Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b4bf23-5c80-45ba-9d89-889ca55c451e.roa
File: 08b4bf23-5c80-45ba-9d89-889ca55c451e.roa (raw, json)
Hash identifier: aYDWZlC5YWvMIs5XsDmHOMDCbnz1493mkZ1R8Q4TYzE=
Subject key identifier: DE:36:08:9F:50:C5:A5:7D:8C:41:C1:67:DB:68:50:A7:9D:B1:5B:4F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5667CB1BF092D99CA43CFD9F92CD2AC2AFB5B14C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b4bf23-5c80-45ba-9d89-889ca55c451e.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.82.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:67:cb:1b:f0:92:d9:9c:a4:3c:fd:9f:92:cd:2a:c2:af:b5:b1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=76708bb1c6f8479e636c638b0c387f112608e41bc0b78ba82ba61b0b9e89dc20, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:71:bb:1b:a2:6b:0f:42:58:a2:03:82:00:
25:da:1e:b2:51:77:bc:97:5d:3f:f9:f9:ce:7b:b8:
29:55:e0:f1:c0:2e:65:24:04:3a:77:c9:03:7d:e8:
46:f7:56:24:50:93:e2:81:b6:ab:d0:8c:ec:cd:b0:
a3:8f:88:5e:29:d5:c6:d9:0e:e9:ab:93:00:c1:34:
11:28:b0:bf:20:e5:bb:75:f8:e8:bc:f4:0a:b1:36:
d8:81:30:dd:83:ba:13:17:ae:43:e8:89:b0:f0:50:
50:d3:c2:26:02:62:b8:5e:22:8a:f1:47:31:8d:91:
04:60:80:3c:15:fa:0e:82:c4:1e:04:7d:19:80:16:
bb:1e:f8:ee:a8:f9:8e:6c:8d:dc:4d:ac:f5:cf:90:
87:99:70:a5:50:bf:9d:b0:a1:a1:1f:ab:81:e8:33:
fa:f8:6b:b8:4f:a8:9f:d3:11:de:d6:90:0c:0d:20:
92:ed:a9:1c:05:44:f7:7c:6e:11:09:25:79:d0:cc:
79:eb:79:48:98:1b:a4:7a:ee:9c:c9:36:06:b8:81:
cb:cc:ca:ee:66:44:d4:08:e0:7a:a2:11:d7:07:26:
23:53:48:4b:15:8d:f9:0b:77:35:25:6f:dd:ef:d8:
ae:dc:82:c3:13:13:86:dd:79:8a:35:35:c5:b0:c3:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:08:9F:50:C5:A5:7D:8C:41:C1:67:DB:68:50:A7:9D:B1:5B:4F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b4bf23-5c80-45ba-9d89-889ca55c451e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.82.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:6f:33:b0:5d:d2:cc:39:94:8b:a7:86:ab:c7:11:43:47:18:
91:a4:c1:43:8b:6b:ff:35:dd:23:c5:89:a4:b9:09:90:99:f1:
ae:c1:1b:a4:8f:21:7e:0b:91:c3:75:09:b0:28:bf:fd:b1:8f:
37:2c:be:13:f0:c9:e2:bb:42:1a:87:4c:d3:ae:ec:13:62:25:
a6:a5:8a:14:65:15:96:0b:54:35:a4:3e:37:64:6b:10:09:f5:
7b:e9:61:3c:22:70:6f:4f:50:d9:2f:a2:3f:3b:1a:11:01:18:
bf:61:91:62:21:d6:ee:42:60:e5:c9:fd:a0:b9:17:01:22:01:
71:9b:97:c5:69:3f:2d:6b:0a:92:a7:e7:11:ec:92:69:38:40:
59:75:82:50:4d:57:cd:2b:08:a0:ff:a6:2a:e4:85:d2:ed:de:
a3:70:3f:42:ff:66:f2:d8:a1:36:2b:21:45:b3:39:ce:2c:94:
fe:1f:96:ff:9a:89:ac:99:7e:8a:27:4b:0f:06:63:2a:24:58:
1e:17:2c:1c:f7:c0:0c:68:77:98:55:08:0c:d4:e3:64:35:f2:
e8:17:51:6b:2c:ef:31:b4:bc:e4:02:27:90:57:8b:41:84:9d:
a5:0c:03:c7:03:cd:ae:52:4f:23:cc:a4:ea:0a:97:00:df:82:
f9:1e:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:00 2025 by rpki-client