Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa
File: a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa (raw, json)
Hash identifier: aSy7M5kv9xULKcPOoh+MrcLmLKlR91EnesG0tn+3BtE=
Subject key identifier: 1A:C9:8C:27:82:9B:92:0D:EF:5B:EC:68:B3:5F:AD:55:FF:2D:8E:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35A6CE019B9866C3B4BDEAD761C35E3FD4BBD686
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa
Signing time: Tue 18 Mar 2025 00:01:09 +0000
ROA not before: Tue 18 Mar 2025 00:01:09 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.162.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a6:ce:01:9b:98:66:c3:b4:bd:ea:d7:61:c3:5e:3f:d4:bb:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 18 00:01:09 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:54:ee:f5:01:67:52:de:19:02:88:04:4b:
3f:af:c2:ec:56:a7:3f:c5:b7:22:3a:a3:2a:30:d3:
ac:25:34:e7:ce:ed:39:4f:5f:21:24:f3:5a:c4:f5:
48:47:96:d8:8f:e6:4f:75:00:eb:96:5d:1b:36:6e:
6e:66:f1:aa:23:4f:64:90:50:c5:67:22:c7:fa:6b:
00:42:5c:1b:f6:f6:eb:e2:49:ec:70:7d:16:1a:ee:
27:af:d2:bc:db:73:c7:c9:30:7b:3a:6a:aa:8f:93:
71:9a:ea:2f:0d:5d:be:41:62:d0:37:dd:01:1f:89:
19:1c:a1:68:e9:2e:cf:a8:06:3b:38:e2:c0:67:ae:
3e:89:14:68:05:91:5b:fd:21:9b:81:b2:fe:0d:1d:
b4:46:f2:9e:01:6a:78:99:f1:be:80:48:09:c1:a1:
26:cc:30:ea:e8:6a:9b:ab:7e:36:ca:6e:27:e3:2e:
54:e1:bb:21:9a:60:db:00:2b:4a:52:94:67:a6:bb:
52:78:3b:f4:f1:e3:b2:bc:62:08:5e:9e:37:de:e6:
52:30:41:6a:a0:99:24:60:f5:25:78:d9:42:05:41:
f8:6f:c8:54:15:b4:29:11:81:04:55:28:77:2b:5f:
b8:a5:fe:b6:a7:3e:94:02:be:79:ed:6b:c1:5d:63:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:8C:27:82:9B:92:0D:EF:5B:EC:68:B3:5F:AD:55:FF:2D:8E:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.162.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:1b:23:03:d2:8f:58:4b:49:3c:f8:e5:03:8d:e9:fa:1f:5d:
ac:a7:6c:94:ef:04:da:5c:c0:18:67:7d:50:35:d3:d7:b8:34:
8d:94:8d:ac:c7:b3:e1:b2:bb:7a:d3:50:70:f4:84:49:62:8d:
6a:e3:3e:6c:c2:6e:8d:e7:01:1f:0a:4c:77:1c:b4:60:0d:6b:
d8:64:64:96:0b:b5:c7:ec:5d:08:93:9c:aa:54:0f:05:93:a9:
6b:90:ec:17:4d:6a:e1:3a:18:22:e0:1b:9e:6b:dd:ab:5b:3a:
d9:7c:c6:a1:fc:5d:e2:cd:74:ab:fe:89:fa:5e:67:f8:26:13:
cf:76:ec:c3:7d:8a:78:2b:1c:d0:5c:0d:91:fe:8f:a3:24:6a:
07:44:5b:fe:ba:1e:99:b6:2c:8e:4f:71:eb:23:1e:45:b1:cf:
86:e7:06:16:df:60:c0:11:04:4f:80:5f:b5:9b:7d:82:f7:fb:
b0:ae:26:34:68:10:d1:d5:b5:a1:f6:01:75:1c:ba:7a:c0:5d:
d2:a3:36:d1:55:95:a0:6b:aa:37:c5:a9:a8:ef:7a:6b:42:81:
1d:14:1b:49:b1:27:41:14:63:12:44:fc:a9:33:1b:eb:c3:8c:
b8:37:fa:bb:f0:c9:3f:26:ec:82:2f:8b:e8:c8:08:dd:01:c8:
4a:07:5a:00
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNabOAZuYZsO0verXYcNeP9S71oYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE4MDAwMTA5WhcNMjUwNDIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNzI2N2E4YzBkMjExNWNkYTZkY2M0NDQ3MjFlOGE5Yzcy
MjNjZWM4YzcwMjg3OTQyMWM1NjcxM2IxMDBkOTc1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQConVTu9QFnUt4ZAogESz+vwuxWpz/FtyI6oyow06wlNOfO
7TlPXyEk81rE9UhHltiP5k91AOuWXRs2bm5m8aojT2SQUMVnIsf6awBCXBv29uvi
SexwfRYa7iev0rzbc8fJMHs6aqqPk3Ga6i8NXb5BYtA33QEfiRkcoWjpLs+oBjs4
4sBnrj6JFGgFkVv9IZuBsv4NHbRG8p4BaniZ8b6ASAnBoSbMMOroapurfjbKbifj
LlThuyGaYNsAK0pSlGemu1J4O/Tx47K8Yghenjfe5lIwQWqgmSRg9SV42UIFQfhv
yFQVtCkRgQRVKHcrX7il/ranPpQCvnnta8FdY40LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGsmMJ4Kbkg3vW+xos1+tVf8tjsswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzYzdmNzk5LTZjNTQtNGNhOC05N2NjLTNlNzEyNWNlNGU1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATRorAwDQYJKoZIhvcNAQELBQADggEBADwbIwPSj1hLSTz45QON6fofXayn
bJTvBNpcwBhnfVA109e4NI2UjazHs+Gyu3rTUHD0hElijWrjPmzCbo3nAR8KTHcc
tGANa9hkZJYLtcfsXQiTnKpUDwWTqWuQ7BdNauE6GCLgG55r3atbOtl8xqH8XeLN
dKv+ifpeZ/gmE8927MN9ingrHNBcDZH+j6MkagdEW/66Hpm2LI5PcesjHkWxz4bn
BhbfYMARBE+AX7WbfYL3+7CuJjRoENHVtaH2AXUcunrAXdKjNtFVlaBrqjfFqajv
emtCgR0UG0mxJ0EUYxJE/KkzG+vDjLg3+rvwyT8m7IIvi+jICN0ByEoHWgA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:49 2025 by rpki-client