Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa
File: 2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa (raw, json)
Hash identifier: 41wRRqz/yVvYOrJ7mO48XAcdQwawomhx1G8kunQIelg=
Subject key identifier: CD:A4:96:47:63:62:F9:A7:E9:1C:0B:E9:6A:93:F5:C3:D2:1D:42:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 606278199CF46A129C601EB5046B8E85BFCEE64E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 192.43.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:62:78:19:9c:f4:6a:12:9c:60:1e:b5:04:6b:8e:85:bf:ce:e6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=3c3326ee8d824c7628e7f979e7885271ba1c20aea32fc738d0f97241974c2d58, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:16:b4:34:55:f4:b8:83:51:ac:69:d4:f5:
90:73:de:35:fd:e8:9d:07:48:fd:4e:45:8b:cc:e8:
06:98:ec:55:47:4e:28:60:b3:3a:84:c1:a3:13:13:
b4:f1:e4:f3:8a:69:ac:9f:5e:05:51:b7:5e:1a:a4:
7b:f5:96:3d:4a:51:fa:ed:1b:5e:1f:34:a5:52:26:
84:2e:cf:33:a7:88:a5:ef:0c:de:50:e5:0f:5f:05:
66:51:c2:11:58:8c:5c:28:a5:8a:93:d9:2e:98:8c:
3b:65:70:d0:6f:60:a5:f8:0a:0c:e3:3a:72:d0:2b:
43:d7:e8:21:31:30:62:4a:67:a2:20:c9:36:3b:60:
1f:1e:8e:39:5c:a3:c6:42:6b:8c:d1:c5:de:e8:fc:
83:1f:1f:56:6b:03:4a:11:b6:b0:e8:58:bb:a7:65:
9b:aa:9d:dd:59:17:c1:1e:a3:27:9f:4d:dc:f6:84:
bd:d8:83:d7:b6:f7:b9:56:02:2d:6b:2f:4f:62:2d:
f2:2e:ad:e1:d2:66:53:ff:f5:24:6e:06:b3:04:45:
eb:c2:77:63:84:b9:a6:7b:ee:5c:f4:9c:3e:55:33:
76:83:cc:5c:78:15:e9:92:0c:2a:23:11:33:1b:a0:
cd:85:f0:87:b0:c7:c4:09:52:01:f3:0b:80:72:b0:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:96:47:63:62:F9:A7:E9:1C:0B:E9:6A:93:F5:C3:D2:1D:42:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.43.184.0/24
Signature Algorithm: sha256WithRSAEncryption
62:44:ed:34:f2:74:c9:f0:05:8c:09:3a:59:5b:f9:01:fb:04:
70:30:de:b7:a8:0c:53:fa:60:61:e1:17:d0:e9:69:c6:8a:3f:
b0:9c:26:5c:ac:78:54:c2:f8:91:72:64:59:b5:4c:29:4c:4a:
c7:8b:49:81:69:08:35:1e:78:a9:c2:cf:86:c9:5b:66:bf:ab:
cb:a0:24:04:bd:12:36:62:7a:45:2c:00:da:79:f0:71:b2:57:
3e:0b:68:39:98:ba:49:d6:b7:ec:e1:67:5d:99:a6:9e:ba:3b:
e5:e5:07:84:d9:7f:23:c3:79:aa:0b:f8:8a:05:df:1f:44:17:
6f:d2:6c:bc:ee:e6:21:94:7f:49:11:af:75:53:12:90:d1:01:
db:e6:97:da:b7:de:17:e8:44:7e:eb:36:f5:15:c8:b7:91:ad:
6e:49:ef:7f:6b:a8:81:09:93:dc:8b:41:7b:11:7c:a0:bc:2f:
ba:cc:35:13:3c:75:f4:d1:dc:69:f9:ed:15:cc:3b:ee:ce:3a:
b4:6c:33:96:64:2e:8f:59:13:5a:d1:ed:9f:96:b0:c5:f3:7f:
68:40:4c:01:35:50:e9:c3:d2:16:6a:ab:9a:8e:2c:67:c0:ec:
a5:71:7f:c3:4a:a6:0b:e6:a7:d8:79:19:94:44:64:c9:ff:a2:
38:1d:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:37 2025 by rpki-client