Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa
File: 197db50e-a85a-4e13-b89b-2e27b2a468c8.roa (raw, json)
Hash identifier: ta5c50VpbraM30FkvHroEg/hee6Q8Dz6gCjeWs39Buk=
Subject key identifier: A2:E1:1F:60:CA:CF:D4:E1:34:D4:79:6F:E0:96:B4:5C:F6:C0:5B:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27F11B0A7BA90B91FE2944366D6AD7D99738FEDC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f1:1b:0a:7b:a9:0b:91:fe:29:44:36:6d:6a:d7:d9:97:38:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=454c43083dfdef12731e887a1e265c93cfbd1fb1c8d34089cbbbf42dfac67887, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:2d:aa:24:7f:41:0e:97:5a:6b:16:c3:2e:
79:31:56:52:0b:9b:e2:c0:77:88:20:8a:3a:13:ea:
ed:fe:f5:1e:78:e8:f3:83:fd:4f:bb:34:c9:66:40:
5b:83:d9:bb:80:05:16:c0:3b:b0:f6:4b:37:98:37:
36:17:5c:e6:f5:94:c8:42:68:ab:18:df:0a:08:a7:
e0:20:05:19:98:93:f1:f1:ed:09:1b:47:02:2c:a7:
c4:4d:b6:9c:7c:cb:5d:07:db:c5:87:94:f2:9c:c3:
99:40:0a:40:a7:c0:ac:a6:16:7b:81:aa:a4:b9:21:
0f:e5:fe:31:08:3b:44:f3:50:49:6b:2c:f7:fb:2b:
61:c6:14:ff:fc:72:f2:ea:5a:7d:80:3c:34:27:5a:
d5:13:f4:b0:05:4b:45:37:0a:91:f7:d4:ab:7f:c5:
1e:11:6c:a5:c8:24:a4:b6:99:08:5b:50:5c:47:d0:
a5:d0:7e:c1:5c:a1:a0:7c:bb:10:06:c9:cb:b8:92:
1d:ce:05:27:93:52:90:ff:f3:e9:f2:d5:07:47:34:
9b:0e:f4:c3:12:81:53:6c:96:18:2c:79:79:a6:6f:
84:4b:bc:8f:b7:7b:e7:ed:3f:84:ec:eb:8e:06:4c:
ce:9a:d7:21:5e:a6:9c:38:a0:19:1f:34:11:1b:e7:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E1:1F:60:CA:CF:D4:E1:34:D4:79:6F:E0:96:B4:5C:F6:C0:5B:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.104.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:90:17:11:b4:bc:76:dd:0a:c9:a3:45:bb:8e:4c:c8:b2:c2:
89:b9:a8:62:27:f3:2c:50:b0:ef:d8:56:39:19:b3:61:fc:a6:
51:5b:21:b3:fd:76:46:fc:4d:9a:59:02:4e:f3:5f:e5:fc:ce:
64:37:c6:95:d5:5a:90:cd:9c:a9:f0:b5:c5:15:e7:7a:80:cd:
5f:28:e0:5b:2f:63:95:ec:6c:2c:7e:a6:de:d5:af:1e:f1:d8:
f8:8e:bc:b0:89:73:9e:e5:a6:49:9e:ca:85:1e:50:dc:70:d0:
53:8b:d4:74:5c:9f:2c:15:a8:aa:c9:70:53:13:01:5f:dd:bb:
43:8b:49:bb:fd:b0:b4:10:ea:67:0f:8d:6a:f0:dd:e9:3f:cf:
62:96:d5:47:95:44:27:af:00:94:0d:46:d3:dc:ca:fc:0d:af:
df:1a:7e:43:41:1d:8f:04:d6:45:8b:4b:d1:e1:01:aa:0c:a4:
f3:a8:91:c2:c5:ff:0a:73:ba:82:d1:b8:64:78:54:cb:89:93:
b4:2e:df:7f:49:b8:02:9f:fe:c9:d9:92:40:d6:91:65:14:9a:
38:76:58:fe:06:59:ef:5a:34:5e:98:f3:5d:88:cd:44:39:c5:
12:bd:40:14:19:89:a5:fb:15:e8:bc:96:ab:ee:ef:92:f4:e2:
27:1b:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:02 2025 by rpki-client