Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43106760-fb11-4c13-8812-4fe15299b252.roa
File: 43106760-fb11-4c13-8812-4fe15299b252.roa (raw, json)
Hash identifier: +8D2kIedyxT11Xwaar1kcYIOxc3tIUuF3TSrh7ws2uI=
Subject key identifier: 9F:E2:8B:CC:E5:FF:B6:20:8C:41:CA:33:67:F5:78:DA:98:C2:BA:11
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 62FB75A0923F01BA8BEE9077387638378379646A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43106760-fb11-4c13-8812-4fe15299b252.roa
Signing time: Sat 22 Mar 2025 00:00:01 +0000
ROA not before: Sat 22 Mar 2025 00:00:01 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf6:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:fb:75:a0:92:3f:01:ba:8b:ee:90:77:38:76:38:37:83:79:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 22 00:00:01 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:15:97:43:d7:ab:3c:9c:ac:ae:8c:3e:f2:
8d:a6:66:18:9f:7c:79:e4:d0:2a:11:a9:4f:b0:8f:
eb:ef:6a:07:80:e3:53:4c:0e:31:7a:49:67:d5:ee:
b2:3b:44:da:07:91:b9:99:0a:ed:cb:c5:c8:4b:cc:
5e:e9:40:5d:5d:7e:b5:50:37:c0:1d:00:85:72:a7:
27:8f:1f:f7:00:74:91:e4:53:f9:c4:09:70:ec:2f:
33:97:b5:cf:f1:24:12:f6:17:a7:43:ce:b8:dc:d0:
16:9c:62:aa:4c:9c:69:52:3d:93:7f:3b:f7:aa:3d:
08:4d:84:b4:4f:5d:1e:c2:d6:b6:72:21:bf:cb:0e:
1b:66:21:de:6c:7f:df:7f:6b:38:0a:86:b6:5d:d8:
ff:7a:fa:db:79:d3:6e:a1:03:81:57:21:12:0c:d5:
78:b3:65:81:3e:3b:ff:7f:1c:a2:4b:7c:71:be:fd:
d2:39:aa:ab:51:4a:ff:20:0a:17:e5:d2:ba:e5:11:
0d:55:6e:12:2b:b8:44:19:6c:24:7d:6f:c7:fa:b6:
33:41:ad:3b:f5:c5:9f:2f:7f:64:b4:23:ad:c3:82:
57:d3:1b:2c:af:cf:15:e4:70:05:bf:7f:1d:a5:a2:
df:77:2c:91:73:61:8b:dd:d6:26:8c:5c:e8:05:2a:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:8B:CC:E5:FF:B6:20:8C:41:CA:33:67:F5:78:DA:98:C2:BA:11
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43106760-fb11-4c13-8812-4fe15299b252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf6:2000::/48
Signature Algorithm: sha256WithRSAEncryption
0f:0e:25:7f:bb:8f:ff:e7:07:56:6e:55:e2:7a:39:cd:d4:e9:
82:65:f8:57:91:95:59:37:3b:ef:c6:09:f5:a3:9b:63:44:38:
44:56:8b:42:7a:8c:74:24:1e:47:69:7d:6c:56:76:29:30:e8:
a8:da:ef:b1:7d:58:1a:a0:b1:97:55:13:a3:42:90:e7:d0:da:
51:a4:07:0b:cd:1c:f3:a9:60:fb:1d:72:f4:42:5e:cf:72:30:
d0:35:20:d8:63:65:31:f4:9d:08:7e:92:e1:27:5d:c8:a1:2d:
64:2c:81:f9:fe:e4:15:50:8a:c3:03:a0:7c:1a:65:e3:68:15:
6b:33:06:c9:62:52:b9:a7:8f:fe:c8:e0:e8:90:d6:5d:e5:56:
95:b5:db:4c:c8:ec:19:d0:a5:57:1c:87:54:11:dc:69:e8:57:
4e:d8:72:81:44:2d:6a:0e:11:c9:84:90:9e:2b:d1:3c:5c:5e:
8a:70:16:0d:7e:fd:da:a1:3f:3e:e6:a3:e1:e2:0b:a0:8c:6d:
ee:f8:03:3c:67:d4:2a:c0:e5:be:f3:85:12:74:da:59:30:89:
fc:d1:b1:38:c0:10:91:7c:06:7d:fc:fa:c9:25:c0:dd:9a:39:
ac:4b:fa:a6:f9:85:7e:f2:da:22:1c:33:bb:b1:c4:56:5a:11:
17:05:f7:19
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUYvt1oJI/AbqL7pB3OHY4N4N5ZGowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMjAwMDAwMVoX
DTI1MDQyNjIzNTk1OVowejFJMEcGA1UEBRNAZjkxNmQ4NWJmMWU1ZTgyNzEzZDI4
NTFkZWM2YjZiYjU3NmE3NmYwNzk0NDQzYzE1MzlkNGI4ZDEzYjg3ZDFmOTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01AVl0PXqzycrK6MPvKNpmYYn3x5
5NAqEalPsI/r72oHgONTTA4xekln1e6yO0TaB5G5mQrty8XIS8xe6UBdXX61UDfA
HQCFcqcnjx/3AHSR5FP5xAlw7C8zl7XP8SQS9henQ8643NAWnGKqTJxpUj2Tfzv3
qj0ITYS0T10ewta2ciG/yw4bZiHebH/ff2s4Coa2Xdj/evrbedNuoQOBVyESDNV4
s2WBPjv/fxyiS3xxvv3SOaqrUUr/IAoX5dK65RENVW4SK7hEGWwkfW/H+rYzQa07
9cWfL39ktCOtw4JX0xssr88V5HAFv38dpaLfdyyRc2GL3dYmjFzoBSqC5QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFJ/ii8zl/7YgjEHKM2f1eNqYwroRMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzQzMTA2NzYwLWZiMTEtNGMxMy04ODEyLTRmZTE1Mjk5YjI1Mi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9iAAMA0GCSqGSIb3DQEBCwUAA4IBAQAPDiV/u4//5wdWblXi
ejnN1OmCZfhXkZVZNzvvxgn1o5tjRDhEVotCeox0JB5HaX1sVnYpMOio2u+xfVga
oLGXVROjQpDn0NpRpAcLzRzzqWD7HXL0Ql7PcjDQNSDYY2Ux9J0IfpLhJ13IoS1k
LIH5/uQVUIrDA6B8GmXjaBVrMwbJYlK5p4/+yODokNZd5VaVtdtMyOwZ0KVXHIdU
Edxp6FdO2HKBRC1qDhHJhJCeK9E8XF6KcBYNfv3aoT8+5qPh4gugjG3u+AM8Z9Qq
wOW+84USdNpZMIn80bE4wBCRfAZ9/PrJJcDdmjmsS/qm+YV+8toiHDO7scRWWhEX
BfcZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:05 2025 by rpki-client