Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa
File: 5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa (raw, json)
Hash identifier: +1rpBv6XhTxztns5EhheF2ZniybETnIq5qfVVB7Og3c=
Subject key identifier: 89:06:BC:E9:73:1A:99:AB:A5:07:60:42:F5:DA:75:D1:46:C0:02:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A5B98104A9152A741FFC8A11142A66F1143ABCA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.79.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5b:98:10:4a:91:52:a7:41:ff:c8:a1:11:42:a6:6f:11:43:ab:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=329a1a1844c0ce287c26d8b56ddd0675c4596ce0443645c0c51ac993e407206b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:f8:79:13:0d:8d:c3:c6:05:5c:16:cf:68:
1d:68:8b:da:b4:29:7b:ff:01:07:7a:70:38:51:24:
9b:94:71:fb:32:a1:5e:f2:71:69:49:b5:fd:a7:24:
52:45:68:94:2a:2d:c4:1e:7e:40:b1:28:bc:7c:79:
ee:67:c0:cc:5c:8a:10:a7:77:d0:09:b0:65:ff:b0:
4a:6e:9f:c9:7a:d0:3d:b2:ef:66:fa:e8:b5:7d:05:
89:f6:1c:d5:43:66:1a:f1:70:5d:b6:d1:6f:d6:47:
8d:02:52:39:bb:63:c2:ef:63:93:22:ed:c3:3b:a2:
82:c2:f8:35:6b:35:4a:dc:3d:84:a6:1e:e5:79:3f:
d3:c9:8c:51:04:e8:07:a2:ef:98:39:2d:d5:46:4f:
8a:e3:4a:f7:f6:f5:19:47:4f:93:ff:10:86:e8:65:
6e:ba:aa:18:95:c3:cb:be:fc:e7:62:f2:59:02:09:
02:64:60:b5:61:4c:cb:68:63:79:11:c3:34:a2:cc:
34:fe:59:d6:69:86:0e:e0:31:81:5a:80:ff:a7:1d:
1b:1c:f9:b4:64:18:1e:9c:6e:3d:c1:48:ca:05:fe:
e3:b3:41:fb:e9:7f:ba:95:a1:63:9a:5c:65:e6:e8:
24:7b:6e:65:9a:35:95:06:1c:8c:82:3c:31:88:bb:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:06:BC:E9:73:1A:99:AB:A5:07:60:42:F5:DA:75:D1:46:C0:02:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.79.34.0/23
Signature Algorithm: sha256WithRSAEncryption
38:d0:55:02:83:29:97:2d:5a:2a:89:70:f3:25:e8:10:70:b0:
62:4b:23:47:fa:3d:7c:11:98:55:07:63:c4:e5:c1:6f:02:f4:
2c:12:b3:66:24:2d:87:21:76:e1:49:5a:b7:9d:91:f3:29:a7:
f9:58:ab:3d:45:6d:e4:60:52:7f:fb:67:d5:b4:6e:0a:e8:80:
b8:ba:3a:48:1a:74:9a:d4:95:66:8f:10:d8:82:7a:34:14:01:
f1:26:1b:2f:3e:17:92:c1:93:5f:9e:57:34:f8:07:37:3e:b1:
91:54:2c:a1:79:4e:3a:36:fe:2a:d3:8c:04:f2:b6:1f:35:71:
15:a9:dd:b0:d1:0b:45:f1:6d:8b:a8:2a:a8:f1:e3:41:24:81:
1b:d2:3a:3d:b4:76:a8:5c:70:d7:fa:fd:16:1a:00:a7:43:c9:
55:4f:bc:ad:c9:0b:a3:80:ee:e8:1c:7c:16:eb:f3:c1:72:2f:
1e:d0:e8:e4:c0:54:3e:29:ef:19:0f:d5:0e:64:37:2b:d9:07:
11:91:b6:c9:e7:ea:d0:f1:7f:f7:b5:7e:9b:37:82:b4:71:f6:
58:bb:8e:06:78:5b:a7:32:04:d7:bb:71:69:f0:66:6d:40:a8:
ec:2f:11:b0:61:37:9f:73:6d:0f:ae:a5:7b:27:88:89:82:63:
62:62:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:07 2025 by rpki-client