Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa
File: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (raw, json)
Hash identifier: jtad+L4eCzd1mpbW0cksLK8Iki+O6R5EgA6qMADzL9k=
Subject key identifier: C8:44:F4:32:BE:33:EE:FA:86:7C:7F:B6:FD:11:46:50:EB:33:DA:AD
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 02F818595B01ED904407A60CDB9CBA0DA430B1ED
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa
Signing time: Sat 29 Mar 2025 00:00:13 +0000
ROA not before: Sat 29 Mar 2025 00:00:13 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 175.41.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f8:18:59:5b:01:ed:90:44:07:a6:0c:db:9c:ba:0d:a4:30:b1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001
Validity
Not Before: Mar 29 00:00:13 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:19:c0:51:1e:c9:a6:17:6b:b8:50:f5:09:
a0:19:5a:e5:14:95:8d:4d:ea:2f:79:b7:b2:43:83:
9a:dd:b6:f5:88:2a:0e:46:a6:ee:17:1e:c9:83:2b:
17:35:ee:d2:79:8b:35:21:b1:a7:6f:3c:a0:f1:a6:
e7:d5:c6:5f:2f:6c:54:07:a6:49:0a:42:0d:74:e6:
b5:9f:2f:fa:64:cc:1e:c1:22:78:b3:27:7e:30:74:
4c:1d:fd:33:b2:1b:b4:b6:9d:e1:a0:e8:20:e5:6e:
51:49:32:d1:16:91:f5:ac:65:e7:f5:38:87:c8:c2:
35:30:30:26:21:c1:d1:97:a0:d8:b2:55:8a:84:43:
25:63:af:55:03:1d:3a:41:d0:e7:3c:6c:13:2c:d9:
47:f0:5d:c6:a7:90:81:42:cb:3d:b3:7c:26:2f:3b:
22:a0:0b:46:ab:9b:58:cd:23:17:f6:ee:e8:bf:ec:
0a:01:e5:34:03:db:54:39:ac:bb:3d:81:68:86:1a:
ba:0b:15:48:cc:61:f8:51:18:a2:a1:6e:0a:bb:94:
3a:44:ec:a4:07:f0:8a:e4:c0:4d:41:58:82:f4:2d:
c9:3b:fc:ea:90:56:c3:fd:ec:cc:f8:a1:51:e4:5d:
4f:44:fa:27:6b:5f:4e:fd:b8:3e:08:45:f3:f4:44:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:F4:32:BE:33:EE:FA:86:7C:7F:B6:FD:11:46:50:EB:33:DA:AD
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.41.136.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:ed:10:91:5f:02:d4:14:30:6e:8d:25:23:4c:52:1e:8a:2e:
a0:b4:d4:d3:cb:f8:f0:50:a9:4f:58:34:e5:4f:6b:f3:f8:53:
f0:60:7c:00:5d:ca:9d:83:b9:48:a0:ff:79:fe:88:1f:99:be:
10:8c:47:45:5c:9b:bf:1a:b9:49:bc:fa:a4:11:af:ba:20:ff:
79:1e:be:d2:1b:6f:1e:35:72:b4:b6:33:67:a7:bb:10:2d:91:
3c:43:11:a8:1e:a6:a7:71:68:1f:58:a0:0a:a2:d0:19:63:1b:
2e:2b:af:e8:d3:c5:59:fe:02:e7:b3:29:7f:37:b0:1b:d7:ce:
4f:ba:06:e4:04:30:fb:f3:83:c0:21:49:ca:a2:f2:76:33:cd:
55:90:ef:96:b4:9a:c5:60:f1:ca:d2:fb:cb:10:3a:1d:cc:5f:
56:a4:ad:32:5d:16:7a:7d:88:48:ae:ed:be:3a:d3:d9:f4:69:
ae:ef:b4:fe:36:2e:44:24:47:5e:cb:b5:a9:23:10:07:71:b0:
c8:1a:df:70:98:81:76:7d:eb:bb:05:23:8a:05:46:23:87:fe:
5d:db:4b:00:10:cb:43:b5:b7:d3:a3:d4:a0:95:32:08:33:da:
cb:0c:79:d1:26:f4:01:be:1e:a8:44:74:69:45:4e:db:c9:89:
77:20:dc:c1
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUAvgYWVsB7ZBEB6YM25y6DaQwse0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDMyOTAwMDAxM1oX
DTI1MDUwMzIzNTk1OVowejFJMEcGA1UEBRNAOWYxM2VmNGVlN2NiMGYxZmQzNjIx
ODg2ZGRkMDBlM2IxYWZhNjY4ZTNkMTYxZmQwZGVhZTc2ZTY3NzJjNmI4MzEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32wZwFEeyaYXa7hQ9QmgGVrlFJWN
TeovebeyQ4Oa3bb1iCoORqbuFx7JgysXNe7SeYs1IbGnbzyg8abn1cZfL2xUB6ZJ
CkINdOa1ny/6ZMwewSJ4syd+MHRMHf0zshu0tp3hoOgg5W5RSTLRFpH1rGXn9TiH
yMI1MDAmIcHRl6DYslWKhEMlY69VAx06QdDnPGwTLNlH8F3Gp5CBQss9s3wmLzsi
oAtGq5tYzSMX9u7ov+wKAeU0A9tUOay7PYFohhq6CxVIzGH4URiioW4Ku5Q6ROyk
B/CK5MBNQViC9C3JO/zqkFbD/ezM+KFR5F1PRPona19O/bg+CEXz9ERd3wIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFMhE9DK+M+76hnx/tv0RRlDrM9qtMB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0
LzNiODU1N2MwLWQ1ZWUtNGY5ZC04MGFjLWU0MWEzN2ZmZmYyNy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2
Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDrymIMA0GCSqGSIb3DQEBCwUAA4IBAQA+7RCRXwLUFDBujSUjTFIe
ii6gtNTTy/jwUKlPWDTlT2vz+FPwYHwAXcqdg7lIoP95/ogfmb4QjEdFXJu/GrlJ
vPqkEa+6IP95Hr7SG28eNXK0tjNnp7sQLZE8QxGoHqancWgfWKAKotAZYxsuK6/o
08VZ/gLnsyl/N7Ab185PugbkBDD784PAIUnKovJ2M81VkO+WtJrFYPHK0vvLEDod
zF9WpK0yXRZ6fYhIru2+OtPZ9Gmu77T+Ni5EJEdey7WpIxAHcbDIGt9wmIF2feu7
BSOKBUYjh/5d20sAEMtDtbfTo9SglTIIM9rLDHnRJvQBvh6oRHRpRU7byYl3INzB
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:59 2025 by rpki-client