Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b7bb014-7d84-4429-ab54-38f604121593.roa
File: 3b7bb014-7d84-4429-ab54-38f604121593.roa (raw, json)
Hash identifier: IpZ+kWiQVQnhVtoardoyUP3UkvmngxelxmttAmZDKjQ=
Subject key identifier: 02:B7:D6:79:FD:C1:C0:55:21:15:BB:84:8D:4E:28:29:E1:BC:CB:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E0F12B1E30D972E003D58C6386901423F065AFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b7bb014-7d84-4429-ab54-38f604121593.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0f:12:b1:e3:0d:97:2e:00:3d:58:c6:38:69:01:42:3f:06:5a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=846d5de740db438a246ec8534c267d712e603733b28d06f993fb02898f550225, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:8b:19:f4:79:da:8b:7e:37:97:49:f7:53:
e2:49:4e:60:7f:2a:11:1d:14:cc:38:bb:67:ae:82:
37:07:b4:1f:e8:58:e1:03:4c:73:3b:9c:d2:a7:e9:
86:13:2a:53:e1:cc:78:b1:27:df:aa:84:ab:61:f2:
41:47:35:1f:57:2b:02:8b:ad:e8:c7:db:94:ec:18:
c1:36:e3:8e:2c:31:04:10:ca:f7:dd:00:54:13:6c:
c9:5e:e4:4d:de:a6:a3:e4:c8:d2:9d:be:88:81:49:
36:a0:48:b3:37:fc:ea:02:5a:7e:b9:da:4a:13:97:
b1:84:67:f0:3c:0f:92:67:09:1c:39:45:8d:c8:50:
85:4f:69:ec:43:0f:59:a8:a9:56:9e:28:d2:3d:2f:
86:40:34:72:6c:f7:86:4e:9d:36:47:02:d9:79:95:
21:1c:a7:29:3b:6d:3d:9d:87:86:52:21:3f:e4:80:
37:c3:8e:bf:59:90:e1:ef:51:73:34:59:9f:28:94:
ff:48:d5:d9:df:dc:00:e1:85:fd:0d:20:09:34:bd:
a9:65:1e:2a:b1:94:20:a0:3b:15:8c:cf:81:25:4c:
e1:31:74:8d:e1:16:9b:bf:41:72:c1:02:f6:a8:e3:
c5:8a:f3:76:b7:44:66:cc:5b:28:b8:0e:a9:eb:55:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:D6:79:FD:C1:C0:55:21:15:BB:84:8D:4E:28:29:E1:BC:CB:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b7bb014-7d84-4429-ab54-38f604121593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.60.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ab:aa:7b:6c:41:8d:89:99:c4:06:8d:11:e9:88:cd:f5:d0:
f0:74:6c:9a:2a:1a:09:93:bf:85:8e:b0:2c:d9:65:aa:bf:b0:
44:f5:c2:ea:ec:d4:39:9e:d8:6b:f5:30:50:e1:26:d5:42:e4:
13:4f:58:59:82:56:df:f0:5c:59:68:c5:f7:ef:06:e9:d3:19:
e9:9e:2e:ef:eb:87:07:66:03:f0:bc:ff:5f:46:17:24:37:8b:
ed:62:b3:4e:13:d9:dd:b3:36:73:e7:0e:d6:78:24:7d:47:b5:
2f:38:0a:59:1a:c4:f6:e1:d4:b6:7d:e5:8a:54:ac:9c:22:52:
e1:0f:7e:34:e3:3b:93:09:81:5d:80:b7:d6:35:84:8a:a1:ec:
96:eb:e6:42:27:ec:91:82:0f:6e:fd:a0:59:43:e3:12:e2:4d:
99:00:7c:ba:47:08:f3:0f:c7:46:7c:46:95:3e:d9:3b:95:61:
19:2a:c3:fd:57:29:be:a4:6e:6c:00:62:2f:e8:bf:f9:82:e9:
2b:2d:34:25:1a:45:8b:e8:7f:a1:59:d3:d7:22:9d:41:b9:8f:
b1:0d:1a:a4:90:dd:82:ba:ad:7d:23:1c:2f:8f:8b:b9:5f:b0:
6b:04:fb:b8:4f:36:9e:a4:30:29:97:74:bd:e2:88:61:cb:0b:
7c:01:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:58 2025 by rpki-client