Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e273e67-aea5-43db-bc2c-148bbc24b833.roa
File: 3e273e67-aea5-43db-bc2c-148bbc24b833.roa (raw, json)
Hash identifier: LZ9uj/mMMUvbFWZEYccGa3AD6hsOcFgSYu7NnMOlZjU=
Subject key identifier: 3C:A5:99:52:AD:DF:D6:09:52:D3:84:9D:B8:62:62:1A:59:3B:75:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A838DD5FBCEB3281D57EE10C3544CA449B7F59F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e273e67-aea5-43db-bc2c-148bbc24b833.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:83:8d:d5:fb:ce:b3:28:1d:57:ee:10:c3:54:4c:a4:49:b7:f5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=e663e806837ff7b9be2647f706edac47e3b6d03444dc8e4b604ca62fa23d3429, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:0e:75:c8:00:b1:6d:57:36:c4:85:5c:2f:
6a:6d:3d:f1:a5:20:f0:ca:d6:34:6b:ad:8d:e3:2d:
7a:ca:6d:2f:5e:14:32:3e:9f:be:d5:e7:2b:e5:49:
1b:7b:18:1d:44:a8:7a:99:b3:d8:a2:b7:3d:31:ef:
d7:18:91:66:66:f7:42:de:d1:36:2e:f3:9f:e5:1c:
b2:39:4f:a8:93:cb:a0:ee:ec:54:0b:ef:18:24:86:
3e:0f:78:d6:2e:18:d9:0d:25:b3:a1:e2:e2:a2:80:
d5:81:99:04:40:eb:65:c3:d2:a1:77:7c:1f:77:e6:
a4:d8:49:60:81:c5:b4:ca:b5:b4:23:d8:f1:9b:e3:
1d:e4:ac:8b:31:55:24:b5:23:11:c8:41:65:bc:6a:
6c:f9:90:b3:64:2d:af:0b:66:5c:b8:73:8e:b2:8e:
44:83:6a:e2:c1:89:6a:51:ca:81:b0:b1:01:f1:ee:
1b:d0:02:ad:c8:ae:52:a1:44:77:82:8b:2d:2a:a0:
f6:89:ed:80:60:2e:09:fb:b0:d0:10:c7:84:d2:df:
5e:cb:33:5f:cc:d6:5d:16:0f:09:59:d0:52:16:e1:
1b:5f:0c:97:6f:80:cd:5e:9a:3d:6f:7b:b4:15:03:
c3:ab:66:d6:e0:18:89:97:15:7a:95:00:a0:a6:c6:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:99:52:AD:DF:D6:09:52:D3:84:9D:B8:62:62:1A:59:3B:75:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e273e67-aea5-43db-bc2c-148bbc24b833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.11.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5e:56:37:eb:e5:36:5e:59:0a:66:8c:77:09:c2:a9:f8:72:
3b:76:70:4f:cd:2e:a5:2c:6d:46:8b:0b:22:76:3b:32:94:9c:
56:25:46:72:da:36:c7:70:de:3e:0e:90:fa:47:85:1e:9e:26:
65:8a:eb:5f:90:60:9e:89:3f:3d:fb:f8:38:ff:ee:6e:61:7a:
f3:b4:99:50:e0:0e:8c:89:6c:b6:4f:8f:84:7e:0f:26:1d:f3:
13:6c:52:1c:25:77:2f:53:9f:c9:a9:26:5e:09:c2:3d:95:18:
cb:65:69:f1:53:ea:5e:04:f5:d4:1b:2c:f1:6f:f0:0d:a5:fd:
82:3e:21:fd:39:ff:a9:2f:bc:5a:8f:73:96:8a:0e:7a:8e:c6:
0e:26:50:68:ec:8d:9a:7e:f4:b6:09:ad:3c:64:31:3d:12:de:
5e:69:8a:68:dd:a7:ad:dd:45:5a:ff:37:9b:20:a3:ab:d2:9b:
c0:71:3b:4f:08:3e:a9:af:92:4a:f8:cb:3a:73:12:c6:ed:89:
ac:3e:aa:a6:8a:e1:f0:72:93:67:b0:ad:e6:ba:0a:d8:c7:95:
a8:dd:41:f9:9c:40:0d:02:98:18:41:f8:54:43:d3:85:81:71:
9c:08:c9:fe:e8:a5:a5:6b:83:b5:4e:2b:00:15:00:a7:e7:07:
c7:54:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:47 2025 by rpki-client