Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
File: 259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa (raw, json)
Hash identifier: jeXDUq5xuE8v0XMDv42627ZrGS1qyqqB2Wkn9feOjfc=
Subject key identifier: 64:DA:55:4D:19:49:A3:B2:34:18:4F:C1:75:66:72:11:AE:19:10:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 551A0E3FF77189E81A9802D185703E62238ACB04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.88.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1a:0e:3f:f7:71:89:e8:1a:98:02:d1:85:70:3e:62:23:8a:cb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=19b3aa464c36ac74f52f6485fed41f5ef897f305aec2639345f12bab7926c9f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:5f:31:20:03:ba:f6:a0:4d:83:23:50:a7:
89:30:7e:81:93:83:26:b2:90:1f:ad:19:79:d0:33:
ce:5f:27:ac:d5:27:41:d0:74:71:e5:37:eb:eb:23:
00:9f:29:b7:4f:22:d9:ae:be:30:ce:a2:75:9f:23:
3a:c8:79:08:50:31:ad:f4:d8:4f:15:74:64:6a:8b:
6b:8c:d3:34:4c:24:22:e3:41:2e:09:07:16:57:13:
c0:d2:f6:9f:f1:1e:3e:a8:c1:83:3e:14:d3:33:64:
51:f6:88:44:4e:58:b3:c4:65:f5:8b:b8:c8:f5:69:
9b:51:24:73:c8:90:b3:f4:65:7d:42:cf:d8:a5:44:
d5:7a:7e:50:d2:18:a3:70:f7:a0:33:78:2d:48:50:
ff:90:c6:f6:29:0b:63:5d:30:56:74:48:d0:fb:b3:
16:57:97:d9:cc:a5:87:db:33:44:a2:87:b2:7f:d1:
00:20:9c:48:9b:08:aa:23:cb:95:45:26:c4:55:d4:
9e:6f:71:d9:d1:f0:c4:76:8e:c9:f8:7e:59:dc:28:
5e:e6:2e:c7:5b:a6:77:f3:db:47:36:08:60:f4:39:
d0:9f:a7:a4:76:06:e2:09:16:27:d7:b8:93:a3:3e:
3d:4f:0f:24:38:bd:85:ad:44:7e:08:46:d7:88:c9:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:55:4D:19:49:A3:B2:34:18:4F:C1:75:66:72:11:AE:19:10:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
32:ab:ec:c8:2a:3a:42:4e:9e:54:07:17:e1:94:f8:04:1c:d9:
de:39:05:7b:13:69:7d:8b:4c:91:13:89:e7:f8:34:ea:f6:7c:
37:7b:e7:fb:cc:44:e4:f2:28:30:5a:d3:fe:11:88:2b:69:f1:
bc:73:01:31:23:38:2a:ca:1a:08:29:48:10:e1:78:c2:e1:ba:
ce:a4:dc:2b:69:ce:12:6a:59:b2:74:0f:97:26:f6:ae:14:bb:
0a:81:07:9d:68:81:79:60:f9:6b:21:2e:f3:44:28:93:ac:be:
27:25:e7:62:76:67:79:f1:15:6a:6a:82:47:fc:eb:fa:91:0c:
e5:d9:93:1b:0b:01:9a:14:cf:42:43:05:45:8d:b0:2c:93:ab:
0f:f5:38:23:ea:e1:de:87:72:e1:cf:9f:c9:68:b9:7a:43:3d:
6d:f0:46:f4:d2:f0:cb:e6:c0:2b:1d:52:aa:a9:81:33:2b:88:
03:2e:9a:c6:bf:6f:09:42:8c:04:4a:09:80:a8:48:a9:8c:b2:
82:30:05:9b:b6:16:ed:88:49:39:8f:5a:24:b0:4d:ae:22:01:
8a:bc:ab:86:15:81:70:29:26:ac:f3:c6:36:02:fb:31:15:64:
b1:94:09:e2:87:4d:3d:e3:d6:4e:30:02:78:10:03:81:82:e8:
68:de:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:21 2025 by rpki-client