Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f3cc807-8e8e-4c91-b344-9f6fe0506248.roa
File: 1f3cc807-8e8e-4c91-b344-9f6fe0506248.roa (raw, json)
Hash identifier: DZtGYNLnPvZ2ecOoGJNG1CO65njierSs9WoR+SJ6P8Y=
Subject key identifier: C0:00:77:97:4C:1B:70:38:D6:C8:8F:CA:BB:1A:08:AF:A5:D8:B7:43
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1132AA766718B05FB1F7AD32F53CF618222062F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f3cc807-8e8e-4c91-b344-9f6fe0506248.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:32:aa:76:67:18:b0:5f:b1:f7:ad:32:f5:3c:f6:18:22:20:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=bded4918edb5bbacf5c82c98c3d52345656f0e2ee8249fb0155a4c1e09bf787d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:0b:eb:df:75:7f:de:fc:b2:34:1e:e4:08:
25:55:3d:59:5b:a2:f3:81:4a:c6:23:c4:f4:08:74:
67:31:3e:55:8b:1b:10:ad:90:6e:23:ef:68:c5:a9:
64:16:6a:27:0c:24:b9:78:03:00:17:8b:0f:b9:52:
bf:79:26:1e:dc:c4:a5:e1:fc:29:ff:85:0f:54:db:
c7:45:44:7d:a4:2a:90:89:79:4b:61:0f:be:c0:ac:
25:cf:58:cc:b9:3e:6d:d1:99:70:cd:08:f8:51:ba:
29:f3:f2:b7:99:91:29:8b:65:20:3f:57:03:6c:47:
7a:4d:84:e4:a1:ee:84:1e:3a:30:08:ca:91:c7:78:
97:6b:95:df:bf:2a:82:e0:bb:2a:55:a2:f3:bc:68:
2c:bf:55:89:84:fa:1d:ce:2c:72:99:c6:54:cd:e4:
56:46:c3:49:04:d8:ff:52:f5:45:05:26:36:37:e0:
39:14:12:92:03:bf:24:3f:54:e3:f2:e8:19:5e:e2:
af:5f:d9:8a:81:23:a5:85:9b:75:5d:82:d9:6f:e1:
d3:b5:1e:7d:32:2d:71:79:64:ff:3c:2f:c6:9a:83:
ad:1a:d8:f0:79:78:19:ec:57:c6:90:a2:66:e6:16:
fa:79:7d:6c:31:4b:b8:ff:d3:09:ef:74:b5:28:1e:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:00:77:97:4C:1B:70:38:D6:C8:8F:CA:BB:1A:08:AF:A5:D8:B7:43
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f3cc807-8e8e-4c91-b344-9f6fe0506248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.66.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d1:a8:c3:10:0b:ea:e1:8a:16:af:f4:97:05:3b:c8:6a:51:
e7:ed:2d:f7:94:ac:d4:43:d6:c8:14:1f:59:48:dd:0e:a3:87:
5b:7e:1f:e2:c6:76:c7:c0:e9:88:b1:32:4f:ea:49:ac:7b:e4:
9a:a4:60:08:51:1d:c9:12:53:7d:2e:96:f7:8b:ad:cf:ae:59:
5e:64:2b:35:59:e1:78:d4:54:43:61:1a:c4:67:34:1b:7d:ae:
bd:6a:b4:ec:93:e5:5d:09:8d:29:71:ee:57:a3:06:7d:69:2d:
a7:df:0d:68:60:38:29:d2:ab:d2:06:52:62:c4:25:f2:90:c6:
aa:51:e9:0d:bf:fa:4e:f5:36:a0:84:3e:0f:04:67:af:76:67:
fe:8c:1f:d4:f0:df:0d:2f:8a:60:cd:cc:54:31:28:d1:33:40:
5e:b9:99:20:b6:1d:10:f0:95:ad:e4:05:93:85:1f:e7:43:87:
9a:b4:9f:4a:5c:bb:bf:c3:10:b1:6a:26:f5:99:53:02:96:6a:
81:e8:a3:4b:06:74:28:f3:10:46:35:15:6b:ea:ee:49:b6:b9:
a4:c0:d1:d7:71:70:9c:24:39:50:96:2e:ed:00:e0:31:dc:12:
42:5e:df:d0:6c:9c:e9:f8:4e:2c:76:13:c3:78:8c:80:48:02:
37:d5:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:43 2025 by rpki-client