Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cd66fd2-e6c4-494a-b188-a3ba34d0bd09.roa
File: 3cd66fd2-e6c4-494a-b188-a3ba34d0bd09.roa (raw, json)
Hash identifier: Cs3+YYUFQlSnM5qqMslL1rrHX/Fga43+sfE6Cks/juo=
Subject key identifier: AE:81:8C:C4:B3:27:39:DF:86:EE:C9:7D:78:A2:D3:16:9C:BE:CA:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 677F76048F696FAA7FB138929FB5F64DC34F67B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cd66fd2-e6c4-494a-b188-a3ba34d0bd09.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 162.208.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7f:76:04:8f:69:6f:aa:7f:b1:38:92:9f:b5:f6:4d:c3:4f:67:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=3437dd17254a0728e9e8cc3a7e22f079a8ed53bccd03d2402cf796b0b0d8269c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:8a:0b:56:30:2e:de:f3:f9:a6:e9:56:1f:
6a:86:59:03:c7:a0:2c:a3:ac:f4:b4:b4:93:a9:c7:
4a:b8:24:e8:ec:1c:6b:e3:81:02:5f:e9:b6:c0:5e:
4a:72:f9:04:bb:ec:8b:a7:b9:8d:e3:fe:62:5e:12:
9d:09:e6:97:c6:4b:c1:d3:f8:96:96:b5:f9:76:f5:
0d:59:c5:01:9d:30:37:bd:27:c7:04:23:f2:6e:5e:
cc:1b:76:31:39:d6:4c:eb:e1:80:bb:ce:7a:22:53:
9f:f3:28:d7:c4:43:ec:8c:21:58:aa:5d:ec:fc:72:
7e:ea:9e:7d:4e:9e:00:57:62:c3:11:53:3b:2a:31:
17:81:79:0f:9a:8e:56:9e:49:fc:96:51:c6:7c:61:
43:48:ee:bf:98:01:a1:c1:34:09:d4:51:ce:61:96:
e1:ab:d2:71:d9:39:2a:ff:78:d6:58:2f:68:74:43:
02:58:37:5f:44:d9:06:2c:56:2a:30:fe:0c:4b:5f:
58:16:3c:46:0a:b2:42:c0:e8:49:c3:1e:5e:8e:c4:
ed:37:de:a6:6b:53:e3:c5:34:f8:5a:8b:b2:42:e6:
ac:5a:ad:58:bc:ae:3e:06:5f:c1:32:49:d9:5d:72:
23:68:d2:cc:fb:de:10:70:39:1a:64:95:0a:ec:0b:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:8C:C4:B3:27:39:DF:86:EE:C9:7D:78:A2:D3:16:9C:BE:CA:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cd66fd2-e6c4-494a-b188-a3ba34d0bd09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.208.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9b:c4:d1:55:de:9b:b9:ab:19:3d:34:79:c4:e7:4a:d6:98:
05:7a:59:8d:08:b5:8d:3a:0e:16:f5:85:2f:ae:0e:b3:e0:c7:
58:bf:ee:00:cf:e4:93:03:cc:ab:11:29:5f:6e:2e:ee:bf:57:
cb:42:59:8b:69:d5:50:e2:85:5f:16:13:00:9b:0d:91:b9:5b:
91:d9:ac:39:42:bb:92:1d:f7:f4:1c:d3:92:eb:e2:65:f0:d4:
5f:8b:94:70:1e:f1:65:15:72:a5:25:b0:80:2b:c7:b2:c6:f8:
48:cf:5a:52:c6:f8:d2:99:9b:72:62:98:a1:34:be:08:da:ac:
cc:58:e0:0d:b5:39:c0:c8:30:4a:f8:f9:a7:39:bd:9e:61:a6:
2e:81:5e:a6:39:9c:6e:05:ef:75:2d:5e:45:f8:16:73:1f:16:
f3:f8:5a:1f:14:a6:a8:7a:b9:48:6e:12:79:ac:56:a5:f6:b2:
f4:4d:1d:36:a9:6f:40:19:49:14:fc:80:7f:bf:83:10:2a:e1:
74:b9:43:95:89:14:f8:bf:2c:eb:a0:6c:7a:b5:4d:ae:10:ea:
53:67:17:2d:1d:81:12:22:59:f3:fa:af:ee:33:56:73:49:bc:
d4:d5:25:b9:58:99:a0:fd:49:a8:1d:39:27:0b:b6:f4:e9:10:
47:cf:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:11 2025 by rpki-client