Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1799e86e-9c98-417a-9878-d7c2ab84b1a9.roa
File: 1799e86e-9c98-417a-9878-d7c2ab84b1a9.roa (raw, json)
Hash identifier: Lnzud4crYeH/taBT5w+17Ltm7RR3jA0aSQKiDPe+g3o=
Subject key identifier: 70:A8:18:42:37:E3:B9:66:8A:8C:D8:E6:C5:0E:29:6E:AD:DA:A0:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 235788DD2DDF04F5D836452657A95D944BA32C82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1799e86e-9c98-417a-9878-d7c2ab84b1a9.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:57:88:dd:2d:df:04:f5:d8:36:45:26:57:a9:5d:94:4b:a3:2c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=29e85415f32fc514eaa5e2b9c7e90d2151adfd3a3711adb89d2fc551362182f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:2c:99:cf:6c:e9:95:d9:da:65:9a:ea:1e:
4c:92:17:f7:27:34:7c:40:c3:31:35:10:84:c7:ec:
e3:7c:35:94:d4:70:ff:1a:68:20:51:4b:5d:ad:70:
78:59:5e:24:bd:8c:cc:d5:cd:0d:b2:58:2e:95:de:
01:0a:41:b9:81:98:bb:5b:a4:d5:7e:9f:df:27:cf:
49:4d:5f:6d:3b:21:c8:c1:62:df:14:53:64:4e:e8:
79:6f:78:78:e7:34:31:d1:3b:3d:db:2c:c4:c5:ea:
c0:1d:a2:d5:50:7e:e9:3d:0a:41:f9:7a:da:fa:43:
3f:c6:3f:45:36:a5:a2:da:52:a7:ea:e7:d8:8c:5d:
e9:61:b6:4c:1c:13:d8:3f:57:79:32:a4:7f:e1:b2:
09:62:4f:0a:9e:bf:33:3d:30:2f:15:e4:7e:84:7a:
e0:90:90:b0:ff:b5:33:b1:80:f7:be:90:c0:7a:56:
0c:09:25:af:da:b5:d8:2c:44:51:d6:b1:5e:2a:67:
09:f5:2f:5a:68:ef:dc:c8:99:c5:37:f1:c9:61:5b:
e7:bc:7e:e2:9d:17:b6:b3:9a:f9:01:0b:84:72:f1:
d3:b5:22:c1:3f:ca:88:5b:cb:2a:0c:3d:ab:36:94:
4e:89:d1:80:1d:8a:a6:c6:98:ea:27:f0:5c:6d:b0:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:18:42:37:E3:B9:66:8A:8C:D8:E6:C5:0E:29:6E:AD:DA:A0:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1799e86e-9c98-417a-9878-d7c2ab84b1a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:7e:b5:fd:b3:96:83:2e:b3:b0:de:84:7e:0f:23:fb:1e:a5:
d3:e2:7c:b1:87:d9:33:ea:4c:88:15:86:7f:1e:e5:74:00:2c:
c0:62:5d:cb:df:0b:3a:ab:50:92:2e:b5:f6:20:fc:16:10:44:
5b:e1:c4:20:72:48:dc:73:66:a6:61:1b:51:6e:8e:00:ee:8b:
1d:70:73:cb:1f:13:52:2d:ef:ac:e2:95:08:c2:1d:b1:de:1c:
66:18:41:a7:c4:c5:a2:c8:49:b6:f6:96:5c:e4:6b:8f:be:d7:
8a:10:fd:d7:7d:c0:54:03:76:e7:52:6a:cd:af:c0:19:d7:c6:
ea:a1:03:f9:f0:f0:c9:c9:9c:20:d2:e7:b4:1b:1d:1c:2c:a4:
ea:57:36:af:14:72:7a:c8:07:24:63:a3:39:2e:8c:26:f2:13:
82:24:b5:57:c8:6b:c6:39:4a:34:e8:62:94:f8:4d:d0:b3:79:
4a:0b:1a:50:84:b0:ea:ad:14:66:ff:38:cd:83:33:6f:5d:69:
5a:10:51:83:ae:f1:8b:9b:3f:9f:63:b1:a8:c6:d1:f8:22:38:
f6:c1:29:40:23:a1:41:a8:05:31:62:a8:1c:6f:d4:75:22:b6:
fc:fc:9a:3a:37:0e:ed:42:80:46:74:39:e6:2f:aa:e5:d4:73:
78:ff:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:08 2025 by rpki-client