Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15e49a07-57b5-49e0-8c9d-da8417a8456a.roa
File: 15e49a07-57b5-49e0-8c9d-da8417a8456a.roa (raw, json)
Hash identifier: WCFu1we/HyJ/eLCvgtaHZB1ydNcDBP41HttU0ABQDCQ=
Subject key identifier: B4:73:B5:E1:A9:C4:39:27:1C:96:86:B0:07:7E:4B:2A:58:EF:05:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E50541443C612C1BE8A19C9EA6F412528E4BCCB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15e49a07-57b5-49e0-8c9d-da8417a8456a.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:50:54:14:43:c6:12:c1:be:8a:19:c9:ea:6f:41:25:28:e4:bc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=7fab0dad381b79f250d858f25a2bff07c46ff42a0beaaa0b66e5cdc3479ca6ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:49:55:5b:22:63:1e:41:62:55:8a:c9:57:
e5:f0:47:f3:ff:c9:42:9f:16:af:41:8e:5f:db:f9:
14:71:ba:7c:48:b8:d0:17:3a:f4:3b:2a:6f:f8:f8:
47:d4:22:cb:3c:fa:a8:bd:39:42:7b:b6:42:9d:32:
5e:af:34:f7:b8:d2:0a:32:d3:4f:0a:2a:4d:02:11:
a2:e3:49:3d:a3:e1:17:1c:84:fe:b8:82:bd:19:7d:
d7:d6:08:3b:8c:09:8a:21:69:8f:f4:a4:ea:b3:ed:
5d:1c:af:97:90:ea:97:41:74:89:70:98:77:97:89:
20:5e:f7:9c:c4:e3:99:67:fe:a4:f3:a7:15:63:0d:
95:fb:05:64:1d:ad:23:94:54:e9:b2:bf:9a:00:1f:
0f:27:7c:56:75:0e:3f:42:7c:9f:13:c3:00:28:b0:
35:61:cf:c3:87:e5:0a:b8:a7:69:27:fc:57:b1:5f:
66:62:c3:18:87:ba:cd:83:87:32:fb:08:6c:d9:a9:
d0:1b:3f:c9:3c:19:44:49:b1:4f:73:44:33:46:84:
65:c3:15:34:be:9f:e0:c2:ce:5d:ad:13:cb:f6:29:
17:1a:bb:6a:6d:94:9e:cd:1d:a8:0c:66:14:4d:e5:
27:6d:82:b9:0d:10:3d:f3:27:cc:4a:d4:3b:12:36:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:B5:E1:A9:C4:39:27:1C:96:86:B0:07:7E:4B:2A:58:EF:05:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15e49a07-57b5-49e0-8c9d-da8417a8456a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:52:2a:33:81:97:87:82:7d:a2:b8:21:16:60:ac:20:a4:cd:
78:a0:69:8a:7f:64:75:4d:e5:be:d3:78:15:6e:36:06:64:37:
0c:30:95:d8:7a:25:d2:61:e8:6a:5e:59:38:21:5a:08:8b:ff:
9e:1e:42:d7:c8:22:d9:b5:eb:d0:24:76:5e:42:f8:dc:34:fd:
75:2c:ae:99:90:bd:78:a1:63:db:07:f1:1f:77:0a:92:8a:df:
70:9b:cf:7d:41:86:f8:e0:40:51:00:77:d6:e9:e5:b5:03:13:
bb:a0:42:5e:16:d6:44:24:5e:65:56:d8:82:34:91:f6:5d:9d:
6a:3d:09:4a:22:c1:67:9f:f1:eb:f6:fc:39:49:6c:4b:14:c2:
d6:b0:c0:e0:bd:3f:58:5f:ff:a6:6f:f9:12:f6:12:57:9b:05:
e4:3d:e1:c2:b6:e5:ac:ec:52:ff:6d:3c:19:36:24:b8:5d:f2:
0b:18:ab:71:aa:29:15:d6:8e:dd:96:0e:ba:20:3d:3f:c6:1c:
d0:07:2a:7a:15:9c:d8:3a:d0:4a:8c:f3:a1:1c:41:d3:3c:3c:
6e:f0:5b:46:3e:cc:a2:12:64:0b:95:d1:81:23:56:18:61:ad:
eb:17:8d:ba:a3:d8:1e:6b:ff:b0:92:bb:b7:ca:4d:64:ca:83:
0f:de:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:30 2025 by rpki-client