Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38fa4d4a-f45d-4599-9685-aac5f43141cf.roa
File: 38fa4d4a-f45d-4599-9685-aac5f43141cf.roa (raw, json)
Hash identifier: 3Qqt7y6Sy+On7r6oJ+3EvUV5453zkGw1apPuHpR13gk=
Subject key identifier: 22:EE:07:87:85:FD:2D:EE:2D:B4:9F:C6:6F:E3:8F:15:51:FD:BA:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 347A21AA3571B43BAD0E84EC3FC8C34C97255745
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38fa4d4a-f45d-4599-9685-aac5f43141cf.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 168.185.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7a:21:aa:35:71:b4:3b:ad:0e:84:ec:3f:c8:c3:4c:97:25:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=9b2147a1159cd7cb6e0c993ab7c8d2f470f5f2f6ceb1c456032bd59203789fb0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:0f:3f:ee:2d:cb:7a:21:7e:c7:8e:fd:82:
da:81:8c:19:38:9e:c4:32:fe:d1:38:10:2a:48:23:
2c:e7:b9:9c:2b:55:1b:80:07:a3:2d:34:09:fb:b7:
e4:0f:fe:28:9e:e6:ae:8c:28:1b:df:0d:68:bc:a8:
8f:9a:82:95:ac:37:ea:73:00:02:e2:98:d9:b8:21:
c3:91:79:02:23:43:1d:08:00:bb:c3:a0:ef:11:eb:
70:d2:0d:2e:46:81:c3:c2:06:ff:f8:21:6c:53:1e:
60:c4:6a:11:79:dd:02:be:70:66:34:35:de:57:02:
c4:c8:50:69:99:2c:84:ed:a4:d8:de:e1:d3:b4:de:
d6:e1:e2:4a:d2:a8:5a:7c:38:89:fa:91:75:24:3a:
09:5f:f9:7e:a2:d5:2b:c9:0d:d1:fe:24:52:97:72:
31:a2:2d:1a:dc:f0:92:d6:55:bd:c0:50:da:eb:ce:
d6:f2:6a:10:8b:6c:d0:55:9b:ec:26:6b:8c:e0:24:
be:7c:39:1e:56:ab:b4:db:bd:89:1b:3a:d5:16:8c:
dd:07:16:e7:30:21:11:af:25:0e:e8:55:f0:34:77:
ed:60:ee:34:d0:07:fc:ef:c3:2c:56:ea:ed:9b:60:
32:4a:d0:ab:21:03:42:b2:62:09:3f:75:e4:fe:64:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EE:07:87:85:FD:2D:EE:2D:B4:9F:C6:6F:E3:8F:15:51:FD:BA:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38fa4d4a-f45d-4599-9685-aac5f43141cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.185.4.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b4:60:5b:20:e8:d3:9d:e7:58:0b:40:67:44:13:24:47:59:
88:8b:58:3f:4e:19:d7:ba:ab:c7:18:b5:7a:a6:25:93:e2:7f:
d1:03:be:a0:be:93:9c:da:6f:ff:2e:1d:73:a5:1d:13:66:19:
88:8f:c6:49:3f:05:bb:f5:dd:a2:5c:28:64:0a:01:e0:ae:be:
48:d7:2b:5b:68:40:56:f7:74:c1:a7:db:59:c0:e0:a4:9d:32:
ee:47:b5:c1:c8:89:b9:a5:64:89:19:46:f0:f3:ea:65:74:b3:
6c:91:e2:39:98:3c:d8:4f:56:54:7c:5b:74:51:40:be:7f:29:
2d:35:7a:c8:5d:dc:66:8d:02:41:7b:34:0b:30:a4:29:68:83:
48:d5:37:4a:73:99:fa:41:cc:a9:9e:e5:f9:c8:98:b7:1f:ee:
fa:d2:2b:b1:8c:1b:4d:55:8f:9c:45:58:d1:01:43:d8:31:d9:
2d:15:b5:ea:37:6d:5a:b3:d2:00:d2:15:6d:5e:d6:d8:b6:f6:
a7:a4:67:11:d3:69:1b:9b:cd:3a:9d:a8:2f:85:24:50:fe:88:
01:25:8a:fc:82:2c:c2:db:12:ce:7d:c4:5b:7d:8b:38:24:ef:
82:0c:d9:d8:f8:f6:44:fb:59:cb:dd:42:c5:8c:cf:b6:34:73:
2f:a8:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:32 2025 by rpki-client