Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
File: e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa (raw, json)
Hash identifier: WWL0T2tH/cfP1hih7P23sflhNxgKLp1zA1DdRn6jfNM=
Subject key identifier: 0E:8C:E5:87:58:32:F5:31:C8:46:4D:DB:A0:3B:9B:40:DC:32:3B:67
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1283A3FB56EC4B18833B7440EE45533BE5CE87A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
Signing time: Fri 28 Mar 2025 15:51:20 +0000
ROA not before: Fri 28 Mar 2025 15:51:20 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:6020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:83:a3:fb:56:ec:4b:18:83:3b:74:40:ee:45:53:3b:e5:ce:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 15:51:20 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:e0:b3:20:b8:49:4a:42:62:23:92:73:03:
e1:1d:7f:be:24:cd:d5:1c:81:11:f1:e8:1c:b7:7b:
f9:ff:ff:34:42:4b:e4:10:d6:e0:31:b8:13:02:81:
44:69:03:e3:1b:3f:61:35:21:74:fc:e9:24:36:01:
36:3e:cd:c8:90:68:41:57:2e:ae:aa:4b:e0:4c:78:
32:f7:c0:cd:57:b1:74:9e:2f:d5:6e:ec:05:ed:80:
0a:5e:70:c3:55:fb:74:73:95:f5:b3:5d:a1:5f:68:
4b:aa:3f:d2:87:e5:ec:67:9b:97:73:28:be:7d:6a:
68:d4:81:98:32:43:5e:fc:2e:26:f4:a0:e3:5e:3f:
5a:eb:af:57:59:30:73:6b:cb:0b:18:37:de:f5:fc:
79:b4:11:05:45:21:c6:10:cd:83:c4:57:42:38:fc:
9d:36:93:a5:90:27:0f:9d:bf:ad:08:3e:95:62:02:
c5:75:d9:ff:97:36:e3:ed:34:4e:c3:f6:bc:fd:2f:
70:2e:d2:4e:f7:ec:85:6e:62:2f:63:bd:a7:b6:7b:
8d:80:24:d0:e6:2a:3f:5b:24:6f:bc:e8:13:f0:f4:
b4:d0:4f:c2:db:39:66:6c:9b:4a:05:80:5d:ee:48:
fa:05:ee:cd:4f:ba:98:02:6a:9b:ed:bf:6a:f5:c8:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8C:E5:87:58:32:F5:31:C8:46:4D:DB:A0:3B:9B:40:DC:32:3B:67
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:6020::/48
Signature Algorithm: sha256WithRSAEncryption
8e:7c:c9:a4:29:70:f5:49:d5:3d:09:67:9c:b9:96:b5:63:1a:
0c:78:eb:79:2f:99:65:f1:05:3f:c7:e4:b4:48:33:4d:e2:db:
50:90:03:8a:4d:d2:cf:bb:3d:4a:4b:9c:a3:eb:f8:71:4d:e4:
d8:33:b9:2a:c3:6e:a1:d6:47:d0:ce:af:fc:66:15:2e:4e:39:
c5:e5:2c:1a:7f:3c:9f:5f:e9:84:71:9e:70:c2:e0:32:9f:4e:
d8:ae:6d:ca:93:4a:a9:f5:d9:0b:9f:9a:e0:87:54:38:d2:bc:
cd:a0:c1:04:e0:0f:22:69:38:06:48:33:ce:5b:3f:6f:32:4e:
15:43:9d:83:2e:55:2f:39:9d:13:89:c7:ac:44:6b:16:76:91:
34:9e:73:e1:c4:d2:b4:96:4d:9d:2c:37:34:31:a8:96:65:ff:
af:2c:99:19:30:8a:5c:7d:5d:aa:ec:27:8c:40:a1:49:1b:bd:
af:3c:2b:aa:77:9d:43:9a:3a:4e:91:1f:ac:71:37:0c:42:9b:
ae:69:d7:3a:07:ac:08:9c:4c:81:62:29:4e:86:b0:1f:b6:1e:
c5:46:1b:9e:52:34:f2:51:93:24:a1:1a:77:26:c1:8e:7c:b2:
4a:61:f0:14:d9:80:66:d4:01:2f:f8:e9:c4:cc:79:4f:49:d4:
5f:b3:92:c3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEoOj+1bsSxiDO3RA7kVTO+XOh6UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTU1MTIwWhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZjIyNTNkMTZiMTVlMzFmZDRmN2VkMDczOGUyZWQxODAx
YmM2MGNiNzhkZGM3ZjVlMjQ4MmQ4OGNiYjFkYTAwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8K+CzILhJSkJiI5JzA+Edf74kzdUcgRHx6By3e/n//zRC
S+QQ1uAxuBMCgURpA+MbP2E1IXT86SQ2ATY+zciQaEFXLq6qS+BMeDL3wM1XsXSe
L9Vu7AXtgApecMNV+3RzlfWzXaFfaEuqP9KH5exnm5dzKL59amjUgZgyQ178Lib0
oONeP1rrr1dZMHNrywsYN971/Hm0EQVFIcYQzYPEV0I4/J02k6WQJw+dv60IPpVi
AsV12f+XNuPtNE7D9rz9L3Au0k737IVuYi9jvae2e42AJNDmKj9bJG+86BPw9LTQ
T8LbOWZsm0oFgF3uSPoF7s1PupgCapvtv2r1yLfFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUDozlh1gy9THIRk3boDubQNwyO2cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U0YzkxOWY3LTBiM2MtNGNhZi1hZGMxLTNlMWZjYTQ1ZjM5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//YCAwDQYJKoZIhvcNAQELBQADggEBAI58yaQpcPVJ1T0JZ5y5lrVj
Ggx463kvmWXxBT/H5LRIM03i21CQA4pN0s+7PUpLnKPr+HFN5NgzuSrDbqHWR9DO
r/xmFS5OOcXlLBp/PJ9f6YRxnnDC4DKfTtiubcqTSqn12QufmuCHVDjSvM2gwQTg
DyJpOAZIM85bP28yThVDnYMuVS85nROJx6xEaxZ2kTSec+HE0rSWTZ0sNzQxqJZl
/68smRkwilx9XarsJ4xAoUkbva88K6p3nUOaOk6RH6xxNwxCm65p1zoHrAicTIFi
KU6GsB+2HsVGG55SNPJRkyShGncmwY58skph8BTZgGbUAS/46cTMeU9J1F+zksM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:30 2025 by rpki-client