Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa
File: 0f453c42-9e01-4343-9d00-659e79e057bb.roa (raw, json)
Hash identifier: gpBxr8XmVc6AY6JGVtAGJ/YbCQ1yBeSaWnMY3orrz/c=
Subject key identifier: 44:33:C3:A5:FB:6E:00:10:F0:96:9D:EF:76:BC:F2:62:2F:34:AE:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34720B679C965CA3EB066550DB607E44D1A7B3C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.201.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:72:0b:67:9c:96:5c:a3:eb:06:65:50:db:60:7e:44:d1:a7:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=38f51fa42b79ab60a5abce0ad7667875f3d893af229fa49e2e6cfab36c8f70ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:b8:0a:db:b3:36:63:18:cb:3e:6b:3c:c4:
17:8e:c9:8d:68:55:2d:fb:1e:1c:b1:59:e6:62:5d:
28:1b:26:44:33:d1:75:23:b4:98:16:8d:fd:dd:7e:
0b:1e:a2:da:e8:64:c4:aa:90:bd:4e:00:c1:63:fe:
c9:9b:0d:7b:8b:c6:32:f5:70:65:34:2b:a9:3b:c8:
d0:1a:08:94:fb:bd:49:e8:33:b3:14:4f:39:3b:c4:
83:84:86:b3:29:d0:b7:1f:f1:2c:65:9d:0e:fa:60:
a4:17:03:d5:aa:81:08:ba:f1:d3:d5:71:51:69:53:
39:f8:9c:16:80:12:54:c0:99:74:87:d6:d5:c7:63:
52:d4:af:17:86:f5:73:55:1d:1c:7b:82:a3:b6:d6:
cc:59:be:9f:82:22:f1:87:80:6e:d3:d8:20:3a:14:
6a:f0:04:c6:02:b0:68:55:53:0a:ab:d3:3e:d9:c8:
b0:99:22:e2:f0:9c:12:e7:64:ba:6f:32:ff:a7:a3:
5f:81:05:c7:34:ff:cd:17:19:71:d6:18:08:90:ce:
8c:96:68:bb:32:57:ff:b6:cc:19:86:e5:cb:67:d6:
4d:a9:6c:a9:9a:f7:08:77:79:04:56:ba:4d:aa:b0:
c7:b6:33:ba:50:56:da:70:3c:89:a1:74:a1:f4:e3:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:33:C3:A5:FB:6E:00:10:F0:96:9D:EF:76:BC:F2:62:2F:34:AE:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.201.0.0/19
Signature Algorithm: sha256WithRSAEncryption
59:f2:25:2b:49:cc:45:fd:8e:a4:a9:cf:d3:c6:00:e7:b5:b8:
e1:c4:e0:cf:08:55:b8:5d:3d:cf:47:6c:07:c3:9f:31:71:2e:
f2:30:60:39:8d:25:bc:fb:02:62:3f:e7:9a:10:f8:28:c5:65:
36:26:3c:e1:c1:08:66:3e:53:b9:e9:fa:92:a1:cb:d8:82:38:
9b:4e:5d:e7:66:9b:06:dd:5c:9d:b1:16:6d:61:83:b1:12:a3:
a3:d1:90:47:ff:3a:b1:26:ac:63:30:58:f4:a7:3c:40:61:e3:
ef:0e:d2:2f:cd:91:d1:40:06:61:df:26:36:f3:d6:56:da:e6:
97:4c:78:fa:ce:da:18:49:cd:0d:90:8e:3a:34:2f:93:e7:bf:
f3:07:8b:a2:3a:54:f6:d3:c7:22:28:43:5a:42:a9:71:53:62:
23:14:73:fe:94:bd:f3:fc:96:74:54:5a:50:4a:3b:1a:4c:93:
57:fa:0b:54:da:ca:88:6a:df:9e:d5:62:af:68:85:8c:2c:03:
e1:53:64:79:f8:ff:6c:89:fd:fa:ac:04:87:6b:4f:b0:6e:0c:
fb:89:3b:6a:a0:9f:3a:f5:f1:e3:6b:d6:50:9d:f3:68:12:df:
52:16:5e:84:a7:d0:c2:50:79:46:3b:43:d8:be:9e:72:16:8d:
5a:33:65:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:19 2025 by rpki-client