Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae00b9c6-280e-4f3b-aa76-fa17a628f5ec.roa
File: ae00b9c6-280e-4f3b-aa76-fa17a628f5ec.roa (raw, json)
Hash identifier: bDyRnCCzuJl7bv+PILCLlPrJqvQamPluCLokjP+ZWNc=
Subject key identifier: D9:BA:08:71:4D:A9:BC:3B:BF:E3:09:82:C2:8D:76:55:13:F8:54:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 47B97B953E0268923310BD69377190638742D9DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae00b9c6-280e-4f3b-aa76-fa17a628f5ec.roa
Signing time: Tue 25 Mar 2025 17:40:27 +0000
ROA not before: Tue 25 Mar 2025 17:40:27 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:8020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b9:7b:95:3e:02:68:92:33:10:bd:69:37:71:90:63:87:42:d9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 25 17:40:27 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:2b:1c:7d:69:e6:54:be:69:bf:f0:78:a5:
52:39:f2:70:df:5f:b1:b7:98:78:b5:03:91:cb:32:
7b:a5:6b:e3:2c:d9:30:04:29:99:fc:80:6f:68:31:
32:0b:df:81:0a:0d:a5:ed:2d:44:84:fa:77:aa:b6:
7e:d2:d0:d7:eb:bb:9b:10:a7:f5:ce:17:01:32:71:
d4:d4:5d:bf:90:c6:43:3f:ab:d5:e9:a3:09:f7:8b:
3d:7e:89:8d:7f:f9:c3:ba:5b:e5:e6:16:d0:c4:f2:
a2:c9:e1:20:00:65:dd:bf:3d:3f:57:89:de:e2:e3:
d6:8f:b5:9f:12:12:64:0a:23:4e:3e:67:10:db:56:
0c:9f:bd:22:4a:70:a1:9b:b0:2c:b2:5e:c8:ac:db:
4b:d3:02:65:35:2e:6f:d1:8f:f8:f5:82:88:05:0d:
5a:89:20:16:8c:30:e3:34:11:64:6e:49:ff:2c:0d:
d4:c1:59:28:fe:62:d2:6c:b6:f0:e2:84:7d:e8:69:
e8:47:0c:0e:59:8e:43:74:e2:61:91:5c:8a:d7:36:
ca:8c:4f:94:af:53:5f:a3:19:80:39:7f:14:73:df:
98:04:24:9b:4d:ec:0a:4d:49:7a:80:bb:0f:c9:bd:
d6:73:a6:16:22:58:b7:64:e7:5a:d4:f9:aa:4d:31:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BA:08:71:4D:A9:BC:3B:BF:E3:09:82:C2:8D:76:55:13:F8:54:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae00b9c6-280e-4f3b-aa76-fa17a628f5ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:8020::/48
Signature Algorithm: sha256WithRSAEncryption
54:8e:8e:bf:31:c4:b7:af:83:cf:e0:99:60:2c:09:8d:8f:8e:
c2:02:65:eb:f8:7f:80:c7:e7:3a:be:a9:45:6c:4e:11:fe:b4:
3a:27:f4:1c:3d:78:97:ec:c7:93:c8:51:d9:7d:37:5e:6d:39:
b6:aa:af:25:e9:43:6d:71:8c:c3:46:e4:24:30:fc:4d:61:72:
64:34:ef:bd:25:09:c9:09:a1:8e:5d:b1:9a:09:ae:1d:da:ef:
e5:49:62:a4:ca:0b:16:77:9b:ca:aa:5e:20:63:17:e6:23:d8:
fd:96:79:02:00:54:5e:8f:2c:ce:1c:2a:59:52:dd:23:88:2e:
fa:96:9c:24:e5:26:8d:7a:2c:c0:a2:70:db:08:6b:e3:0a:81:
5e:64:38:be:a4:14:82:56:a9:58:65:6c:eb:e9:46:d0:25:4f:
db:25:6d:88:b4:79:d4:96:2a:38:aa:15:c6:a5:7b:db:e1:7c:
de:c3:76:8d:b1:f1:d3:7f:82:c3:1a:22:0e:43:6f:4d:12:4b:
97:f3:45:70:b3:78:2c:ef:40:4a:94:94:22:d6:04:d7:90:6d:
2b:33:72:b3:c3:49:01:3e:ed:6a:57:85:57:c2:4f:70:94:be:
c5:b8:c3:8d:49:69:bf:4f:3b:7f:1f:c7:cc:06:41:fe:a9:1a:
20:86:33:f0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUR7l7lT4CaJIzEL1pN3GQY4dC2d8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTc0MDI3WhcNMjUwNDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZWM2NDE2ODhkZDg2NjJjMjA2Nzc5ZjRiOGFmNWNkMjI4
ZWIyNTczMWVlMTAwMTk2YTNhMDY4NmIyMGQ1ZDA0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTOyscfWnmVL5pv/B4pVI58nDfX7G3mHi1A5HLMnula+Ms
2TAEKZn8gG9oMTIL34EKDaXtLUSE+neqtn7S0Nfru5sQp/XOFwEycdTUXb+QxkM/
q9Xpown3iz1+iY1/+cO6W+XmFtDE8qLJ4SAAZd2/PT9Xid7i49aPtZ8SEmQKI04+
ZxDbVgyfvSJKcKGbsCyyXsis20vTAmU1Lm/Rj/j1gogFDVqJIBaMMOM0EWRuSf8s
DdTBWSj+YtJstvDihH3oaehHDA5ZjkN04mGRXIrXNsqMT5SvU1+jGYA5fxRz35gE
JJtN7ApNSXqAuw/JvdZzphYiWLdk51rU+apNMQGbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU2boIcU2pvDu/4wmCwo12VRP4VL8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FlMDBiOWM2LTI4MGUtNGYzYi1hYTc2LWZhMTdhNjI4ZjVlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/ygCAwDQYJKoZIhvcNAQELBQADggEBAFSOjr8xxLevg8/gmWAsCY2P
jsICZev4f4DH5zq+qUVsThH+tDon9Bw9eJfsx5PIUdl9N15tObaqryXpQ21xjMNG
5CQw/E1hcmQ0770lCckJoY5dsZoJrh3a7+VJYqTKCxZ3m8qqXiBjF+Yj2P2WeQIA
VF6PLM4cKllS3SOILvqWnCTlJo16LMCicNsIa+MKgV5kOL6kFIJWqVhlbOvpRtAl
T9slbYi0edSWKjiqFcale9vhfN7Ddo2x8dN/gsMaIg5Db00SS5fzRXCzeCzvQEqU
lCLWBNeQbSszcrPDSQE+7WpXhVfCT3CUvsW4w41Jab9PO38fx8wGQf6pGiCGM/A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:40 2025 by rpki-client