Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5af66b92-7c00-4307-9785-0c5ccb72cbb6.roa
File: 5af66b92-7c00-4307-9785-0c5ccb72cbb6.roa (raw, json)
Hash identifier: 8VPmLXkD08IqU6XVbFsA4aKMfj19OpY3iV3mI+014vo=
Subject key identifier: F4:43:B0:AA:94:E2:09:D8:90:D0:88:52:27:43:27:79:1A:04:98:2E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FA14F28286E2F8F4E8999A0BDF1B02D8D942862
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5af66b92-7c00-4307-9785-0c5ccb72cbb6.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.213.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a1:4f:28:28:6e:2f:8f:4e:89:99:a0:bd:f1:b0:2d:8d:94:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=9ff2ca106d77044bdb5f37f0940af6b4d313181048bf6e70cb260c2293e4027f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:69:72:87:c4:af:2b:58:7b:fe:5e:da:ba:
ce:b8:30:aa:8e:88:e8:e5:72:7c:4b:79:cb:92:37:
62:14:48:c1:11:30:c1:be:be:eb:42:04:72:da:f7:
82:47:9f:e4:fe:e6:d1:3a:9f:01:50:99:62:1d:8a:
b9:20:8a:fe:da:15:ec:06:c6:62:92:87:a5:93:15:
4b:ee:44:c4:eb:b7:e0:e5:32:1c:7c:ba:aa:32:d6:
8f:a0:46:8f:27:20:30:08:7e:9a:5b:a5:a8:e1:a2:
84:59:0c:5a:d4:92:7a:99:c6:e9:4b:43:e8:01:3f:
65:c7:f9:66:0e:74:17:90:1a:c8:cb:5e:57:b3:f6:
0c:6a:7e:e8:2b:ba:d5:da:14:40:5e:30:0d:58:7f:
dd:98:0b:6c:9e:41:66:8d:d5:42:65:d5:24:c3:d6:
2d:d8:bf:c6:b1:34:03:86:d3:a2:95:55:df:0a:51:
97:cb:0b:bf:53:4f:d7:23:9e:9f:c6:2b:27:ca:55:
7e:33:14:22:4c:d7:a2:64:7d:a7:50:a2:e4:2c:61:
c4:15:06:de:48:4c:8b:38:e0:f6:eb:be:42:22:99:
be:a3:fa:04:fa:e0:9c:e7:6c:99:8d:6e:c8:e0:6c:
93:b8:4a:23:ce:ca:56:52:78:07:12:f3:63:d9:0c:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:43:B0:AA:94:E2:09:D8:90:D0:88:52:27:43:27:79:1A:04:98:2E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5af66b92-7c00-4307-9785-0c5ccb72cbb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.213.98.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2f:66:1f:51:5f:7a:d3:74:50:e5:dc:6e:fb:3b:ec:9f:71:
21:77:06:02:65:0d:33:a4:9f:16:2d:7b:4f:e8:f7:9d:cc:6a:
dd:c2:20:69:66:b1:b3:28:a1:dd:a1:a5:6d:b2:cb:f8:7d:ee:
7c:ba:21:fe:ea:ed:ec:e9:9d:fc:1b:3a:ba:59:41:3e:91:3f:
cc:0d:bb:0a:10:8c:cd:60:20:77:6d:e0:1e:95:4f:a7:46:78:
31:e3:b5:a4:fb:88:74:b7:42:b6:73:f8:ed:2a:37:ee:22:dd:
75:42:d4:d3:5e:59:83:0d:9b:c7:0e:36:37:c3:a3:d8:ad:d7:
87:a2:a0:95:e6:f6:c1:3a:3c:e2:62:1b:93:78:c7:75:98:16:
9b:1f:23:8a:63:5f:96:82:c3:ba:a9:fa:47:e1:51:4f:13:91:
28:8f:c7:2f:89:1f:63:b7:e3:10:32:29:7f:60:ff:94:e4:18:
18:3d:22:b0:25:fa:e0:d8:0f:54:20:63:97:7a:05:2b:d5:3d:
d2:a4:a7:85:03:4b:9b:37:90:f7:71:ed:cd:dd:2f:b2:41:60:
f0:68:71:77:e3:bb:be:4a:f6:18:62:03:e6:7d:98:4a:98:ed:
af:9a:84:e7:37:af:1b:56:ac:dc:1b:36:91:a7:cb:8e:cc:1b:
b3:29:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:00 2025 by rpki-client