Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa97ea8-217a-4007-8c5b-4157139bfb84.roa
File: 1aa97ea8-217a-4007-8c5b-4157139bfb84.roa (raw, json)
Hash identifier: 94KLLInMkB6HS1Gfk+zrSCCD9blgf7JyqXLKV6RglTY=
Subject key identifier: 40:E6:4C:5F:FE:E3:A9:26:BA:79:35:C9:D7:9F:DF:93:AC:58:FF:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CC9C9F234914FBFA509696449C26ADED50317B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa97ea8-217a-4007-8c5b-4157139bfb84.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c9:c9:f2:34:91:4f:bf:a5:09:69:64:49:c2:6a:de:d5:03:17:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=57790e7355d2cb755822754745075e69d14c691756ce6913b12b9de90deb168b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:b9:68:ba:8a:d6:2b:cb:2c:f5:81:ab:63:
5f:03:40:c3:44:22:37:70:77:b8:e6:48:f9:8a:7c:
7a:ac:24:cd:f2:65:66:5a:c3:b9:87:71:39:5e:d9:
7c:4f:32:6b:ae:e4:b1:7d:f8:e3:3d:9d:4f:b9:a7:
24:cd:dc:d8:1d:9a:15:c5:92:2d:11:da:19:7a:91:
f7:2f:3e:68:30:3f:7c:2e:78:83:33:ec:2b:5c:93:
a3:39:57:21:c3:85:18:c1:09:99:ea:ea:ea:c8:10:
c4:05:ab:09:28:33:68:00:6e:92:e9:08:a1:ae:54:
3b:83:61:68:c1:92:53:b3:b0:fe:f1:9f:86:3f:47:
2e:0f:b4:cb:30:c9:50:f6:f3:90:be:1e:0e:3f:14:
e0:e3:b4:ad:ce:78:62:75:62:79:33:eb:b2:98:4d:
a2:9c:15:dd:74:ae:0f:9f:38:56:3b:1c:86:ac:45:
42:b8:72:b9:f1:98:23:65:f7:80:ef:83:fa:c7:ea:
f8:89:73:1e:0b:78:7e:f6:ad:5f:e7:19:b3:b8:c8:
8d:b8:1e:a6:ef:53:4c:bd:61:55:11:7d:9c:92:ae:
f9:10:f6:3f:5a:80:fb:bc:ea:1e:3e:25:90:db:7f:
87:bd:a3:6e:d7:7e:53:c0:fb:2d:ba:ab:3c:ac:23:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:4C:5F:FE:E3:A9:26:BA:79:35:C9:D7:9F:DF:93:AC:58:FF:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa97ea8-217a-4007-8c5b-4157139bfb84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.88.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4b:d0:cb:79:f4:d2:3b:55:33:7d:c9:16:9f:04:23:b7:c6:
d5:2b:c3:e7:a5:ac:02:3b:28:f4:f8:8b:f5:d2:b4:78:65:c6:
55:e9:b1:87:40:d6:58:74:a4:2c:e0:e9:ec:5f:66:2f:ab:a5:
48:a7:fa:91:0d:0a:44:45:51:03:d8:f5:c9:f2:3d:c4:b7:de:
12:30:4a:a3:bb:e8:0a:90:13:43:1d:a7:bc:b2:ff:07:67:72:
e8:6f:59:54:fa:44:4c:f0:49:03:b1:3a:b1:61:61:ff:cb:5b:
bc:03:54:25:b9:92:90:8f:70:df:fb:aa:5c:61:d7:2b:aa:f6:
1f:1f:c1:45:9a:50:89:7d:d2:e8:ff:d4:35:70:a5:21:9e:f4:
f1:00:09:1f:bb:97:d3:9a:9d:6e:d9:b8:2e:fa:ab:9f:5e:5a:
04:ba:72:bc:f1:f2:4c:2e:22:12:40:34:25:af:0a:af:c4:e9:
61:cb:d1:14:53:a4:f4:5d:83:4f:09:47:84:e8:b6:93:72:da:
9b:36:68:09:ad:e3:3c:0f:fb:e3:bb:4c:4b:6e:a4:b7:33:3f:
0f:11:8f:38:9e:1f:b3:cb:e1:af:09:13:19:7c:34:80:84:2e:
7e:a2:d2:68:2b:e6:bc:7e:51:87:ff:6d:13:95:25:56:63:fb:
40:67:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:31 2025 by rpki-client