Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a5a826-4e23-42a8-bf85-ad094f67717e.roa
File: 14a5a826-4e23-42a8-bf85-ad094f67717e.roa (raw, json)
Hash identifier: ec5aExTcnJmx67azoQ8IboztRI4K4dDh/635gbvL4U8=
Subject key identifier: 78:E3:55:C2:89:E2:59:7D:2B:6D:24:41:12:24:17:DD:E8:B7:7D:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64ABA826CC419E0343352759DBFF33A1B472D607
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a5a826-4e23-42a8-bf85-ad094f67717e.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ab:a8:26:cc:41:9e:03:43:35:27:59:db:ff:33:a1:b4:72:d6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=648f48ee49c662abed0a19bf169532f26d91cc1326b9bcfea535553b6d8616b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:72:10:8c:05:66:41:b6:88:b5:f9:5e:ed:
c5:75:95:dd:2b:2a:e8:9b:dc:43:df:53:0e:62:ea:
f3:07:c0:2d:a7:33:b7:ed:86:31:8b:ae:bd:f9:63:
4e:88:ab:d0:32:14:d3:b2:05:9c:cb:d3:6f:88:b6:
a5:b2:c8:ae:b9:8e:31:dc:8d:12:35:1d:2d:80:12:
98:e1:b8:82:f5:c7:5e:2d:4d:76:6a:5a:e3:e2:0e:
d6:3f:0d:b2:17:29:35:9c:eb:97:d4:c0:b0:4a:6c:
7a:bf:7a:f4:ab:c9:ec:69:f3:a4:1f:06:86:37:38:
2d:6a:d4:26:a4:72:d7:4c:c7:98:79:53:90:f3:e7:
fb:7b:e9:27:5a:9d:d7:31:2d:9d:de:40:0d:3f:81:
dc:13:7b:8e:8a:15:ba:cb:fb:13:87:a2:b7:20:1f:
ae:dd:95:e6:18:e5:f0:ce:4f:81:e2:20:d7:4c:3d:
df:1c:04:03:e0:b7:ce:b9:44:d4:43:6a:b6:3e:4c:
02:e9:bf:0f:82:87:4d:ab:63:f8:7d:09:8f:aa:76:
02:e5:d1:2a:8c:da:92:1f:2f:e4:41:2c:8a:df:7a:
e6:3b:9f:6a:d2:0e:0b:db:63:f3:4d:cd:4d:a1:b6:
a9:87:07:c4:3e:62:d3:d7:a5:a9:14:cb:ab:1d:26:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:55:C2:89:E2:59:7D:2B:6D:24:41:12:24:17:DD:E8:B7:7D:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a5a826-4e23-42a8-bf85-ad094f67717e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.112.0/23
Signature Algorithm: sha256WithRSAEncryption
14:4b:a2:53:f4:48:37:88:b8:44:d1:46:9f:42:6c:18:9b:ae:
39:92:04:b2:58:8c:6f:db:42:43:49:29:0c:ac:fc:0d:99:ce:
92:ae:b0:34:67:48:2b:ab:3c:43:ea:18:a9:b7:67:75:55:75:
68:e4:3d:f3:24:f2:e4:b0:21:7b:27:58:b9:75:81:e1:7d:b0:
9b:f6:a5:b0:57:9a:70:e6:2e:52:38:b2:71:29:f6:37:93:f5:
9e:b4:9f:65:97:cc:de:92:1b:61:da:88:1f:de:68:ab:3d:a6:
54:05:17:40:c5:38:33:51:73:9a:90:7a:41:50:67:d0:cb:5b:
f9:3d:e3:e3:54:91:48:4f:7d:b8:be:e1:87:65:3d:fd:ef:66:
06:c2:9b:56:7e:48:27:90:22:73:a8:f9:86:bc:96:c8:8a:74:
cc:90:20:8c:f6:68:17:72:ad:14:c9:31:37:cf:af:63:e2:72:
2f:45:5d:8b:16:b3:b2:b5:33:df:e1:a1:7f:29:bf:e5:b0:d6:
21:06:5a:02:94:49:86:9d:83:09:52:2a:29:cb:14:23:2d:65:
c5:0a:77:54:2d:24:2e:1b:25:19:73:20:80:77:7e:2d:48:b9:
b9:b7:91:ce:10:ce:20:dd:8f:80:62:40:42:3a:23:cf:2c:f8:
55:89:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:09 2025 by rpki-client