Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d9f8c8-d7d8-4912-84b5-385d29a59a04.roa
File: 12d9f8c8-d7d8-4912-84b5-385d29a59a04.roa (raw, json)
Hash identifier: wFcxI2IjTNORmQa6bcssbi3HjihIMb1wn5OLZvbt9hw=
Subject key identifier: C7:92:C3:51:98:EF:F9:45:13:04:30:8D:70:CB:F9:4B:4E:DB:B8:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E798F5AC84D33C4B6107A9C32CE8F5BED6FA2D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d9f8c8-d7d8-4912-84b5-385d29a59a04.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 7224
IP address blocks: 198.14.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:79:8f:5a:c8:4d:33:c4:b6:10:7a:9c:32:ce:8f:5b:ed:6f:a2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=c84b81db8a8b8b7113a94b4a7d2742304d2ef006cddf7679ab2f71a9bebb30bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:e8:99:2b:34:bb:13:3a:0b:b8:3b:6c:63:
ce:ba:0f:5f:f5:26:27:de:04:b9:9e:26:b8:b1:4b:
b0:07:29:83:7a:f4:52:b8:7c:33:44:e6:c7:a7:cd:
bc:41:eb:af:70:dc:5c:4d:aa:93:f3:5a:f0:c4:24:
d8:77:27:a6:20:76:23:ba:31:cf:72:29:0e:b3:4f:
66:98:b6:21:f6:1c:bb:70:95:85:38:8c:92:20:0d:
b6:3e:31:88:c1:0d:b3:1c:40:5b:7b:91:2a:a8:3d:
4b:73:80:4f:6e:fe:0d:c5:d5:a7:cf:02:1b:cd:a5:
5a:56:9e:e2:0b:52:fc:11:f1:c1:d5:3d:c4:0c:2c:
79:0e:03:86:a3:f4:22:80:7c:00:c4:23:f9:b6:b7:
08:ac:cf:8c:4d:8d:3b:92:8d:cc:89:04:60:fd:4b:
45:fd:e2:0c:4b:a2:f0:2f:56:75:11:46:d8:93:53:
b7:42:1d:71:78:fd:9a:cb:ad:60:31:e0:99:92:19:
fc:f8:4a:b3:ae:26:07:df:0f:35:64:80:ee:cf:d5:
e7:6f:90:fa:7a:41:58:d8:53:dc:dd:94:79:42:ee:
7d:65:88:51:3b:2b:d8:da:eb:05:d1:ed:45:79:e2:
66:76:96:95:43:7d:cd:5c:95:d5:ad:07:61:4c:1f:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:C3:51:98:EF:F9:45:13:04:30:8D:70:CB:F9:4B:4E:DB:B8:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d9f8c8-d7d8-4912-84b5-385d29a59a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.14.0.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c7:9a:0b:46:9f:f3:ef:30:e4:fd:d7:8c:92:2f:49:44:8e:
48:c9:39:93:66:20:2c:55:29:ad:3d:d9:f8:63:4c:0b:bb:73:
70:8b:d2:65:d8:c5:71:42:cf:51:53:57:f3:53:5f:40:10:f9:
0f:2d:43:a5:69:a7:e9:ce:70:e4:2b:19:c4:8e:de:92:28:9c:
c9:a9:c0:c0:df:55:97:45:43:63:f3:06:97:eb:c7:e1:d4:64:
72:7e:37:17:81:83:d5:64:78:55:0f:e0:c6:71:9c:a0:ef:ed:
2b:75:ba:84:48:33:c3:d4:ca:90:9e:65:fd:70:4a:27:ca:6b:
49:e8:da:46:d8:06:d8:5d:1c:bd:83:5c:da:4c:65:09:36:54:
8d:74:ce:5c:eb:7d:fb:76:9c:3d:7a:01:9b:24:32:e7:3b:4e:
db:83:3c:68:a9:ab:c8:a6:f3:2a:83:1c:3e:cb:60:aa:44:b0:
78:e0:39:4e:3e:d0:ca:f6:45:ae:93:99:86:e5:94:08:c5:0d:
46:76:c3:72:15:39:29:91:46:55:96:6a:7e:2c:b8:35:95:79:
92:e3:f6:c8:49:44:ef:d4:ab:a3:98:e3:1a:17:8f:4b:37:3c:
67:d2:f0:84:73:1a:a9:06:cd:81:d0:dc:a8:18:6c:1e:56:0c:
a3:2d:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:22:04 2025 by rpki-client