Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1714b6b0-e46a-4ba1-a6a9-aea53998513b.roa
File: 1714b6b0-e46a-4ba1-a6a9-aea53998513b.roa (raw, json)
Hash identifier: HGmO/Uj+DFWz0BAUMz2ujUWckWK/55kR0kbpOoIfz0s=
Subject key identifier: CB:7D:53:6E:DF:19:62:D6:C2:CE:7C:FB:A4:CD:09:DB:31:81:DB:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34F2CCD862ECEABCD671E8BDD839AC9648A98780
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1714b6b0-e46a-4ba1-a6a9-aea53998513b.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f2:cc:d8:62:ec:ea:bc:d6:71:e8:bd:d8:39:ac:96:48:a9:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=f147608decd2daed9ce27534b6be64f51f15aab3d1afa5ceb0a24d4cdc5ea410, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:a6:b4:34:94:c8:e5:de:d9:78:02:76:14:
4c:a6:56:fb:71:16:fc:20:5c:e5:d7:df:07:df:63:
11:77:12:64:69:24:f5:70:13:90:61:0d:cd:ee:cb:
3b:f1:af:e4:46:ef:fe:a9:bd:85:c1:39:d6:19:cd:
d5:de:91:38:67:3f:de:fd:8f:f6:8a:02:87:2b:1a:
b7:3d:68:cf:f0:59:71:f4:72:45:cc:b6:37:80:7e:
8d:a1:e0:76:5c:8a:3c:31:12:6e:b7:90:c9:44:15:
73:61:8b:71:6f:9f:e2:26:cd:ca:d5:19:a0:40:bd:
da:14:83:5c:de:31:aa:b7:2b:c9:7b:d7:1b:d2:f8:
f1:97:fd:77:d7:96:dd:98:de:ca:49:b6:9c:1d:00:
6c:c7:67:05:52:f1:25:85:de:44:36:f8:be:13:48:
89:2c:ad:42:98:3b:2a:1a:6a:20:39:9a:ab:1e:89:
60:a2:01:46:16:91:f7:73:f6:ff:0d:15:23:95:ba:
82:0e:e8:60:27:e7:fd:a6:01:dd:10:52:46:6c:68:
57:1e:02:db:2d:dc:d6:ad:3a:db:e3:57:a3:42:46:
3a:fe:cd:2b:ae:ea:c3:84:32:2e:be:fc:df:6d:58:
d8:e6:9b:34:d1:a5:26:3b:63:5c:68:39:d7:b8:ca:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:53:6E:DF:19:62:D6:C2:CE:7C:FB:A4:CD:09:DB:31:81:DB:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1714b6b0-e46a-4ba1-a6a9-aea53998513b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1d:4c:3d:aa:a3:8c:91:8d:44:14:45:14:7a:36:13:27:66:
a1:8f:f6:ed:7d:d1:a1:d5:09:64:2a:ff:cd:6e:e5:b1:07:b2:
c6:5d:90:41:3a:54:22:56:11:8d:6d:47:7b:e1:bb:1a:32:7d:
ac:ae:c6:cf:1f:64:a8:3a:9a:a2:a1:a8:03:b1:eb:59:0c:2f:
b5:0e:67:c9:a0:13:6d:dc:f1:df:c7:7c:dc:36:41:85:59:09:
28:7f:62:80:08:6c:e4:68:19:54:3b:bc:ae:d4:68:30:30:26:
a6:98:e9:b5:b2:3e:e9:c3:51:ef:6e:05:ed:93:16:b1:68:1a:
21:a2:c5:ee:ba:de:50:b9:66:56:76:63:de:5c:77:5a:1b:1d:
0a:dd:d6:18:40:37:ec:0f:da:3b:07:a6:32:f7:1e:89:c1:71:
f8:63:06:0c:36:8b:fe:99:40:e3:bd:33:14:e0:c1:5e:19:ec:
12:96:c9:d4:ee:94:48:1c:47:73:85:cb:ed:c4:01:f4:a9:5e:
15:bd:74:44:29:c6:80:ad:c2:87:7f:ca:e1:1f:89:07:92:92:
94:0e:ee:40:34:da:dd:a5:75:02:b4:ec:ad:22:d3:70:58:c1:
c5:08:56:7b:a7:2d:33:a9:40:21:8d:cf:7e:65:e4:e0:55:d0:
48:db:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:13 2025 by rpki-client