Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c810fdb7-9ce3-489a-afcf-63f1e1f4b69f.roa
File: c810fdb7-9ce3-489a-afcf-63f1e1f4b69f.roa (raw, json)
Hash identifier: ze6X5ZJFfvR77ID2+HVn3beCmpFjWvEi05i4C0sY50o=
Subject key identifier: B1:42:19:EB:C8:54:1F:86:26:68:2E:A4:25:DA:2E:B6:77:C8:D4:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 432FFAEA339189D644C7593F9EE5B95D7B6912AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c810fdb7-9ce3-489a-afcf-63f1e1f4b69f.roa
Signing time: Fri 28 Mar 2025 00:51:05 +0000
ROA not before: Fri 28 Mar 2025 00:51:05 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:a400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2f:fa:ea:33:91:89:d6:44:c7:59:3f:9e:e5:b9:5d:7b:69:12:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:51:05 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:79:c5:05:57:a2:4d:46:51:81:9d:c9:45:
3c:e6:6d:16:81:5d:5b:d3:a9:71:fe:29:eb:10:f6:
4c:18:38:27:90:cc:b1:b4:d5:bd:fc:42:dc:61:e5:
9c:66:d5:68:b2:c2:90:f4:9c:7a:86:29:45:b0:80:
57:55:62:81:81:84:b5:10:30:05:02:19:ce:a8:0c:
68:a8:ea:60:a2:8d:fb:f7:69:70:b4:52:3a:f8:71:
01:82:a2:8b:b8:97:4f:a9:bc:26:79:2f:7b:60:14:
1a:e9:00:7a:c9:88:69:12:40:0a:44:ba:a7:0d:8f:
3e:fb:52:3f:fb:ff:6f:47:42:7d:57:50:41:ce:2b:
07:ea:b7:58:7c:9d:57:c1:36:b9:02:a8:f5:db:79:
b6:cc:d0:19:be:13:39:71:02:b3:9b:89:51:ba:c0:
d4:e7:1d:21:29:14:ce:51:f2:09:65:67:d0:a3:45:
fc:49:8c:8e:92:27:72:ab:8b:7e:07:c5:8f:a9:59:
a1:bf:ff:d9:0a:6e:56:14:e6:8b:30:5a:0f:02:40:
54:77:d6:78:d6:d9:d7:fb:18:93:dc:be:c9:7a:ed:
a6:5d:84:36:6b:09:0e:cc:b9:7f:a2:2a:69:ee:9b:
f1:ed:d6:68:5c:9e:a0:58:52:89:6a:ca:45:eb:9f:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:19:EB:C8:54:1F:86:26:68:2E:A4:25:DA:2E:B6:77:C8:D4:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c810fdb7-9ce3-489a-afcf-63f1e1f4b69f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:a400::/40
Signature Algorithm: sha256WithRSAEncryption
43:be:12:2f:f1:15:87:8e:be:e1:21:f5:33:05:88:6d:af:81:
6e:ca:88:18:6f:68:28:aa:21:54:e0:da:1e:f6:c7:28:43:ef:
74:89:37:7e:22:da:26:8e:a1:11:dc:88:e2:f0:cc:d2:87:64:
72:8a:42:c5:85:d4:23:73:3e:db:69:bd:2c:ab:92:b8:bd:48:
19:83:7e:b1:80:41:1b:45:aa:3a:8d:99:05:ec:d6:ba:90:e6:
c8:d7:aa:fe:ed:a3:33:05:ff:74:82:71:10:6d:d6:1e:dd:f9:
9c:47:24:17:b3:75:7d:e2:64:c3:58:a9:47:59:1b:04:a0:9d:
e8:b5:bc:10:82:0a:09:d7:69:4b:2a:55:70:f2:22:60:43:f1:
04:fa:ea:c9:f5:4e:c4:4d:02:2e:ce:17:e3:40:c3:67:49:76:
a5:c3:ca:40:c8:c6:3a:71:dd:97:e7:43:56:00:d6:6f:72:69:
d9:b3:be:01:bb:ec:26:89:8d:04:33:8f:ea:e7:36:22:e7:c2:
28:f3:7f:68:a1:f4:88:a4:e1:f5:26:b7:c7:b9:25:dc:64:09:
fa:b7:d5:8e:ea:fd:3e:0a:ff:cc:3c:ba:ec:73:a3:17:a6:51:
ce:9a:76:13:4e:78:b6:92:5b:2b:b5:f6:01:57:11:66:75:81:
e2:ef:01:51
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQy/66jORidZEx1k/nuW5XXtpEq8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDA1MTA1WhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YmY2ZWJmZjM3YjBmZWUxY2M4MmUwNzYyODg3ODUyM2Yy
OWM1NmZlNGRkM2Y0NGJmZTU5MTlhMDNjZGQ3ZTBkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOB3nFBVeiTUZRgZ3JRTzmbRaBXVvTqXH+KesQ9kwYOCeQ
zLG01b38Qtxh5Zxm1WiywpD0nHqGKUWwgFdVYoGBhLUQMAUCGc6oDGio6mCijfv3
aXC0Ujr4cQGCoou4l0+pvCZ5L3tgFBrpAHrJiGkSQApEuqcNjz77Uj/7/29HQn1X
UEHOKwfqt1h8nVfBNrkCqPXbebbM0Bm+EzlxArObiVG6wNTnHSEpFM5R8gllZ9Cj
RfxJjI6SJ3Kri34HxY+pWaG//9kKblYU5oswWg8CQFR31njW2df7GJPcvsl67aZd
hDZrCQ7MuX+iKmnum/Ht1mhcnqBYUolqykXrnyVpAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUsUIZ68hUH4YmaC6kJdoutnfI1BwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M4MTBmZGI3LTljZTMtNDg5YS1hZmNmLTYzZjFlMWY0YjY5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB//pDANBgkqhkiG9w0BAQsFAAOCAQEAQ74SL/EVh46+4SH1MwWIba+B
bsqIGG9oKKohVODaHvbHKEPvdIk3fiLaJo6hEdyI4vDM0odkcopCxYXUI3M+22m9
LKuSuL1IGYN+sYBBG0WqOo2ZBezWupDmyNeq/u2jMwX/dIJxEG3WHt35nEckF7N1
feJkw1ipR1kbBKCd6LW8EIIKCddpSypVcPIiYEPxBPrqyfVOxE0CLs4X40DDZ0l2
pcPKQMjGOnHdl+dDVgDWb3Jp2bO+AbvsJomNBDOP6uc2IufCKPN/aKH0iKTh9Sa3
x7kl3GQJ+rfVjur9Pgr/zDy67HOjF6ZRzpp2E054tpJbK7X2AVcRZnWB4u8BUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:03 2025 by rpki-client