Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39c933be-7877-44b6-a543-5f74a4e21764.roa
File: 39c933be-7877-44b6-a543-5f74a4e21764.roa (raw, json)
Hash identifier: hddSNOCvT3KhBW2yppobH1lWqbndgTtd6Dn89RPkiFM=
Subject key identifier: A1:23:13:47:0F:D6:37:35:42:40:11:2B:CB:77:D7:0E:00:09:9F:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 060C34C5429924B42E3CB1AB3F797758CB350BC1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39c933be-7877-44b6-a543-5f74a4e21764.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 148.73.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0c:34:c5:42:99:24:b4:2e:3c:b1:ab:3f:79:77:58:cb:35:0b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=331136a3090c060a52e45f7c74a052f2e223791d87c83c3f03fcd117b992980b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:61:16:c3:26:c9:a5:1f:ca:31:f4:3c:e6:
75:19:a3:68:4a:64:0b:08:36:32:4e:0e:d5:3c:cc:
da:0c:d0:c0:4c:13:84:11:96:aa:91:08:37:83:c4:
77:5c:6d:9f:49:ec:9d:1f:03:f8:d4:2f:57:6d:9d:
c8:21:ef:d4:60:b9:fa:e4:b8:b0:93:d3:53:03:a4:
0b:a4:2f:57:1d:c4:ed:c6:09:12:26:43:d2:83:23:
f5:d8:73:44:20:b4:67:73:ff:e4:c8:da:ec:2b:fe:
91:fb:94:11:27:f1:1e:af:14:03:fb:73:30:b2:24:
d1:6c:dd:6f:79:b4:43:1f:df:da:ac:25:0c:d4:bc:
fa:cc:47:bc:a4:f8:9c:e8:4e:54:65:9d:ed:81:c1:
f5:c4:16:23:d1:ee:38:b9:6c:f8:ed:1c:e0:29:f2:
4b:d0:8b:1c:b6:d9:10:48:57:84:37:09:c9:04:e5:
0b:47:9c:98:f6:0c:3c:c8:f6:92:b0:dc:23:98:0c:
45:fd:ee:08:df:31:88:eb:c3:eb:7b:5b:97:73:21:
e4:0a:f6:ab:3f:c1:0a:9d:66:94:4d:4f:dc:d1:18:
79:28:80:06:67:6b:86:32:8b:46:a7:f4:fb:60:f5:
c9:13:64:21:e0:54:9d:f0:b3:c5:37:5b:72:ea:94:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:23:13:47:0F:D6:37:35:42:40:11:2B:CB:77:D7:0E:00:09:9F:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39c933be-7877-44b6-a543-5f74a4e21764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:95:af:c4:ba:b6:de:50:7f:ea:5f:31:17:15:4a:16:0e:2a:
ab:fb:ab:bd:c6:12:4d:71:3c:ed:78:54:40:7a:f8:10:9f:58:
42:93:61:9b:5b:5f:37:4b:41:08:2b:a7:57:54:17:90:7e:fd:
94:a1:71:b8:19:73:f0:01:72:dd:30:2d:6b:05:68:78:a9:7e:
67:55:02:a7:1d:db:c6:ec:e0:26:49:3a:b9:51:94:b6:c0:8a:
25:a5:ce:48:e0:ef:09:98:57:30:c9:fa:56:31:09:a2:31:59:
12:2d:d2:f6:e2:01:98:a8:66:93:bb:ae:cc:bd:c2:bf:ce:ed:
14:46:ff:48:07:5b:50:d3:bf:25:bb:95:78:f1:b5:a1:d9:13:
78:3b:28:af:18:d3:b2:08:15:d6:bf:cc:d0:7e:ab:fd:9f:99:
73:95:0d:54:94:dc:81:ba:3c:1b:7c:b9:ea:67:07:e1:4e:a9:
2f:2e:04:2f:81:17:dc:bf:e6:1c:7b:17:3b:2d:16:b1:3f:df:
c8:20:cc:fd:84:37:ec:5f:97:a8:ee:09:da:06:57:74:0d:bc:
b9:fe:69:49:c3:3a:e1:7d:de:07:f0:ee:f2:8f:d5:8a:b6:0f:
6f:99:5e:06:aa:32:7d:05:33:df:08:58:fe:46:06:a3:79:39:
44:a9:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:47 2025 by rpki-client