Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5989b5a-6ca7-4f3b-94d1-8295ab72632c.roa
File: c5989b5a-6ca7-4f3b-94d1-8295ab72632c.roa (raw, json)
Hash identifier: NRP0AW5oVI6bP4dBWWO8llSWz+KXqbjpWehN6dhpxRQ=
Subject key identifier: 71:7F:13:F6:CA:79:6C:4E:99:D8:0D:EC:39:ED:C3:61:A0:AB:58:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A51DBEA1EE249C046AC20744637AEB2E8DAF983
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5989b5a-6ca7-4f3b-94d1-8295ab72632c.roa
Signing time: Fri 14 Mar 2025 00:01:20 +0000
ROA not before: Fri 14 Mar 2025 00:01:20 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 162.213.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:51:db:ea:1e:e2:49:c0:46:ac:20:74:46:37:ae:b2:e8:da:f9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 14 00:01:20 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:9e:81:6e:be:87:5d:bf:62:c5:0e:48:2f:
cc:c9:cf:d8:1c:e1:78:61:93:83:eb:ea:76:4d:fc:
5f:40:47:ad:d8:22:b1:ea:2f:4b:59:88:fc:0c:01:
d8:35:88:8a:84:4f:f9:47:49:16:d8:59:6b:1a:53:
01:63:9e:8e:bf:5b:28:2f:c6:5d:a2:b2:fe:9f:19:
5a:29:80:32:55:e8:56:20:ed:d8:35:29:de:46:0b:
13:c1:23:58:65:6c:59:45:fc:24:49:6f:ad:39:9b:
60:9d:e7:d4:a2:71:e1:90:29:3c:6b:53:5c:e3:b6:
81:f8:41:93:57:29:a3:ef:a0:12:03:8f:52:55:5a:
2d:ec:ed:e2:71:96:ad:45:1c:eb:fe:a7:7e:8d:cb:
c9:38:36:f5:7a:87:42:53:48:e5:ac:c2:78:30:09:
98:8e:f5:09:54:9a:0f:a6:86:22:9d:27:79:5c:c7:
1e:ae:79:d8:cb:e6:14:b7:8a:f9:9a:52:16:34:5a:
4d:d6:df:ec:c3:48:ea:2d:be:9d:c1:fb:c3:9a:0b:
8c:eb:5c:80:d8:10:6a:ec:ae:60:3a:c3:b9:c4:71:
5b:1e:18:8c:61:12:af:c9:9a:93:2b:a1:c2:c6:10:
6a:4a:f8:4a:f8:91:d8:90:54:06:95:91:7a:43:c2:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7F:13:F6:CA:79:6C:4E:99:D8:0D:EC:39:ED:C3:61:A0:AB:58:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5989b5a-6ca7-4f3b-94d1-8295ab72632c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.213.233.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:00:2a:f2:ff:0e:4b:17:b6:5f:92:03:20:9a:b6:3c:f4:8c:
59:c8:eb:b2:4b:be:29:63:b4:45:a3:09:c0:58:15:05:35:a0:
df:aa:1e:ea:90:8e:d6:73:49:55:d4:18:3b:1d:a3:2f:71:09:
89:de:72:88:a0:00:ad:43:f0:0e:5d:94:f6:2c:07:77:2a:2f:
2f:40:e6:9b:69:e5:3c:78:97:96:4b:7e:14:b6:e7:34:db:58:
c1:80:65:2a:c7:49:89:75:31:b2:dd:91:7a:f0:08:22:13:dc:
c8:62:dc:0c:69:88:88:61:3d:c6:aa:ec:e1:e5:da:6b:04:a9:
3f:4f:bc:09:69:3f:61:46:70:10:f7:ea:96:12:dd:73:cc:cc:
87:b3:e8:88:e0:4f:9d:5d:5c:f5:13:20:fd:99:88:a4:0e:37:
65:50:9b:1f:0e:1d:08:32:0c:38:ea:a3:77:97:09:88:fa:3f:
a7:52:a2:64:eb:b8:8c:b8:65:b1:a0:9b:95:75:c5:10:01:36:
52:67:09:5a:bb:26:4e:6f:79:94:1c:d3:8e:a1:a7:6c:dc:a6:
08:02:80:96:c2:64:f7:d8:06:df:ea:29:63:ce:f8:28:7d:8a:
15:10:e5:c7:7c:a4:2a:29:da:30:4d:37:93:03:f1:5a:19:fa:
98:48:cc:ef
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGlHb6h7iScBGrCB0Rjeusuja+YMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE0MDAwMTIwWhcNMjUwNDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1Yzk1Y2ZiZWZiZTkwYWZhZjI5ZGFiYzM2NjQ3YjQ4NzMy
ZTRmNDU4MGVjNzNkZjUyMGI1Nzg3MTUwY2NjNDY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwz56Bbr6HXb9ixQ5IL8zJz9gc4Xhhk4Pr6nZN/F9AR63Y
IrHqL0tZiPwMAdg1iIqET/lHSRbYWWsaUwFjno6/Wygvxl2isv6fGVopgDJV6FYg
7dg1Kd5GCxPBI1hlbFlF/CRJb605m2Cd59SiceGQKTxrU1zjtoH4QZNXKaPvoBID
j1JVWi3s7eJxlq1FHOv+p36Ny8k4NvV6h0JTSOWswngwCZiO9QlUmg+mhiKdJ3lc
xx6uedjL5hS3ivmaUhY0Wk3W3+zDSOotvp3B+8OaC4zrXIDYEGrsrmA6w7nEcVse
GIxhEq/JmpMrocLGEGpK+Er4kdiQVAaVkXpDwu1FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcX8T9sp5bE6Z2A3sOe3DYaCrWCwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M1OTg5YjVhLTZjYTctNGYzYi05NGQxLTgyOTVhYjcyNjMyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACi1ekwDQYJKoZIhvcNAQELBQADggEBALgAKvL/DksXtl+SAyCatjz0jFnI
67JLviljtEWjCcBYFQU1oN+qHuqQjtZzSVXUGDsdoy9xCYnecoigAK1D8A5dlPYs
B3cqLy9A5ptp5Tx4l5ZLfhS25zTbWMGAZSrHSYl1MbLdkXrwCCIT3Mhi3AxpiIhh
Pcaq7OHl2msEqT9PvAlpP2FGcBD36pYS3XPMzIez6IjgT51dXPUTIP2ZiKQON2VQ
mx8OHQgyDDjqo3eXCYj6P6dSomTruIy4ZbGgm5V1xRABNlJnCVq7Jk5veZQc046h
p2zcpggCgJbCZPfYBt/qKWPO+Ch9ihUQ5cd8pCop2jBNN5MD8VoZ+phIzO8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:29 2025 by rpki-client