Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ee22c9-4918-4fcc-bfe0-41c7247cbe08.roa
File: 12ee22c9-4918-4fcc-bfe0-41c7247cbe08.roa (raw, json)
Hash identifier: 5toSMPkq/rwRlDCu3PpVRvP345idOUFvoQhh17WL+Nw=
Subject key identifier: 84:1D:E0:50:3E:0E:48:24:1C:40:58:04:DD:AC:DD:C7:16:BF:64:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C25601699A48A922DF33F539670A4D5FB154DFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ee22c9-4918-4fcc-bfe0-41c7247cbe08.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 192.184.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:25:60:16:99:a4:8a:92:2d:f3:3f:53:96:70:a4:d5:fb:15:4d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=2273f33b32b4a5ab1f98a42944228eaa70e9d73051301ec8c7016ab21e6ea6ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:ec:5d:3d:eb:6b:4d:e9:5f:7e:e7:ae:f0:
5e:21:59:d6:09:02:5a:ef:a2:b7:c4:6a:2e:f5:5f:
f6:c3:39:58:d8:47:ea:a7:0b:bf:2b:2b:57:ff:21:
9a:f9:ea:93:16:d2:70:57:4f:43:32:43:42:52:da:
6d:56:87:16:db:5d:43:f8:66:99:7a:27:21:40:98:
12:f4:65:c8:28:c6:55:e6:67:88:40:dc:00:b3:f7:
fe:1f:4a:78:2b:f2:e2:38:82:cf:91:5e:db:b4:2d:
f9:e3:e4:02:34:ae:1a:0d:49:10:40:70:36:ef:9f:
10:2d:44:eb:ee:45:85:cf:a1:3e:43:b7:f1:79:a8:
b1:05:36:64:e2:8e:45:ed:9f:13:43:f6:88:d1:2b:
88:27:7f:b7:60:fa:47:e8:fa:4d:aa:c4:66:9b:0c:
00:18:6c:34:29:97:03:cd:73:6b:62:b1:d1:31:ef:
bf:f7:b1:ac:cb:15:5d:68:80:be:27:d9:1f:e7:8d:
2c:22:79:9a:fc:27:b9:10:85:de:2e:94:f3:e8:e7:
84:6f:5d:8c:d7:f0:23:77:20:8b:f3:a4:11:1f:90:
f7:54:ce:d1:ad:e3:ca:16:25:71:e1:7d:70:f4:1b:
c7:b9:71:cf:a6:4f:51:b5:6d:3a:84:a2:2c:fd:08:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1D:E0:50:3E:0E:48:24:1C:40:58:04:DD:AC:DD:C7:16:BF:64:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ee22c9-4918-4fcc-bfe0-41c7247cbe08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.184.32.0/19
Signature Algorithm: sha256WithRSAEncryption
04:06:0a:9d:0c:89:dd:7a:fd:63:28:52:3d:fe:d5:24:aa:79:
0b:e4:65:94:59:4b:bc:95:14:2c:ce:ef:1e:73:32:ce:3b:da:
42:0e:f0:7f:85:22:fd:a2:2f:17:07:67:bd:9d:49:4a:be:65:
12:74:0d:28:43:40:bc:31:fd:51:dc:e3:22:87:d9:06:ae:eb:
aa:d1:56:0a:7c:4d:5e:ad:a6:8c:bf:e1:bc:6e:75:7e:7b:c8:
19:ff:e9:d8:7e:fc:d9:20:78:2b:50:67:db:11:6a:b0:86:7a:
bc:ff:99:86:12:6e:36:a6:a1:89:42:33:a8:09:54:da:15:a7:
c7:6b:62:84:7d:64:4d:ff:8a:bb:64:96:2f:ae:56:2e:c5:c4:
eb:ab:c0:0a:a8:04:9f:67:97:9f:c4:95:13:1f:99:84:ec:5f:
21:8f:3f:53:ba:5a:e7:4f:12:0d:6f:25:12:a0:51:23:01:26:
2f:18:1f:fe:ff:1b:39:27:da:11:69:da:8b:4a:92:c6:b8:14:
bc:47:ce:05:d5:82:53:5a:24:9a:05:48:ed:5d:1b:a8:15:57:
1c:63:a6:56:2c:36:35:96:9d:22:a4:bf:87:33:8f:0c:bb:26:
2a:c1:e2:c1:6a:84:56:b7:58:14:ff:61:fd:80:ff:62:e9:0e:
1b:b6:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:58 2025 by rpki-client