Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e1d0221-3c74-49a3-b5fd-3443058c6a3d.roa
File: 6e1d0221-3c74-49a3-b5fd-3443058c6a3d.roa (raw, json)
Hash identifier: 6HyxMekbg343ssgfBpZ+Hi4X/80cl9TRbqFirwF5bLo=
Subject key identifier: 4B:31:CC:68:88:3D:E4:B6:12:40:FC:98:F7:0F:8B:52:16:92:BF:38
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 41DF0594EBFE24BECB714F9B3A73615BC07CB012
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e1d0221-3c74-49a3-b5fd-3443058c6a3d.roa
Signing time: Tue 04 Mar 2025 20:51:07 +0000
ROA not before: Tue 04 Mar 2025 20:51:07 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 8987
IP address blocks: 35.71.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:df:05:94:eb:fe:24:be:cb:71:4f:9b:3a:73:61:5b:c0:7c:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 4 20:51:07 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:e4:aa:43:96:09:1f:c5:96:16:46:b9:5f:
c9:a5:3a:8f:ff:56:e7:ae:1e:34:c7:b2:ef:17:d9:
98:10:49:8f:9f:40:62:3e:c4:16:7d:b3:5f:dd:c1:
18:14:ec:16:5d:d8:a3:55:50:70:f6:e5:8a:50:5c:
d4:61:9f:f7:24:f7:41:d5:2f:57:92:92:8d:eb:a2:
05:2f:4a:a3:9c:02:f8:92:6c:3b:b3:75:80:31:cf:
a6:59:6a:9e:de:49:0a:4a:5c:c9:72:bb:9e:45:4b:
fa:7f:e9:81:8b:84:d2:09:10:af:09:01:23:fb:9b:
7c:9d:79:bb:ef:ae:3b:1b:9a:15:0e:9f:44:42:15:
b9:4d:f3:1d:e2:c1:ef:f7:40:3f:54:e7:0d:1c:53:
40:ec:28:5e:83:89:eb:00:6c:d2:2d:32:c0:36:e0:
fb:02:9d:04:d1:67:28:56:e3:07:dd:f7:ac:4f:e6:
5e:8d:da:ee:6f:6d:ca:b0:b1:02:7b:1a:45:be:4b:
59:5f:9a:3f:a3:75:2c:39:3e:72:14:cb:c0:ef:20:
22:54:cf:2e:47:95:9d:d3:53:fa:f7:b5:61:ab:08:
56:51:76:44:12:a4:46:2d:b3:c1:41:9f:6f:52:56:
af:a6:6c:1a:fc:58:31:2f:eb:98:d6:84:8c:b2:2b:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:31:CC:68:88:3D:E4:B6:12:40:FC:98:F7:0F:8B:52:16:92:BF:38
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e1d0221-3c74-49a3-b5fd-3443058c6a3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.71.116.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d1:aa:c7:b0:19:3e:d5:ab:05:71:52:4d:e0:58:90:ab:28:
c6:5d:70:ce:cf:6a:a0:b2:d4:44:7e:e9:3e:f1:77:48:d5:1b:
a4:a5:26:f2:ef:2a:86:db:8b:27:09:a3:d7:36:cf:24:89:67:
64:3b:82:14:42:5f:42:44:17:13:16:10:7f:94:81:05:26:96:
da:64:b0:aa:c9:8c:55:fc:2b:84:53:30:57:e1:b4:96:cd:41:
42:e9:18:63:96:2c:6b:bb:0a:ce:8e:9b:5d:db:6e:9d:2a:be:
8e:53:f3:41:48:df:ea:59:5e:6f:19:39:d1:47:cb:58:80:bb:
f3:b7:c5:cb:7f:5d:7b:b4:b1:fd:17:2f:9e:38:69:cf:12:67:
74:1f:01:53:ac:74:be:bc:2c:1b:fb:81:05:b0:2d:96:d2:fc:
c8:d6:31:98:aa:06:b9:a5:6f:87:fe:b0:37:10:09:ef:4f:75:
8b:5c:d5:47:ed:6c:0d:c3:35:7f:23:0f:ef:46:a3:c6:6d:68:
0e:8b:6f:85:07:8a:66:b7:41:3b:0b:86:1a:f5:77:09:d8:4c:
98:5a:68:8e:77:40:4f:4e:63:5b:5a:60:43:ad:2d:7c:3a:96:
25:27:91:f0:ca:60:08:1e:f7:f1:e3:48:6b:a1:bd:3b:e6:a9:
47:38:30:8b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQd8FlOv+JL7LcU+bOnNhW8B8sBIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzA0MjA1MTA3WhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MTlhZjhhNDU4Yjc3ZDkwOWExZDhhMjBjMmEzZDdjMGFm
MzM4ZjRmNGJjZTdlYTY4Yjc2Mjc3OWY3MjEwOGY2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeNuSqQ5YJH8WWFka5X8mlOo//VueuHjTHsu8X2ZgQSY+f
QGI+xBZ9s1/dwRgU7BZd2KNVUHD25YpQXNRhn/ck90HVL1eSko3rogUvSqOcAviS
bDuzdYAxz6ZZap7eSQpKXMlyu55FS/p/6YGLhNIJEK8JASP7m3ydebvvrjsbmhUO
n0RCFblN8x3iwe/3QD9U5w0cU0DsKF6DiesAbNItMsA24PsCnQTRZyhW4wfd96xP
5l6N2u5vbcqwsQJ7GkW+S1lfmj+jdSw5PnIUy8DvICJUzy5HlZ3TU/r3tWGrCFZR
dkQSpEYts8FBn29SVq+mbBr8WDEv65jWhIyyK5HhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSzHMaIg95LYSQPyY9w+LUhaSvzgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzZlMWQwMjIxLTNjNzQtNDlhMy1iNWZkLTM0NDMwNThjNmEzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjR3QwDQYJKoZIhvcNAQELBQADggEBAAHRqsewGT7VqwVxUk3gWJCrKMZd
cM7PaqCy1ER+6T7xd0jVG6SlJvLvKobbiycJo9c2zySJZ2Q7ghRCX0JEFxMWEH+U
gQUmltpksKrJjFX8K4RTMFfhtJbNQULpGGOWLGu7Cs6Om13bbp0qvo5T80FI3+pZ
Xm8ZOdFHy1iAu/O3xct/XXu0sf0XL544ac8SZ3QfAVOsdL68LBv7gQWwLZbS/MjW
MZiqBrmlb4f+sDcQCe9PdYtc1UftbA3DNX8jD+9Go8ZtaA6Lb4UHima3QTsLhhr1
dwnYTJhaaI53QE9OY1taYEOtLXw6liUnkfDKYAge9/HjSGuhvTvmqUc4MIs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:16 2025 by rpki-client