Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa
File: 8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa (raw, json)
Hash identifier: Oe8wcT5TeMdO13rT3B+PijIKd4ZopAezUW6OGg04mgc=
Subject key identifier: 98:E7:27:96:57:E9:42:1C:5D:35:DA:B9:C3:71:DA:16:BE:D7:6B:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F6B500EF0FDD30D944FB759FEF302BB1B542096
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa
Signing time: Wed 12 Mar 2025 00:00:41 +0000
ROA not before: Wed 12 Mar 2025 00:00:41 +0000
ROA not after: Wed 16 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.232.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6b:50:0e:f0:fd:d3:0d:94:4f:b7:59:fe:f3:02:bb:1b:54:20:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 12 00:00:41 2025 GMT
Not After : Apr 16 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f7:70:b4:75:aa:00:de:8f:6e:c7:5e:a0:9d:
4b:34:17:f2:f2:0a:76:d9:3d:f1:7a:47:14:17:85:
41:9a:16:ea:9a:b5:0b:99:f7:33:3d:b8:72:98:59:
0f:9f:ef:f6:93:ab:04:21:42:05:32:3a:73:09:81:
49:03:7a:fc:18:da:4a:96:9d:a2:2e:d5:ce:f0:e2:
ad:39:72:70:26:31:b0:1c:1e:c6:b5:be:ab:d0:e4:
b4:b4:06:3b:38:7b:d7:08:e9:ed:d2:69:69:d4:75:
2f:0d:08:cb:14:14:9c:df:c9:fe:51:32:e8:fe:c3:
2e:94:22:d5:96:b5:84:01:eb:9d:9f:9a:f8:21:3c:
29:55:1a:13:92:b7:25:d6:34:61:1c:89:3e:b4:db:
7b:f8:ed:7d:73:e0:e1:60:fa:ae:c2:6b:34:b7:e7:
2d:09:49:d7:99:a0:39:e4:13:30:c4:f8:a5:95:7b:
87:ae:18:a5:d5:46:4b:ba:cd:02:83:dc:27:76:e4:
dd:a6:d6:21:d7:ed:bc:a8:60:7c:48:13:40:93:eb:
2e:f7:7b:d7:9c:09:8d:fa:c0:10:54:f7:59:96:f6:
f0:81:19:e5:b7:02:d6:27:e0:d8:5c:ea:f7:d6:0d:
58:ba:a4:4f:73:3a:4a:33:fa:ff:16:47:bc:f0:31:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:27:96:57:E9:42:1C:5D:35:DA:B9:C3:71:DA:16:BE:D7:6B:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:73:fb:d6:61:ce:7f:90:c8:8c:cc:07:7a:e5:7a:40:bc:ca:
f7:6c:0d:92:93:5a:94:bb:10:bf:dd:ce:ed:b6:69:39:ae:56:
19:b8:a6:b8:05:99:68:9c:0d:00:aa:4a:4b:c2:e5:fd:d7:34:
4d:1d:5a:2d:79:f9:05:3d:fb:6f:47:99:a0:36:08:65:78:40:
c7:2e:f1:5d:84:72:26:21:3a:68:a4:79:85:f5:81:0d:f9:52:
17:7b:46:13:15:2d:43:0c:4d:b7:d3:b5:95:af:9d:e5:94:97:
bd:0c:c4:06:02:ee:b0:e6:61:67:93:a2:50:80:4b:4f:60:37:
47:14:39:1c:64:fd:51:cb:20:d0:9d:22:10:33:8a:80:c0:42:
dd:95:7d:30:9a:00:39:06:fb:41:a9:9a:d6:2e:a9:cc:0b:e2:
18:6b:18:47:34:43:55:9a:f1:11:8d:4d:81:f2:f9:67:ac:38:
8a:db:84:55:f8:d6:da:cc:5c:ef:8d:5e:a8:1a:5a:41:d7:7c:
ed:f7:0a:d5:63:2a:a9:be:cc:45:f1:76:28:59:fe:90:e6:a5:
b6:62:7d:bc:63:67:d9:df:70:22:fd:a2:46:ad:63:b8:fc:5c:
93:9f:5b:f4:19:47:e8:8c:2c:c8:13:10:58:10:71:bb:95:c2:
ef:8d:da:42
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUf2tQDvD90w2UT7dZ/vMCuxtUIJYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEyMDAwMDQxWhcNMjUwNDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZDA1ZGJhNGVjZThhNjZhYjNjY2NlNTJkYzhmMWI3MDg5
YzM1YTlkMWI2MmY4MjNlNjVlOTk2Yjk5ODU4M2VkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDx93C0daoA3o9ux16gnUs0F/LyCnbZPfF6RxQXhUGaFuqa
tQuZ9zM9uHKYWQ+f7/aTqwQhQgUyOnMJgUkDevwY2kqWnaIu1c7w4q05cnAmMbAc
Hsa1vqvQ5LS0Bjs4e9cI6e3SaWnUdS8NCMsUFJzfyf5RMuj+wy6UItWWtYQB652f
mvghPClVGhOStyXWNGEciT6023v47X1z4OFg+q7CazS35y0JSdeZoDnkEzDE+KWV
e4euGKXVRku6zQKD3Cd25N2m1iHX7byoYHxIE0CT6y73e9ecCY36wBBU91mW9vCB
GeW3AtYn4Nhc6vfWDVi6pE9zOkoz+v8WR7zwMQtpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUmOcnllfpQhxdNdq5w3HaFr7Xa/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg3MDljMTI5LWFjMDItNGFiYi1hYjI0LWZmY2Q2YTBhNTMwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP6DANBgkqhkiG9w0BAQsFAAOCAQEAZXP71mHOf5DIjMwHeuV6QLzK92wN
kpNalLsQv93O7bZpOa5WGbimuAWZaJwNAKpKS8Ll/dc0TR1aLXn5BT37b0eZoDYI
ZXhAxy7xXYRyJiE6aKR5hfWBDflSF3tGExUtQwxNt9O1la+d5ZSXvQzEBgLusOZh
Z5OiUIBLT2A3RxQ5HGT9Ucsg0J0iEDOKgMBC3ZV9MJoAOQb7Qama1i6pzAviGGsY
RzRDVZrxEY1NgfL5Z6w4ituEVfjW2sxc741eqBpaQdd87fcK1WMqqb7MRfF2KFn+
kOaltmJ9vGNn2d9wIv2iRq1juPxck59b9BlH6IwsyBMQWBBxu5XC743aQg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:50 2025 by rpki-client