Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e718f292-3534-48a9-a800-2739137ff5ea.roa
File: e718f292-3534-48a9-a800-2739137ff5ea.roa (raw, json)
Hash identifier: chO+5zESQv4p9SStX5TXoW1RtA2vF9IPNCrnDTD4JVI=
Subject key identifier: 1E:FA:7E:9F:B8:31:63:56:07:72:83:D4:6E:EC:01:4E:04:E7:08:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 44D717A41FF290C943826C478BF7C658EB132FA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e718f292-3534-48a9-a800-2739137ff5ea.roa
Signing time: Sat 15 Mar 2025 00:51:02 +0000
ROA not before: Sat 15 Mar 2025 00:51:02 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d7:17:a4:1f:f2:90:c9:43:82:6c:47:8b:f7:c6:58:eb:13:2f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:51:02 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:ec:12:79:dd:f2:40:9f:53:d2:de:cf:dc:
c4:8c:91:a4:e0:7d:dd:dc:ed:06:bb:77:0d:f7:d4:
69:25:ba:c2:50:31:37:2a:17:61:f3:93:0f:5b:47:
c8:98:bd:67:70:d4:8a:8c:c7:6e:83:c7:8e:e0:ef:
3c:37:5f:a4:01:1f:b3:e3:e1:93:93:7a:3e:5a:22:
02:97:10:0d:9a:a4:d3:c0:4c:1b:0f:dd:be:9a:48:
c6:de:33:84:3b:39:09:c4:d2:f2:3d:65:c4:f6:4b:
21:e7:78:1f:e0:07:00:f6:49:ae:12:c3:59:2e:7e:
6b:bd:e4:d7:d3:75:d9:c8:c4:13:e5:5f:5e:81:46:
c3:c5:6f:97:81:20:b5:cf:e2:c6:cf:d2:aa:14:3e:
74:8f:22:77:84:64:3d:16:bb:e7:0b:a1:2c:c7:df:
3f:be:72:7d:71:58:37:6a:a5:0a:c4:3a:4a:b1:f8:
fe:f4:26:75:e5:41:3d:f8:bb:74:c5:09:6a:f4:43:
d7:9d:6e:24:7b:31:f3:60:aa:f3:e2:e4:2a:17:dc:
f1:ae:14:ea:18:09:55:b8:5b:15:b6:fd:24:5c:82:
59:2f:44:4d:4e:59:b9:8f:9b:2b:0d:13:ce:8c:f8:
e7:a2:11:b2:72:55:b3:53:dd:0e:58:f5:aa:93:85:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FA:7E:9F:B8:31:63:56:07:72:83:D4:6E:EC:01:4E:04:E7:08:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e718f292-3534-48a9-a800-2739137ff5ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:93:6b:1a:dd:3c:f3:e1:db:e5:0e:b0:70:6c:7c:5d:55:62:
97:ab:99:ae:35:8e:9a:cd:99:5a:fa:5b:91:2f:e2:38:e3:de:
19:07:a1:e9:85:0d:30:90:3e:84:d2:63:d1:5c:69:b4:59:7b:
25:23:03:aa:8d:dc:4c:c0:ba:1f:35:6a:ea:03:5c:9f:e4:7b:
86:83:73:87:e2:4b:14:af:e7:0b:84:14:0d:4c:a5:3f:62:8b:
64:25:51:f0:0d:4e:8f:41:ec:45:5d:34:25:6a:93:4b:b8:e0:
ee:11:77:b3:77:13:5e:c7:bf:a7:d9:bb:8b:4a:ae:79:8d:1e:
0d:8f:56:a6:47:5d:54:01:8b:39:de:82:35:a8:aa:ef:fd:08:
8c:72:5e:29:d0:a8:e9:54:b2:90:83:1d:17:59:a7:d4:6b:2e:
83:0c:eb:de:f5:ee:83:6f:ee:1d:d8:2c:17:bd:bb:2b:9b:ab:
5f:c7:d3:e5:f3:65:7c:d6:63:78:a7:ef:ad:54:f0:89:74:7d:
a3:dd:f4:f3:2d:0d:62:64:6b:55:df:92:ed:d8:09:d6:fa:9c:
3c:a9:b2:86:8c:39:59:1c:f4:e2:a5:cb:e2:09:b6:1f:e5:0e:
5a:0d:35:db:e6:44:a7:30:50:67:15:ba:2c:c6:cd:4f:68:69:
5d:3e:08:bd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURNcXpB/ykMlDgmxHi/fGWOsTL6gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDA1MTAyWhcNMjUwNDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYzI0OWRmMTNiZjhkNDM5OTEyZmVhMzQwYzk1NWZmMTUx
YWFjY2M5NDZlMWFmNDkzOGI5YTJkZTUxMDYzYWQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnCuwSed3yQJ9T0t7P3MSMkaTgfd3c7Qa7dw331GklusJQ
MTcqF2Hzkw9bR8iYvWdw1IqMx26Dx47g7zw3X6QBH7Pj4ZOTej5aIgKXEA2apNPA
TBsP3b6aSMbeM4Q7OQnE0vI9ZcT2SyHneB/gBwD2Sa4Sw1kufmu95NfTddnIxBPl
X16BRsPFb5eBILXP4sbP0qoUPnSPIneEZD0Wu+cLoSzH3z++cn1xWDdqpQrEOkqx
+P70JnXlQT34u3TFCWr0Q9edbiR7MfNgqvPi5CoX3PGuFOoYCVW4WxW2/SRcglkv
RE1OWbmPmysNE86M+OeiEbJyVbNT3Q5Y9aqThRo/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHvp+n7gxY1YHcoPUbuwBTgTnCG4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U3MThmMjkyLTM1MzQtNDhhOS1hODAwLTI3MzkxMzdmZjVlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTfYwDQYJKoZIhvcNAQELBQADggEBAIyTaxrdPPPh2+UOsHBsfF1VYper
ma41jprNmVr6W5Ev4jjj3hkHoemFDTCQPoTSY9FcabRZeyUjA6qN3EzAuh81auoD
XJ/ke4aDc4fiSxSv5wuEFA1MpT9ii2QlUfANTo9B7EVdNCVqk0u44O4Rd7N3E17H
v6fZu4tKrnmNHg2PVqZHXVQBiznegjWoqu/9CIxyXinQqOlUspCDHRdZp9RrLoMM
69717oNv7h3YLBe9uyubq1/H0+XzZXzWY3in761U8Il0faPd9PMtDWJka1Xfku3Y
Cdb6nDypsoaMOVkc9OKly+IJth/lDloNNdvmRKcwUGcVuizGzU9oaV0+CL0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:05 2025 by rpki-client