Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c2e527-9738-4594-aadb-f5b7380f4d86.roa
File: 45c2e527-9738-4594-aadb-f5b7380f4d86.roa (raw, json)
Hash identifier: RnFC4fPDvSmfCpxkuqQ7VIS5PiNT/l9ffW8rm0GQJd8=
Subject key identifier: 74:DE:D5:BF:06:0D:1A:24:2C:16:AA:AC:FB:F2:FD:E2:B9:40:33:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34D67ECD4A4E69A038CCDC1015BA8554FB64DAC8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c2e527-9738-4594-aadb-f5b7380f4d86.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d6:7e:cd:4a:4e:69:a0:38:cc:dc:10:15:ba:85:54:fb:64:da:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=3ceb17c817fcfe95375aec3a7270030dfc0bd17ea388fbed1f1a1f078a84d78b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:01:fb:cf:2c:c3:66:87:76:fd:b7:ca:7c:
67:f6:41:cf:f1:bb:3c:50:08:36:b6:b0:2e:ba:3f:
aa:b2:c9:3b:2d:cb:b6:6a:ed:97:bc:f5:e7:0f:be:
5e:dc:99:c8:09:f6:54:e8:df:da:de:7b:6b:fc:30:
1a:65:ac:26:a0:40:26:4e:3f:d1:0a:ee:bf:ae:4b:
cb:7b:75:a6:7f:cf:6c:d8:6e:1e:19:90:ce:7a:d7:
73:06:06:0d:22:83:76:76:ad:28:22:07:2c:28:cc:
b1:5c:16:cc:c2:90:50:ca:89:6e:92:b2:8e:ec:9e:
bb:da:b9:7e:58:c3:69:96:04:d1:e8:a8:60:f5:1a:
92:53:30:4b:3a:5d:d4:b7:da:03:23:67:5d:21:b8:
8c:90:13:c4:67:57:c1:df:db:92:24:80:e2:9e:ce:
14:8a:17:58:fe:62:56:11:aa:44:23:e1:58:39:dc:
1f:3e:bb:99:60:f9:9e:6a:15:10:b6:c8:36:3e:d6:
c8:1e:c8:3a:a4:47:ba:38:70:b7:07:42:ce:05:6e:
bc:b2:ac:36:ea:a2:2f:2d:3d:96:ef:0c:9a:1a:fb:
be:83:0f:2a:ff:65:0e:56:d3:5d:39:df:3a:c0:66:
d9:6f:5f:d1:88:8b:0d:0d:ec:d7:3f:d8:61:99:75:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DE:D5:BF:06:0D:1A:24:2C:16:AA:AC:FB:F2:FD:E2:B9:40:33:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c2e527-9738-4594-aadb-f5b7380f4d86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.152.0/24
Signature Algorithm: sha256WithRSAEncryption
34:60:db:1e:1d:f9:a5:77:d3:26:ba:1b:0b:c0:34:c7:1a:2c:
86:d9:7a:a8:6d:23:80:8e:79:6f:f9:61:31:eb:f5:d6:d4:f8:
2b:84:1c:79:8b:f1:f2:07:4d:cf:00:8a:1c:86:c1:fb:e0:9e:
b1:6f:9b:fa:91:e8:98:c4:2b:a3:d1:4e:6e:c9:cc:df:ad:46:
39:c5:b4:77:e5:ed:40:b2:6e:53:22:91:8b:09:8f:03:1d:53:
84:3f:56:76:62:16:3b:95:fc:15:41:b3:b8:ce:0d:75:3c:88:
ba:b7:38:dd:7e:7a:10:40:e1:63:e8:bf:3b:bf:17:d7:de:7b:
6e:91:11:d6:d4:64:4d:18:a9:67:2e:3f:43:cb:8c:54:8e:3d:
5b:ac:95:da:89:5b:6f:78:64:e6:e1:3e:de:5f:a2:0e:e5:76:
0c:3f:64:73:bb:73:05:74:00:b8:f2:f0:62:63:cf:a3:7b:39:
f9:6a:6d:b9:10:0b:03:be:c8:f9:f6:02:8d:e0:ee:aa:69:d8:
a8:e6:c0:2c:5e:1c:b5:aa:eb:59:7a:3b:82:53:2e:d6:81:a0:
47:de:99:0e:6b:ec:30:c2:26:33:a6:bd:fc:1e:2a:5e:98:7d:
8a:f3:93:a8:88:68:36:1c:ed:5e:2a:74:5b:c8:cb:82:82:65:
e9:a6:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:11 2025 by rpki-client