Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2f8e52-83f3-4bf3-905e-237615aeedbc.roa
File: 2c2f8e52-83f3-4bf3-905e-237615aeedbc.roa (raw, json)
Hash identifier: FIfjfC+tjcFnZAEhSODgyBJswj4LKAigWMCvzJmeKYg=
Subject key identifier: 78:9A:7B:43:6F:56:6B:CB:CD:07:BC:A4:03:3C:DB:E5:AE:20:D8:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4DD1C52808B9CB6106C4C6F689EE44F56E9AB310
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2f8e52-83f3-4bf3-905e-237615aeedbc.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d1:c5:28:08:b9:cb:61:06:c4:c6:f6:89:ee:44:f5:6e:9a:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=8b04c7a0706e61c8ddea9ea34fe3d8f6f29cc9428eb84f4ebd1d2d01067b0ef2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:14:38:f2:68:c2:97:4e:15:19:51:a4:79:
17:2f:c9:f6:c7:a2:16:17:01:16:02:22:c9:50:3c:
07:ed:f1:90:94:1a:19:9a:42:eb:72:a6:8b:77:f5:
5a:2e:f4:52:63:4c:cd:95:23:84:5f:e2:13:a1:0d:
c4:3d:43:8b:8b:f7:0c:e2:15:55:3f:28:c8:a5:4f:
d2:44:f1:54:53:6b:41:e9:bc:29:5a:8e:c3:90:0e:
b9:15:e6:2c:9b:c6:a3:c9:78:93:db:64:f7:52:0d:
36:9c:8b:68:c4:28:72:74:59:10:fa:5c:40:6a:65:
86:bd:e5:c3:9e:14:c1:dd:ef:dd:47:b0:4a:ac:ac:
22:38:e4:70:8a:48:ec:88:af:45:51:d0:35:1d:1b:
9e:7d:7e:8f:b5:22:94:ab:53:02:89:be:33:13:0b:
5a:e2:39:9f:ff:7b:ee:44:04:87:bb:61:c1:a3:94:
a6:28:ee:f7:3e:b8:f0:44:ff:33:d3:b8:8f:ea:a9:
0d:87:a7:cc:16:91:ba:e9:78:55:a1:02:55:28:33:
0d:59:ca:82:32:9e:62:dc:b0:de:dc:44:8e:0f:33:
08:c8:76:bb:08:7b:fc:68:cd:e6:32:bf:f0:f6:6a:
2f:f7:4d:95:a6:3a:96:76:15:23:03:f2:cb:4f:5f:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9A:7B:43:6F:56:6B:CB:CD:07:BC:A4:03:3C:DB:E5:AE:20:D8:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2f8e52-83f3-4bf3-905e-237615aeedbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:c1:46:9a:38:80:4d:05:da:f5:64:70:a1:13:05:1a:f2:da:
33:02:a8:c8:c3:63:1d:77:9d:50:b8:21:19:42:59:d3:7a:68:
6b:fc:b9:fc:23:c0:7d:2b:a6:18:cd:07:27:74:58:33:59:61:
f1:49:61:1d:c2:b4:6b:34:94:f4:f9:51:ad:03:46:93:b3:9c:
8d:db:8c:5f:b3:66:2a:d5:e6:14:4a:2d:cd:d9:83:c4:66:56:
cb:72:7e:ca:1a:4b:d7:6a:6b:01:0a:18:b9:18:2b:60:17:25:
81:28:ee:f4:97:7f:69:8c:c4:ad:04:e2:d1:bc:91:dd:d4:f8:
d4:fe:f3:d6:7f:38:5c:cc:3a:63:02:36:c8:1a:49:61:be:f5:
ea:5b:de:80:c4:49:6c:76:4f:b0:a1:fb:e9:9a:f0:d0:c3:58:
ab:e2:25:68:bd:a4:dd:89:13:3a:f0:d5:ec:8c:79:c3:be:14:
83:f1:41:39:c0:bf:54:8c:30:dd:3d:10:70:f4:81:4f:0c:15:
db:0a:dc:89:67:e6:53:cb:81:b2:a6:fd:59:55:84:68:20:4d:
7d:3f:e2:b4:8e:d3:56:b4:07:e2:73:42:a4:ce:dc:cf:ba:ce:
d4:be:4f:fc:34:6e:37:fd:5a:39:ee:0f:01:b8:67:1a:b4:39:
72:b2:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:39 2025 by rpki-client