Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a8c2302-d303-43ad-9cc6-28d515a9b892.roa
File: 0a8c2302-d303-43ad-9cc6-28d515a9b892.roa (raw, json)
Hash identifier: Rf2WxSlgry8mCZYqL0DcN5+3p65N4L9vsy3McWQo5BM=
Subject key identifier: D7:2B:FD:D1:41:51:96:1C:A4:F8:22:D4:23:4D:7C:7F:57:6C:83:21
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5B1B5C296882AEA9382C6F138E8CE4413D0D2333
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a8c2302-d303-43ad-9cc6-28d515a9b892.roa
Signing time: Tue 25 Mar 2025 16:11:01 +0000
ROA not before: Tue 25 Mar 2025 16:11:01 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafe:f000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1b:5c:29:68:82:ae:a9:38:2c:6f:13:8e:8c:e4:41:3d:0d:23:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 25 16:11:01 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:5f:b7:bb:41:ca:4c:21:7e:c3:cd:b1:a9:
ed:2c:b2:06:55:2b:3b:60:fe:ce:57:7f:65:b7:4a:
95:82:16:1f:25:e5:c3:0f:a6:cd:3e:5d:b6:0e:38:
1b:ff:6f:df:d0:8e:ae:0f:34:1d:d6:bd:f2:16:48:
b3:83:a7:08:5d:85:17:7c:00:1b:5a:a5:69:59:ae:
cc:46:0c:08:32:39:84:7a:1e:76:86:55:0f:b3:8a:
a9:b6:e4:27:28:bc:0d:2b:61:e6:2a:4f:b4:86:79:
87:4a:87:a4:4e:c6:d3:89:5f:86:35:af:62:0d:73:
9c:e4:b7:48:9c:ce:d0:9a:24:a1:0c:7d:42:89:7d:
17:30:4b:06:97:11:35:dc:5d:f1:df:65:9f:21:51:
09:d3:d2:c7:ed:2a:d2:44:26:9d:49:1b:7d:d2:2e:
97:d5:1b:08:b5:c2:74:f3:d0:cf:20:4d:06:6a:15:
7e:55:aa:11:47:3e:66:46:9e:17:79:92:e3:c8:c7:
55:3e:b5:9d:bc:a5:bf:43:44:70:8c:c2:46:29:38:
e4:ea:4c:b8:aa:cd:1c:6c:a3:19:5d:64:39:3b:e6:
7b:f0:67:12:0e:4a:5a:c4:25:83:36:cc:62:31:cd:
1c:17:34:93:1e:0a:ac:a5:38:45:d0:de:20:ef:a1:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2B:FD:D1:41:51:96:1C:A4:F8:22:D4:23:4D:7C:7F:57:6C:83:21
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a8c2302-d303-43ad-9cc6-28d515a9b892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafe:f000::/40
Signature Algorithm: sha256WithRSAEncryption
61:b9:d9:4d:1d:3c:9a:0e:c3:36:87:a5:3b:83:71:72:82:f1:
a7:a9:c2:b3:ea:ad:2f:e3:67:51:dc:a9:2a:71:b7:a9:89:76:
17:17:d9:72:a4:97:5e:19:87:81:bc:b6:a6:62:6c:c8:c2:25:
61:46:2e:00:de:38:80:4e:a1:04:ac:d5:ac:01:e1:96:26:51:
a8:36:c8:ce:25:67:35:fe:e6:84:26:a8:b9:ee:2d:99:b8:79:
bd:fa:47:76:ad:0c:65:1a:a8:dd:14:52:b2:37:f2:42:2d:be:
6e:df:72:ae:55:60:7d:44:e5:a6:79:d0:f4:7e:90:1e:9b:c6:
78:5a:2b:61:7c:1f:74:44:73:0d:41:6f:e4:50:30:59:46:09:
e1:bc:78:8e:47:fe:45:ba:15:c2:b6:bf:0f:82:59:64:f5:00:
ab:82:b6:95:ed:7c:9d:92:48:29:5b:57:c8:f5:3e:61:56:c9:
c4:82:d7:f0:68:e5:52:88:5b:1e:d4:9c:ae:dc:e0:48:92:f6:
e5:f0:10:d0:d0:33:f1:50:05:e8:fa:1e:4c:b4:09:a9:98:d7:
95:9b:30:5e:3d:c7:af:22:97:36:ee:c1:26:e5:34:c2:84:8c:
0d:7f:62:2d:4d:e5:db:cb:10:ec:0b:7c:b4:ea:b2:65:33:59:
21:a4:fc:5e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUWxtcKWiCrqk4LG8TjozkQT0NIzMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTEwMVoX
DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMmFkY2QzMGI3NDNiODYxMzc3ZmYy
NGJlZDA5ZGMyMjY4ODkxZjgzMmRjNjhlNWVhNGY5MzQ5NzRlMjA2YjlkNDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18Nft7tBykwhfsPNsantLLIGVSs7
YP7OV39lt0qVghYfJeXDD6bNPl22Djgb/2/f0I6uDzQd1r3yFkizg6cIXYUXfAAb
WqVpWa7MRgwIMjmEeh52hlUPs4qptuQnKLwNK2HmKk+0hnmHSoekTsbTiV+GNa9i
DXOc5LdInM7QmiShDH1CiX0XMEsGlxE13F3x32WfIVEJ09LH7SrSRCadSRt90i6X
1RsItcJ089DPIE0GahV+VaoRRz5mRp4XeZLjyMdVPrWdvKW/Q0RwjMJGKTjk6ky4
qs0cbKMZXWQ5O+Z78GcSDkpaxCWDNsxiMc0cFzSTHgqspThF0N4g76Gc7QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFNcr/dFBUZYcpPgi1CNNfH9XbIMhMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzBhOGMyMzAyLWQzMDMtNDNhZC05Y2M2LTI4ZDUxNWE5Yjg5Mi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba/vAwDQYJKoZIhvcNAQELBQADggEBAGG52U0dPJoOwzaHpTuD
cXKC8aepwrPqrS/jZ1HcqSpxt6mJdhcX2XKkl14Zh4G8tqZibMjCJWFGLgDeOIBO
oQSs1awB4ZYmUag2yM4lZzX+5oQmqLnuLZm4eb36R3atDGUaqN0UUrI38kItvm7f
cq5VYH1E5aZ50PR+kB6bxnhaK2F8H3REcw1Bb+RQMFlGCeG8eI5H/kW6FcK2vw+C
WWT1AKuCtpXtfJ2SSClbV8j1PmFWycSC1/Bo5VKIWx7UnK7c4EiS9uXwENDQM/FQ
Bej6Hky0CamY15WbMF49x68ilzbuwSblNMKEjA1/Yi1N5dvLEOwLfLTqsmUzWSGk
/F4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:36 2025 by rpki-client