Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/485de5b9-0523-48f0-9708-9ab9fb5668bd.roa
File: 485de5b9-0523-48f0-9708-9ab9fb5668bd.roa (raw, json)
Hash identifier: BorJmHGMGVl4C3Fyubp3hCCmIrXjYjx6FI042no/Z3k=
Subject key identifier: 82:21:FF:A1:CD:24:7A:35:6A:90:32:78:E6:DD:6B:C0:C1:6A:AD:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 59DFDB41D3A7588A717151B9C38FC46674BA052F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/485de5b9-0523-48f0-9708-9ab9fb5668bd.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:df:db:41:d3:a7:58:8a:71:71:51:b9:c3:8f:c4:66:74:ba:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=9d4cbb268fe69b5df51a796324b0431da31de959eb57c0ca7a54e47cad0858a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:c3:1e:fc:89:d0:98:78:5b:a5:da:9b:70:
3f:96:1b:16:8f:08:74:13:36:e9:e5:41:cc:5b:22:
79:d2:2a:cf:23:b9:2e:5b:06:30:4d:10:36:4d:a5:
0a:68:17:84:c2:9c:a4:11:17:3e:2a:56:14:00:c2:
bd:ae:04:29:ff:88:af:8c:ca:38:8d:01:cd:1e:7d:
d7:97:30:07:5a:ee:fd:29:99:2e:f6:47:6c:ff:df:
53:3e:33:4e:55:58:30:57:39:26:a5:0f:ed:ec:17:
b3:a7:68:00:4a:f2:16:ed:13:1e:cc:a6:8e:6e:d6:
5f:3a:c4:73:f9:53:30:18:75:ff:a7:37:5e:28:72:
80:50:e3:fe:c6:0e:00:4d:71:8f:9c:b4:a8:35:d8:
ba:3f:c5:54:d0:c7:e5:d6:35:06:e8:97:c0:3c:fd:
c6:55:d9:59:c8:cf:ce:89:74:db:cc:7e:b6:c9:39:
29:8a:ff:f5:a1:ae:93:2d:13:62:c8:61:bb:24:ec:
b4:83:a3:52:90:87:b6:0a:e2:82:f2:56:1d:f7:0c:
4e:4a:3d:d6:a1:d4:2c:c2:14:b4:60:09:ce:f8:df:
b4:07:a8:5b:23:fa:39:c1:fa:fa:e2:c8:9a:c3:9e:
3d:64:f5:53:35:45:cd:35:32:2b:a1:67:a0:7b:7b:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:21:FF:A1:CD:24:7A:35:6A:90:32:78:E6:DD:6B:C0:C1:6A:AD:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/485de5b9-0523-48f0-9708-9ab9fb5668bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.129.0/24
Signature Algorithm: sha256WithRSAEncryption
11:88:3c:ed:0d:5e:a5:12:b5:d1:e7:e0:9a:b0:31:1b:23:7b:
8a:78:98:52:0d:1a:06:30:4f:78:41:71:63:b0:20:27:69:1b:
61:ac:51:7a:72:89:58:0c:83:cb:40:30:7c:92:33:37:93:10:
89:58:78:92:ba:95:36:b4:c1:96:1d:18:df:b0:cd:ba:1f:58:
f9:8b:4f:32:1f:55:40:50:e2:87:db:81:22:7b:2d:d7:d0:93:
df:c7:46:a7:f4:3b:ef:8a:ee:aa:f7:bc:13:a7:c8:47:55:c5:
f1:fb:6a:10:65:39:98:0c:18:27:d0:53:a4:50:60:03:88:68:
fb:ae:dc:10:87:11:8e:06:40:5b:1b:39:84:a7:06:e1:89:29:
78:49:f0:46:72:a3:6e:12:49:f9:87:a2:54:f1:c4:18:a3:7b:
8e:27:f5:fc:8f:26:f5:25:f1:46:d4:92:d9:49:d8:fd:fd:31:
68:53:d1:f1:6e:df:7a:49:95:1a:44:43:46:b1:07:78:4e:5e:
45:97:97:91:1c:1c:16:0e:49:fa:bb:2b:f6:27:04:f2:21:df:
ac:99:e0:2c:7c:2d:e7:35:92:1f:3b:79:09:d7:3a:14:0c:34:
0a:5b:55:c3:df:77:3b:93:23:33:dd:50:1e:65:36:bc:ca:07:
70:0f:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:01 2025 by rpki-client