Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa
File: f13d14a2-c781-4f14-97b1-44c231676d28.roa (raw, json)
Hash identifier: OrM0El3M9qJF4qv7p7nJq3I827znFnL45XpS8KWzSzA=
Subject key identifier: 38:5B:DC:71:30:08:99:63:1C:EF:4A:F4:61:C6:C9:DB:59:46:CF:E9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B0492696356C51D571B339F09382B924D37A7CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa
Signing time: Wed 05 Mar 2025 00:21:20 +0000
ROA not before: Wed 05 Mar 2025 00:21:20 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 167.97.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:04:92:69:63:56:c5:1d:57:1b:33:9f:09:38:2b:92:4d:37:a7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 5 00:21:20 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:f8:f7:98:6f:76:84:56:eb:db:e9:be:0b:
c0:d4:f3:a9:6d:99:eb:1d:8f:59:76:50:35:68:a5:
9d:7b:25:a1:74:fb:18:f7:a1:c7:8c:96:68:31:9c:
d3:85:6b:16:a4:2c:bd:04:2e:a1:31:b5:d0:c8:62:
41:b1:e1:95:40:8a:32:7e:82:4f:f7:99:7d:51:22:
73:5c:7a:0f:04:01:71:81:16:1c:ed:6f:68:7b:16:
28:cf:4b:46:02:05:ce:a1:31:b2:46:b0:ef:78:32:
f2:58:ac:67:65:a7:60:cf:cd:8f:cb:11:1f:db:c1:
b8:0d:cd:dd:a4:64:f0:ff:ec:64:43:74:85:27:73:
61:28:0e:f7:0a:49:58:f0:0f:bb:57:25:e3:68:cf:
ef:bb:ef:c3:37:22:12:fe:c7:0c:84:d6:15:66:55:
b3:d6:50:37:83:cc:35:88:ba:60:77:15:fe:de:77:
db:41:9e:e1:d9:6d:04:f1:6d:c0:3b:d3:72:78:c5:
78:93:86:af:d6:f0:ce:53:79:19:02:3f:56:d5:20:
9a:36:23:eb:ad:e0:4f:f3:95:d6:ea:ae:9e:50:eb:
86:27:76:e5:d3:48:94:fe:7e:10:d7:8e:45:30:c8:
6f:1c:20:db:49:f1:4c:00:78:e9:4c:41:36:84:1e:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5B:DC:71:30:08:99:63:1C:EF:4A:F4:61:C6:C9:DB:59:46:CF:E9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:21:0b:b6:2a:55:fb:55:90:d0:ab:af:70:78:5b:e1:93:54:
35:32:09:ad:5a:b9:90:9a:44:d8:72:ea:74:cd:b8:02:0a:29:
df:a0:1a:a3:89:39:bd:d0:85:d0:7a:41:5f:b0:24:24:52:e0:
52:31:01:de:80:48:f1:f0:d8:56:7e:4b:4b:9c:5f:2d:5a:18:
13:08:65:af:37:6c:f9:1d:c5:95:ca:64:d8:b8:db:5f:92:d4:
29:c3:50:db:18:c6:9b:41:30:93:0b:7e:e9:70:19:ca:31:ed:
50:ef:ab:77:02:60:86:57:19:1c:07:dc:6e:bc:00:78:5d:31:
ae:22:e9:ff:c8:be:ca:09:47:3f:e2:60:87:85:4d:d4:42:3a:
27:de:88:a2:af:8c:68:58:c9:50:9b:20:d9:7a:89:1d:75:56:
61:81:d6:29:b2:64:9a:91:4b:f3:2c:d1:c2:7e:ee:17:5a:96:
2c:bb:49:66:6c:c2:72:4e:9b:de:5c:f7:7b:67:e5:be:a7:f2:
4c:fe:35:2e:b3:de:7e:7f:4f:d6:25:17:1a:fe:e4:b3:5f:4c:
8e:7b:24:f9:6e:8c:a9:cd:a0:e4:02:26:9d:fe:3f:63:39:f0:
17:33:ca:cd:f2:46:df:97:32:d1:9d:2a:24:09:6e:db:e6:ff:
86:42:8c:a5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWwSSaWNWxR1XGzOfCTgrkk03p8swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA1MDAyMTIwWhcNMjUwNDA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZDVjMjRlMjRiZWQ5MTlmOTI1MjdlMjhiOTgxZjQxYzA0
N2Q4YjEyNDczMGNlNzY0ZTU3ODU3ZGFiZWQwYTExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCi8/j3mG92hFbr2+m+C8DU86ltmesdj1l2UDVopZ17JaF0
+xj3oceMlmgxnNOFaxakLL0ELqExtdDIYkGx4ZVAijJ+gk/3mX1RInNceg8EAXGB
Fhztb2h7FijPS0YCBc6hMbJGsO94MvJYrGdlp2DPzY/LER/bwbgNzd2kZPD/7GRD
dIUnc2EoDvcKSVjwD7tXJeNoz++778M3IhL+xwyE1hVmVbPWUDeDzDWIumB3Ff7e
d9tBnuHZbQTxbcA703J4xXiThq/W8M5TeRkCP1bVIJo2I+ut4E/zldbqrp5Q64Yn
duXTSJT+fhDXjkUwyG8cINtJ8UwAeOlMQTaEHj4/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUOFvccTAImWMc70r0YcbJ21lGz+kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YxM2QxNGEyLWM3ODEtNGYxNC05N2IxLTQ0YzIzMTY3NmQyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCnYTANBgkqhkiG9w0BAQsFAAOCAQEABiELtipV+1WQ0KuvcHhb4ZNUNTIJ
rVq5kJpE2HLqdM24Agop36Aao4k5vdCF0HpBX7AkJFLgUjEB3oBI8fDYVn5LS5xf
LVoYEwhlrzds+R3Flcpk2LjbX5LUKcNQ2xjGm0Ewkwt+6XAZyjHtUO+rdwJghlcZ
HAfcbrwAeF0xriLp/8i+yglHP+Jgh4VN1EI6J96Ioq+MaFjJUJsg2XqJHXVWYYHW
KbJkmpFL8yzRwn7uF1qWLLtJZmzCck6b3lz3e2flvqfyTP41LrPefn9P1iUXGv7k
s19Mjnsk+W6Mqc2g5AImnf4/YznwFzPKzfJG35cy0Z0qJAlu2+b/hkKMpQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:47 2025 by rpki-client