Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa
File: 257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa (raw, json)
Hash identifier: gqYeSzt7uHh3TALhVRx899XB4zzKORDlMcIxIVQZKfw=
Subject key identifier: E2:C6:DF:D4:57:A3:11:FC:29:02:43:97:50:7D:B7:B8:0A:45:6F:91
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CC40EC16ABD97D78B56C00435A92906BE379370
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 198.211.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c4:0e:c1:6a:bd:97:d7:8b:56:c0:04:35:a9:29:06:be:37:93:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=629fa2c770a3c1997ccc770f82916bf02e14d95692e305793dff4077418a14c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:f2:8d:0f:9c:80:53:a5:d4:3a:9a:4b:21:
93:c7:87:35:62:28:cb:ee:6a:02:6e:4b:44:32:fd:
69:5e:ed:3d:c4:25:2d:4c:4a:02:a8:94:81:c6:51:
43:be:1e:c0:5e:8c:03:7c:25:67:01:9d:46:3c:dc:
a2:83:2d:5e:2b:cf:04:ab:5f:8a:e7:99:ff:3e:57:
49:0f:f4:f7:50:4c:bc:1f:47:d7:23:24:4e:13:07:
41:ef:62:b1:d0:f0:3c:55:26:77:5d:c7:94:fa:0b:
1e:8c:af:3a:07:90:5f:13:20:2c:f1:2f:26:90:97:
4c:33:86:4b:d2:55:9b:1a:a3:dc:c2:f4:c3:50:14:
2f:8e:70:b4:dd:15:30:ae:23:8b:e4:42:a4:8d:c5:
d2:3d:5e:9a:01:18:87:a7:6c:d1:4c:23:d2:2e:1a:
98:36:75:de:a7:0e:c4:18:13:9a:bc:9f:3c:73:b7:
21:a6:f0:6e:1f:2c:d4:5c:66:83:4a:c7:41:69:07:
85:4d:bc:47:bf:43:51:00:9d:cd:f6:6b:44:25:a6:
f4:1f:ce:05:7d:33:4e:f0:33:18:67:75:f4:f0:d3:
d8:4e:7a:9a:e8:5b:10:b9:16:d7:5c:89:da:10:30:
54:88:53:f2:56:21:d4:25:eb:47:72:93:e4:0b:f7:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:DF:D4:57:A3:11:FC:29:02:43:97:50:7D:B7:B8:0A:45:6F:91
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.211.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:de:2e:0c:8b:39:87:9d:86:d1:7e:a2:1e:d9:4f:27:7c:6a:
90:a3:3a:bc:31:b7:b5:cf:49:77:f9:a3:81:e3:a6:a2:ec:39:
82:10:51:c8:95:cc:ab:0a:54:e8:51:c1:37:a4:f3:df:4f:cb:
d2:77:40:05:e1:04:27:d4:64:55:d1:ed:ef:a6:33:0f:b2:04:
10:1e:82:ed:fb:0a:b1:84:8c:99:bb:8e:7b:3c:2a:f7:fe:1d:
88:87:ae:8e:61:4c:3f:9b:72:23:ab:b2:91:c2:f3:23:80:7b:
8b:c2:c7:a0:98:51:8c:84:5a:9c:24:24:0b:ab:8d:3b:09:89:
1c:96:e4:69:4c:16:66:6d:40:fd:13:ee:16:3c:4f:86:dc:77:
f4:65:bd:5f:33:22:d2:b2:c8:01:89:c8:b9:01:0d:dd:44:aa:
90:77:f2:2d:c1:a0:00:f2:fd:f8:8a:48:83:03:2c:67:72:9f:
8f:a2:14:16:d2:fd:b6:09:2b:a8:a3:c6:18:86:39:bf:9d:65:
95:80:6f:22:04:5f:09:dc:9c:ba:d1:19:52:dd:ff:82:4e:95:
52:7e:fa:37:69:59:8d:df:04:e6:90:0f:ba:b2:ae:2c:e7:13:
65:72:e4:69:29:ce:b6:85:5f:9c:d9:5f:bf:3e:5f:7b:a9:36:
a4:6d:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:06 2025 by rpki-client