Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f3fcdbf-9e0f-4abc-a900-bd25e661c2dd.roa
File: 3f3fcdbf-9e0f-4abc-a900-bd25e661c2dd.roa (raw, json)
Hash identifier: pUXZJ32Yq+tfBjtB8lMonO75dHTdHIqdh9+nWG9TwyY=
Subject key identifier: 81:09:27:12:8E:54:CD:2A:2B:14:C9:01:AA:4E:86:33:50:55:B8:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7625DCB60F68109A161CC675CFB0374C8B3CC716
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f3fcdbf-9e0f-4abc-a900-bd25e661c2dd.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:25:dc:b6:0f:68:10:9a:16:1c:c6:75:cf:b0:37:4c:8b:3c:c7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=4cbaf910fb58159351a79aa3eb6b0808803f87dca438290ac8c4778277995bf8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:74:bb:55:b1:72:11:c3:46:44:01:d2:04:
ee:e6:09:3a:f6:ee:93:9b:2d:cc:2e:b1:15:a0:56:
5a:9b:59:27:39:15:81:87:e7:cf:43:58:e1:47:23:
61:1e:f3:39:43:b6:e8:ca:f7:26:e9:49:5f:47:05:
a1:1b:6c:b0:ba:81:3d:cb:6e:72:ae:7b:e6:e2:b9:
e7:61:69:6d:f6:92:07:a5:59:dd:44:01:d3:f7:32:
e3:b5:85:e7:36:d2:a8:c2:c7:c8:e6:a3:61:31:47:
fc:fd:07:d2:f0:b8:42:22:25:01:9d:92:cb:88:f9:
c5:0a:cd:98:49:d6:df:04:05:2a:79:fa:8e:8a:c6:
24:32:f3:34:91:c3:91:03:2c:5d:2b:d5:26:03:f6:
4f:fd:52:f5:2f:a8:b4:59:ac:e4:f8:ec:c4:db:fd:
30:25:9c:ad:f9:a7:ac:ef:a2:c9:00:95:04:f6:67:
a3:70:69:91:0a:6f:84:3c:10:0e:d0:1e:4d:91:a8:
ba:56:27:73:8f:ac:f3:3c:89:77:fe:2c:94:9b:6a:
78:4f:5c:4c:c2:cd:70:97:71:9f:d5:3f:41:c8:ce:
11:46:bd:6d:38:3b:ad:29:c8:c4:97:89:ad:41:b2:
e9:a9:5f:b1:89:f6:72:8e:c1:7c:87:fd:b1:d5:3d:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:27:12:8E:54:CD:2A:2B:14:C9:01:AA:4E:86:33:50:55:B8:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f3fcdbf-9e0f-4abc-a900-bd25e661c2dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:d1:57:1a:56:48:5a:b3:06:ad:aa:91:6e:59:2a:98:ef:d3:
22:41:23:bf:d5:13:8f:2c:44:e2:5a:5b:3f:d0:bc:27:7c:8c:
1e:d4:d4:ad:e3:c1:ec:10:0b:9b:f2:e7:f3:73:ab:b3:4e:e6:
3b:3b:5d:76:26:8d:64:d1:70:16:5c:88:34:16:5a:cd:e4:ec:
26:55:91:91:ce:f6:75:d9:dd:e1:71:57:c8:18:b2:22:3b:82:
5f:b0:67:78:95:fa:78:db:6c:67:cf:44:f6:fd:0f:fd:9b:07:
13:1e:0e:d9:ec:df:36:42:58:f5:70:d2:3b:51:f5:01:f8:88:
31:86:49:15:47:5e:df:14:ae:2e:d9:78:a2:ce:b3:3d:45:6a:
61:c6:37:ac:9f:61:b2:d6:2e:24:b7:63:8e:ed:68:89:96:01:
54:7c:36:af:a6:a9:e3:27:ce:4a:70:d9:ed:c2:8a:9e:15:a5:
53:1e:98:c5:0a:d8:30:b0:d9:74:a6:96:b0:db:a3:e5:f1:cc:
46:86:77:c9:6b:d4:32:82:8c:a3:8f:5d:10:ff:26:ad:8d:c0:
af:f0:03:13:1c:10:2b:d4:31:bf:f0:9c:b8:a8:8d:00:5e:ba:
e8:4f:fe:4b:14:46:0c:2b:e5:09:fa:e8:68:67:c4:a5:c7:2d:
05:b0:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:39 2025 by rpki-client