b:85:a3:8d:a7:c3:d4:13:62:
7d:3b:d4:5c:6e:f8:9f:7c:f1:77:aa:bf:39:f8:60:
d6:c1:b4:d8:48:bd:8c:f5:32:3d:82:ff:75:bf:20:
f2:d4:cd:8a:3c:b5:c3:dd:f2:30:3a:43:54:d1:9b:
ee:0b:73:df:01:31:1e:4f:4f:35:5b:1c:cb:e5:7f:
98:7c:af:37:19:47:59:de:95:af:14:c5:ba:32:f0:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:88:28:3E:C3:4E:74:FA:E2:1D:31:2B:7C:0B:01:7B:B3:D9:7B:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7682c1c0-6fa3-49ec-a3ac-f422ddfe1f72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb8:2000::/40
Signature Algorithm: sha256WithRSAEncryption
90:4f:fd:5d:90:45:6c:7e:0c:3a:b5:96:8d:39:41:6f:bf:5b:
95:e6:ce:66:63:ff:67:2f:77:9f:27:ee:cb:53:f7:5f:81:a7:
c0:33:5f:fa:93:24:e9:df:55:de:eb:5d:f1:f1:f1:98:5c:ae:
d1:67:59:81:84:c9:46:b7:f4:62:3e:85:c1:a5:d3:81:d2:22:
83:a9:83:06:99:96:d9:d7:6a:6c:22:0d:4a:ba:01:6b:24:74:
a9:c0:bd:98:77:02:97:8d:8d:26:e0:33:d8:22:a4:c9:2f:b6:
a6:23:95:90:9c:47:be:0b:39:b7:cb:6e:d0:54:95:f2:fa:b7:
b6:09:21:57:d9:6f:43:04:d7:ed:f6:53:6e:f0:91:a8:8f:87:
44:42:1d:de:fd:4a:7c:db:57:a1:b9:17:e3:7d:5a:4a:90:77:
6c:0a:40:20:ae:fb:35:14:ec:8f:80:b2:b6:50:c6:48:4f:92:
14:ea:2b:8b:35:a5:50:aa:62:d2:29:6e:eb:cb:bc:64:6d:32:
73:83:25:32:98:27:c9:5b:4a:76:47:dc:76:2f:9f:c6:2d:b9:
63:e9:c6:e7:0d:8b:92:c5:5b:43:4e:b1:9a:65:3e:6a:de:4e:
c1:4d:10:23:d3:b8:59:1c:c8:3f:76:32:9d:dd:62:c9:1e:eb:
20:30:7f:35
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUBc8Axjqp6HQai4H3GbIvzLOpNoAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYzMjAwWhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YTU0ZWY0OTU3OWVhMTA0YWMyMjlhNWM1ZTdmYTc5ZGU5
ZWY4ODA5NDFmY2ZlZTJmYWMyMjRmMDJiOGI5NWI1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAn6S1iRNf9CSmUfKkG4oUyc8wX+M0uKPN0kU+BIOWZXXh
P2trMFr295uoF61wERwQSDen1dduE+lyR75tBz/B6sMkgic2AGhloow6S5RpdKf+
dsmCqhi2tGOdAtRkEOBwSxwmV8pcn0tWdcURb+IUoHTkbxCM3YLcwXCdXUXu/DLL
WIBpJnTcLYton4Kd4fn+tBbLW6+HOFY/MZjE6ZcRSvqzKJ395eAQ2yuFo42nw9QT
Yn071Fxu+J988Xeqvzn4YNbBtNhIvYz1Mj2C/3W/IPLUzYo8tcPd8jA6Q1TRm+4L
c98BMR5PTzVbHMvlf5h8rzcZR1nela8Uxboy8P+1AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUCIgoPsNOdPriHTErfAsBe7PZewUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc2ODJjMWMwLTZmYTMtNDllYy1hM2FjLWY0MjJkZGZlMWY3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+4IDANBgkqhkiG9w0BAQsFAAOCAQEAkE/9XZBFbH4MOrWWjTlBb79b
lebOZmP/Zy93nyfuy1P3X4GnwDNf+pMk6d9V3utd8fHxmFyu0WdZgYTJRrf0Yj6F
waXTgdIig6mDBpmW2ddqbCINSroBayR0qcC9mHcCl42NJuAz2CKkyS+2piOVkJxH
vgs5t8tu0FSV8vq3tgkhV9lvQwTX7fZTbvCRqI+HREId3v1KfNtXobkX431aSpB3
bApAIK77NRTsj4CytlDGSE+SFOorizWlUKpi0ilu68u8ZG0yc4MlMpgnyVtKdkfc
di+fxi25Y+nG5w2LksVbQ06xmmU+at5OwU0QI9O4WRzIP3Yynd1iyR7rIDB/NQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:13 2025 by rpki-client