
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa
File: 2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa (raw, json)
Hash identifier: dFuc2cVvBv8s2QJybsunI0wkd8/EZH0mTuYuwfod+as=
Subject key identifier: EA:17:3B:73:22:57:53:6E:6C:95:0C:B3:4C:AF:7D:14:94:5B:9E:66
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 03A8F11C0BB858E1CE55B5D822A88C84CE7C2B63
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:48f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a8:f1:1c:0b:b8:58:e1:ce:55:b5:d8:22:a8:8c:84:ce:7c:2b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:9d:27:06:81:a2:22:66:c0:51:01:96:62:
e8:cb:26:30:77:ad:99:00:b0:f1:2d:6a:d7:15:48:
e2:54:1f:9b:c4:a8:47:85:90:af:b0:9a:cf:50:8b:
18:57:47:82:52:ea:f2:b3:33:13:9b:51:19:29:bf:
e9:62:47:29:5c:73:14:6f:01:c3:70:e3:42:d4:24:
c4:fd:fe:5c:e0:0c:2f:e0:07:f0:54:c1:9c:af:d3:
30:b7:9d:1b:97:6c:62:97:22:1c:b4:68:c5:65:31:
fb:0b:c9:e3:64:3f:d0:0c:39:44:37:57:fd:e9:71:
20:cf:cb:ce:00:86:0f:bb:f7:45:f6:f8:02:c2:78:
e0:38:55:96:b9:69:72:03:2a:bc:6a:84:f5:0b:59:
35:6a:9b:93:1c:5a:6a:bb:bb:b5:e6:b5:00:af:0a:
27:c7:b5:d6:df:d1:82:20:7a:06:8f:d5:25:a9:6c:
9c:47:6f:4a:f2:66:1e:e0:1c:db:fc:12:4f:74:23:
7b:0d:88:7f:e6:ea:bd:a1:5d:97:ce:d5:72:c6:3d:
35:c1:d9:cb:61:a1:db:56:07:06:de:41:79:30:a0:
9d:02:aa:37:ad:6a:2d:c9:e5:bc:c2:7b:89:d8:a4:
ce:6f:31:73:38:39:e5:c3:d8:d0:2c:a6:86:d8:9f:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:3B:73:22:57:53:6E:6C:95:0C:B3:4C:AF:7D:14:94:5B:9E:66
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:48f::/48
Signature Algorithm: sha256WithRSAEncryption
67:a3:03:42:e4:a0:ae:e8:eb:68:fb:d3:c1:17:8d:26:1a:4c:
88:4c:8d:ca:c7:9a:66:a5:37:3b:db:a1:3b:34:0c:82:32:b5:
a9:79:64:64:05:99:1a:8f:d3:99:39:52:65:df:26:98:72:5d:
03:e0:aa:59:77:a6:6b:90:f7:3b:4a:42:89:48:38:52:53:ee:
ce:36:c3:78:1b:52:05:66:00:05:f8:64:a1:bc:63:91:de:9c:
38:6d:1d:03:df:d4:7a:7d:0c:80:7f:96:7f:ba:af:1c:48:74:
b7:5f:e4:58:b9:5c:12:a9:f0:60:71:1f:47:f7:3f:0d:2a:7e:
a2:73:77:56:64:87:9c:86:7e:85:f9:fc:0d:6f:78:60:ef:67:
2d:2a:e8:70:14:41:1e:69:f1:8b:86:29:da:64:c9:7a:4d:e2:
63:32:c4:95:3e:cb:31:1d:ed:53:71:18:b9:52:ef:eb:6c:7d:
95:0d:e1:83:c6:a6:2b:f0:f3:85:1b:30:1f:a2:d1:60:a7:df:
3f:40:1e:70:c1:3b:37:04:c6:1b:4a:2b:c0:7f:ef:ae:92:6d:
d2:1e:64:72:c5:17:55:44:7c:96:cc:64:95:a9:25:d4:ae:4e:
bd:cb:47:0b:fb:4b:87:4b:f7:f1:07:70:3a:10:f2:36:6a:94:
18:72:49:03
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUA6jxHAu4WOHOVbXYIqiMhM58K2MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZGQyZDI0MDA3NmE1MmIyOWI0MjdmZmQxZGQ4OGE0NjA0
MmI3NDNjYmMxMWUwMmE2YTY0YjJjNTkwZWY4MWY0MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCURJ0nBoGiImbAUQGWYujLJjB3rZkAsPEtatcVSOJUH5vE
qEeFkK+wms9QixhXR4JS6vKzMxObURkpv+liRylccxRvAcNw40LUJMT9/lzgDC/g
B/BUwZyv0zC3nRuXbGKXIhy0aMVlMfsLyeNkP9AMOUQ3V/3pcSDPy84Ahg+790X2
+ALCeOA4VZa5aXIDKrxqhPULWTVqm5McWmq7u7XmtQCvCifHtdbf0YIgegaP1SWp
bJxHb0ryZh7gHNv8Ek90I3sNiH/m6r2hXZfO1XLGPTXB2cthodtWBwbeQXkwoJ0C
qjetai3J5bzCe4nYpM5vMXM4OeXD2NAspobYnxNZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU6hc7cyJXU25slQyzTK99FJRbnmYwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzJjNWIzNDNlLWViMzUtNGM2Ni04ZWEyLTRiNGEwMjg4MmNkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAGejA0LkoK7o62j708EXjSYa
TIhMjcrHmmalNzvboTs0DIIytal5ZGQFmRqP05k5UmXfJphyXQPgqll3pmuQ9ztK
QolIOFJT7s42w3gbUgVmAAX4ZKG8Y5HenDhtHQPf1Hp9DIB/ln+6rxxIdLdf5Fi5
XBKp8GBxH0f3Pw0qfqJzd1Zkh5yGfoX5/A1veGDvZy0q6HAUQR5p8YuGKdpkyXpN
4mMyxJU+yzEd7VNxGLlS7+tsfZUN4YPGpivw84UbMB+i0WCn3z9AHnDBOzcExhtK
K8B/766SbdIeZHLFF1VEfJbMZJWpJdSuTr3LRwv7S4dL9/EHcDoQ8jZqlBhySQM=
-----END CERTIFICATE-----
Generated at Tue Feb 11 16:08:21 2025 by rpki-client