Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ee7d9ea-c63a-4d74-90ef-368b77bdc888.roa
File: 8ee7d9ea-c63a-4d74-90ef-368b77bdc888.roa (raw, json)
Hash identifier: J9OT5vBKas7r1K0Z7IiybMZbqXsoezn76kri43k3KLw=
Subject key identifier: 8A:C7:AF:22:9F:C1:BE:17:16:D1:1E:9F:5A:E9:99:D5:69:44:41:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C8B777CF53F0E048990EB08BCADA06F2510F9BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ee7d9ea-c63a-4d74-90ef-368b77bdc888.roa
Signing time: Sat 08 Mar 2025 00:10:54 +0000
ROA not before: Sat 08 Mar 2025 00:10:54 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 168.102.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8b:77:7c:f5:3f:0e:04:89:90:eb:08:bc:ad:a0:6f:25:10:f9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 8 00:10:54 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:bc:24:f0:d3:7c:21:3e:50:cf:6b:ea:52:
52:30:84:9c:36:8d:cf:fa:b7:5c:e0:c3:4d:fa:33:
b6:5b:6b:22:eb:e9:5d:12:9b:42:8a:b2:93:b0:e1:
c5:f6:7a:0b:fa:43:30:a9:3b:d1:93:46:be:ee:5b:
8e:50:33:86:ff:9c:29:de:5e:c7:08:bb:e0:9c:c3:
d9:06:6b:6d:2f:1b:08:95:2f:4f:a2:1d:de:b8:fb:
66:58:8b:7e:00:56:1e:35:22:ed:25:d0:61:e2:11:
51:9c:f1:53:bd:d6:fd:73:f6:12:f5:7e:4f:01:b8:
50:55:ec:5b:80:92:40:2e:2e:2c:71:0e:57:53:4d:
66:6e:c2:94:64:92:41:d8:c9:d7:1b:58:6c:38:ce:
cb:94:04:c7:57:0a:2b:05:fa:01:3f:c9:43:1e:af:
d9:01:b4:de:39:d8:d7:7b:fc:84:a6:18:ad:48:af:
fc:38:f9:54:5f:18:39:7f:cb:81:cb:92:1a:d1:a8:
fc:e4:a4:f0:e2:6c:c9:d9:c4:6a:26:85:f1:a8:9b:
15:73:5b:62:30:94:08:31:37:38:4d:bf:66:b8:13:
9b:0e:88:01:d8:57:93:39:30:48:6a:48:ad:62:51:
17:62:89:82:ab:ee:bd:0c:40:16:25:c5:81:e7:fe:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:AF:22:9F:C1:BE:17:16:D1:1E:9F:5A:E9:99:D5:69:44:41:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ee7d9ea-c63a-4d74-90ef-368b77bdc888.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.102.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c1:ae:63:b0:f4:2b:e7:da:f4:ea:1c:96:5c:25:06:04:61:b3:
8c:8c:a8:9a:1e:a8:cc:98:7b:f9:e9:a6:52:7b:6b:58:55:0f:
42:06:54:fd:09:7d:02:c9:0d:c2:a5:8e:67:70:d8:d9:aa:c0:
6e:84:58:0f:f2:3d:70:0a:1e:21:64:1b:6c:f9:4c:24:9a:22:
b7:7e:e4:ec:12:86:54:0b:ea:3f:2a:a7:72:c2:57:27:db:55:
13:32:08:35:95:68:4a:65:f0:be:3e:ff:a5:91:5e:20:fd:5a:
4f:17:9d:b7:a5:f1:2a:fc:29:5c:cc:db:63:ce:63:19:8a:d5:
34:99:e7:c3:04:68:22:bb:36:46:46:72:a7:5e:62:5b:9f:b0:
c8:d2:9d:d6:a6:2b:84:40:8a:9f:c7:f1:21:60:5f:70:ce:2c:
33:3f:73:0e:ff:b3:bf:57:d0:9d:10:fb:c3:01:61:44:3c:f9:
72:5c:e5:ae:81:1e:a8:61:6c:86:ba:f4:57:a2:d7:a3:72:d3:
26:1b:37:76:b3:91:95:f6:1a:16:13:9b:03:52:6c:1f:36:09:
69:d2:2c:f2:f6:20:fe:8f:a3:7e:48:0c:21:ea:f2:a0:d9:67:
ca:0f:3a:c1:91:2a:2c:59:d3:78:e9:32:35:3e:73:dd:66:a4:
29:09:0d:c1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPIt3fPU/DgSJkOsIvK2gbyUQ+b4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA4MDAxMDU0WhcNMjUwNDEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNjdjMzEyZTdmZGNiN2Q1YTcxMzQ4Y2Y2ZWNmOWNiYWI3
Yzg3ZGI4OTFkNjc1NDQwOWViMGZkZjA2ZmNkNmY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDBLwk8NN8IT5Qz2vqUlIwhJw2jc/6t1zgw036M7ZbayLr
6V0Sm0KKspOw4cX2egv6QzCpO9GTRr7uW45QM4b/nCneXscIu+Ccw9kGa20vGwiV
L0+iHd64+2ZYi34AVh41Iu0l0GHiEVGc8VO91v1z9hL1fk8BuFBV7FuAkkAuLixx
DldTTWZuwpRkkkHYydcbWGw4zsuUBMdXCisF+gE/yUMer9kBtN452Nd7/ISmGK1I
r/w4+VRfGDl/y4HLkhrRqPzkpPDibMnZxGomhfGomxVzW2IwlAgxNzhNv2a4E5sO
iAHYV5M5MEhqSK1iURdiiYKr7r0MQBYlxYHn/to/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUisevIp/BvhcW0R6fWumZ1WlEQa4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhlZTdkOWVhLWM2M2EtNGQ3NC05MGVmLTM2OGI3N2JkYzg4OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAaoZsAwDQYJKoZIhvcNAQELBQADggEBAMGuY7D0K+fa9OocllwlBgRhs4yM
qJoeqMyYe/npplJ7a1hVD0IGVP0JfQLJDcKljmdw2NmqwG6EWA/yPXAKHiFkG2z5
TCSaIrd+5OwShlQL6j8qp3LCVyfbVRMyCDWVaEpl8L4+/6WRXiD9Wk8Xnbel8Sr8
KVzM22POYxmK1TSZ58MEaCK7NkZGcqdeYlufsMjSndamK4RAip/H8SFgX3DOLDM/
cw7/s79X0J0Q+8MBYUQ8+XJc5a6BHqhhbIa69Fei16Ny0yYbN3azkZX2GhYTmwNS
bB82CWnSLPL2IP6Po35IDCHq8qDZZ8oPOsGRKixZ03jpMjU+c91mpCkJDcE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:28:39 2025 by rpki-client