Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ee8694-0818-4109-a12a-7638aec01c2a.roa
File: 36ee8694-0818-4109-a12a-7638aec01c2a.roa (raw, json)
Hash identifier: PYqXPhReJYahsluIMHakXX4z/LCajoJ5nQJJrR6SmCI=
Subject key identifier: BF:6A:F4:2E:F3:08:B2:A8:78:80:D5:53:35:20:81:A5:53:25:5C:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6DF9637E407810E003C2FF553C69C6886E646383
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ee8694-0818-4109-a12a-7638aec01c2a.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f9:63:7e:40:78:10:e0:03:c2:ff:55:3c:69:c6:88:6e:64:63:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=9ad54fc53830a25f211d316c629693bf87f522984936888f7cef7c8c769bbb78, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:fc:a0:a4:be:08:0c:f0:53:c2:62:c3:6b:
27:f8:0f:fc:65:91:8f:61:82:b9:2d:aa:af:b4:70:
f4:75:f2:e2:b5:9e:32:6f:1f:f9:da:02:4c:f1:13:
81:05:e9:81:f7:08:2b:cc:41:d0:d9:a2:6f:ca:0d:
71:d7:78:1d:7d:6a:ea:f3:4e:be:9d:c0:e9:23:e5:
72:39:04:b2:31:16:34:e0:71:ad:9b:30:c7:1a:d7:
18:28:7e:02:44:86:86:b6:4c:9d:71:bc:e3:9c:52:
4e:41:ff:10:25:1c:06:3d:f9:67:36:01:56:cc:30:
3d:5d:81:00:13:a8:b8:71:28:42:24:80:8a:b5:08:
42:b6:68:b5:de:2b:8f:95:01:6f:f6:64:6d:54:64:
72:c9:5a:da:ec:38:4b:91:20:29:c3:64:96:d2:b1:
4f:f1:80:fe:9d:03:ce:a4:ef:fb:04:bb:2c:7b:a2:
d3:c7:fd:6b:bc:e1:0c:3b:4c:6b:85:b5:86:73:82:
01:e7:98:38:69:73:ae:ad:38:76:5d:c8:51:83:bd:
cc:00:4a:b0:a0:9c:dc:08:ff:c7:6b:50:8f:5f:53:
3c:41:20:16:69:54:c5:e0:9f:3c:f4:6c:39:6e:3b:
c2:7f:99:7c:4b:3d:5f:14:90:e6:58:e5:43:d9:bb:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:F4:2E:F3:08:B2:A8:78:80:D5:53:35:20:81:A5:53:25:5C:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ee8694-0818-4109-a12a-7638aec01c2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.96.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:de:15:11:6d:bf:b0:56:13:96:ad:2c:6e:a6:c8:46:04:32:
dd:a1:4e:01:a9:c2:21:2e:a4:3b:e9:fa:c1:63:66:e2:5d:ff:
f6:a4:67:bd:69:cb:f7:35:13:47:bc:79:a8:2e:72:75:0f:ae:
70:fc:64:ba:43:40:2b:d9:c6:d3:1f:48:4a:83:0d:4e:5a:cd:
2b:70:bc:0c:cf:bf:6b:d3:a5:cc:ea:94:86:dc:c6:d0:b1:82:
25:02:2d:bb:2c:24:0b:35:fc:9c:4e:7a:f6:a2:42:3a:5e:e3:
52:45:db:60:8e:33:63:d5:20:fb:5f:5d:06:78:e2:5f:0d:17:
0b:06:30:27:ed:1d:90:67:0e:0d:bc:4d:2a:d7:98:55:8c:93:
54:f9:76:56:76:52:d6:d7:ca:ae:38:00:36:fc:11:ba:5a:71:
3e:c4:d6:e7:67:56:78:20:f9:b7:a3:fa:98:90:23:02:b1:bd:
d0:94:d3:5e:fc:f0:6a:c9:d7:6c:58:61:15:94:1a:b9:f2:44:
e4:cc:e6:e6:b1:51:8a:17:81:46:03:09:43:b6:6a:99:dd:ef:
7c:0c:ec:11:a9:c4:f4:bd:eb:17:eb:4e:d9:4b:b7:fd:13:53:
45:82:e0:17:62:94:18:6a:ab:3b:79:b0:f0:1b:b9:2d:d7:9b:
00:f9:1f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:04 2025 by rpki-client