Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa
File: 25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa (raw, json)
Hash identifier: 1OsXAFNbhZNDrVkHU+Fwjv4C36e9MulPFp4jPOGygCA=
Subject key identifier: 79:E8:6C:89:60:F4:49:1A:F3:B7:B9:0D:9A:4C:21:35:8C:E8:D0:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 740AB7A7AE545460B78F88D123C57B3CCB11B44A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:0a:b7:a7:ae:54:54:60:b7:8f:88:d1:23:c5:7b:3c:cb:11:b4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=e53fea86ce9b47ca233d11aef84ed3418a9333bc7e2ccdf564529b1922a9d361, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:c8:f5:33:7a:45:1c:d5:51:73:95:2f:c1:
d2:84:cc:56:7e:44:f3:d4:a5:37:0c:90:c5:2d:7e:
bf:22:3d:f1:d6:27:71:cc:1f:e0:04:7e:b7:f1:78:
ea:f8:59:5a:25:e6:84:e0:e9:09:42:d1:14:73:51:
f5:a3:48:72:34:82:56:cb:49:4f:9f:36:4a:83:06:
55:5e:72:59:56:00:ce:19:f3:5e:ff:b2:18:bc:f5:
cc:9f:b9:66:cd:d8:8f:fd:09:2b:90:4f:57:2b:70:
a9:6a:94:6e:a0:e2:51:9b:f6:3d:b8:4b:c6:bb:8e:
c8:24:38:58:f7:fa:df:27:5a:0a:47:94:a9:34:ce:
98:16:8d:e9:e6:a9:07:ec:e8:15:1b:fe:44:a3:62:
bb:5c:5d:23:36:d4:f0:ec:4b:36:f8:97:11:ea:e5:
6e:2b:9f:39:38:ae:98:75:84:8b:0c:54:62:92:5b:
5b:8c:50:eb:24:d3:c7:a7:8c:8c:5e:c5:ef:56:bd:
f3:9f:14:b6:ea:19:06:4e:44:f1:39:96:b3:e1:1e:
40:d3:c8:b8:05:78:f7:e8:74:6d:0c:c3:ca:6e:92:
be:d6:dc:9c:c3:0e:c6:0b:dc:b2:c5:78:e6:6e:45:
64:50:97:08:65:38:21:bd:5e:39:b9:00:b9:14:e4:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:6C:89:60:F4:49:1A:F3:B7:B9:0D:9A:4C:21:35:8C:E8:D0:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.68.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:68:89:e3:3e:4c:c1:b6:9d:31:e6:3e:18:88:ee:22:71:43:
37:5e:4a:97:0d:f6:ee:25:c4:41:0d:f0:c2:4f:0f:30:0a:d2:
8b:69:9f:a0:60:6f:77:fb:ac:b9:8f:c5:41:36:1e:97:79:76:
f7:30:3a:4f:c2:21:ff:95:d8:61:10:ce:17:ce:1f:09:d0:0e:
b3:63:76:60:8f:ae:f0:4a:6d:75:de:a9:b6:11:ee:3f:f9:26:
42:7e:67:cd:b0:5e:73:16:51:4e:ef:33:6b:5e:85:39:1c:49:
0d:6b:8e:f6:3d:9b:b6:24:40:88:33:26:0d:71:f9:78:39:fe:
14:64:d6:7a:8c:40:38:67:02:43:93:41:d2:99:7a:81:1f:8c:
6e:a8:65:ca:c4:e0:4c:86:b8:10:80:ab:62:02:a8:11:45:ea:
98:c9:18:a3:86:d6:d2:88:65:30:93:29:e4:b2:6f:1b:c7:f4:
18:8c:26:2b:9c:cb:57:0e:8b:49:18:b3:53:60:7f:d5:9b:be:
a9:93:5f:5a:b6:21:25:01:75:37:28:43:28:7e:59:14:2e:58:
a4:93:b9:e9:ac:65:ad:6c:bb:bd:70:59:97:a0:15:cf:b5:81:
08:ed:af:cc:87:90:af:c6:5c:78:d0:38:bd:da:e0:b2:24:a7:
d8:3d:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:32 2025 by rpki-client