Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b3217e8-8c45-4481-80c1-0144b811d1e0.roa
File: 3b3217e8-8c45-4481-80c1-0144b811d1e0.roa (raw, json)
Hash identifier: wxcniZVGJrFffs7JwGppU0pmeJP+yErMF7mB0NkhWoA=
Subject key identifier: BA:23:1B:24:38:78:E9:0A:E8:0E:B0:A7:09:24:0B:0B:E7:F1:1D:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 690F7F0211215A5E800E773044F8C1B245DACB53
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b3217e8-8c45-4481-80c1-0144b811d1e0.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0f:7f:02:11:21:5a:5e:80:0e:77:30:44:f8:c1:b2:45:da:cb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=e4cbee387ad7996ef8bb70038bd198a9bd20e71d66756e8e1746f439157d58fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:72:d6:98:fa:8a:dd:71:aa:51:b0:9c:74:
a5:ef:70:b4:e0:52:58:54:30:81:a2:b2:1d:bb:f5:
77:66:8e:c7:e2:a7:e2:02:8a:73:b3:1c:21:7e:83:
16:d2:32:ee:13:b1:77:3b:cc:e9:0b:7e:c4:85:87:
fe:f3:c8:10:af:64:98:21:5f:96:32:72:4a:d2:76:
cf:44:0a:0c:85:76:c1:56:6f:b1:dd:13:ad:73:06:
18:ad:bc:f6:66:7c:eb:08:ed:5a:17:fb:e2:9b:d6:
3d:b4:ea:7e:51:47:e4:28:81:36:23:bb:d3:9f:8e:
28:d0:84:15:a2:b2:6c:dd:ac:05:95:10:5d:59:16:
cc:c9:c5:da:a3:70:60:cf:51:f6:c8:5e:d2:4b:77:
d9:f8:dd:5a:bc:5e:8c:1b:a1:41:fe:09:55:bb:cb:
38:f5:0d:03:9b:62:97:d7:0d:c6:1c:fb:3f:b9:90:
42:4b:4c:ae:ab:7a:8f:1e:ea:81:8d:36:38:39:5a:
36:74:14:89:11:f3:90:22:11:89:62:6d:32:ed:04:
b5:b4:53:09:b6:b1:48:24:d2:c0:e1:fc:d1:94:aa:
9c:a0:f4:64:1e:97:69:9d:e5:81:de:15:f3:8a:d4:
7c:4b:f3:66:c9:d9:2c:cb:ae:f3:61:9d:79:c0:64:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:1B:24:38:78:E9:0A:E8:0E:B0:A7:09:24:0B:0B:E7:F1:1D:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b3217e8-8c45-4481-80c1-0144b811d1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.201.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3a:47:21:4c:c9:db:7c:97:7d:7f:5c:42:90:2c:11:fb:ec:
54:1e:1b:5e:21:1a:a4:00:ac:11:41:ee:4a:bf:16:c8:65:85:
8d:17:3f:da:15:83:aa:de:34:37:61:e0:c0:3a:ff:5f:4e:d1:
ab:c4:08:c3:80:39:2b:83:6a:b2:c4:e0:e7:e4:d6:6e:91:94:
c1:91:c8:c2:b8:58:56:94:20:85:a1:31:41:ba:e9:5f:84:e5:
01:a8:79:82:2e:5f:8f:ec:75:fd:04:b8:d3:1b:17:90:33:2d:
63:ef:38:ad:14:90:ca:f9:66:35:c5:a4:f3:09:56:03:56:ce:
91:45:3c:81:f9:ac:0c:e6:fb:40:6f:db:d7:e9:b2:bd:e4:f5:
f0:c8:36:d8:c6:ed:92:1f:54:39:e6:74:bc:29:46:e7:98:0d:
f7:13:26:f5:9d:b3:47:f6:c4:8e:fe:29:ee:45:a7:dd:7e:7d:
1e:03:c2:62:8e:81:4b:b3:09:a5:b8:61:42:52:a0:ef:45:9e:
12:fb:e2:23:aa:71:50:4b:14:68:28:32:15:3f:c2:8b:96:1c:
3a:9a:fc:ad:5e:b0:22:cb:0e:30:88:ec:53:ba:31:cb:ba:8c:
3b:ca:59:ff:8b:d9:c2:72:e5:c4:7b:2c:67:00:34:52:2f:95:
93:bd:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:09 2025 by rpki-client