Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa
File: 6282f4a8-f1f7-49a0-852f-808c201c5429.roa (raw, json)
Hash identifier: CuJZKQ8zj/CQLfvIocYClyJiabzDvuyZQFi5EjtIYW0=
Subject key identifier: DD:B5:CB:5B:77:45:CC:1B:84:FB:D4:56:5F:33:E0:C5:4E:7D:D8:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72F4AA6BF3D7E27B53269EB48830F5C70BC51A46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 37.203.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f4:aa:6b:f3:d7:e2:7b:53:26:9e:b4:88:30:f5:c7:0b:c5:1a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=4dd42fe0cf230a8b9f5104f0ba233751f5783138cc50bdf1c94351eeaf905778, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:81:8a:99:0d:fd:5a:7b:e4:9a:db:65:15:
3c:58:40:b2:e5:af:ec:2f:72:da:30:3f:50:68:38:
ae:9a:94:aa:36:86:36:08:a1:29:63:1b:a7:7f:6b:
0b:2c:b6:71:23:ca:4b:e2:f9:f9:8e:a4:7b:79:34:
5e:fd:e4:0f:e0:4f:aa:c2:84:3c:fe:e3:8a:73:e8:
02:f9:20:1c:5c:0a:22:f1:37:23:ae:0a:13:84:1a:
38:89:43:24:1b:b3:6b:61:98:a9:e8:e4:88:49:e0:
67:63:16:5d:25:0d:8b:a3:88:0f:1a:c6:3b:ca:03:
02:b9:5a:33:f3:fc:43:c9:6a:7e:2b:7b:0f:e4:fd:
90:43:2f:1d:25:b0:3a:c6:d9:da:61:7f:b7:9e:33:
5c:b0:d6:5d:da:63:3e:1d:bb:17:6b:2e:6f:25:d0:
c0:2b:2b:87:73:ce:41:3b:7b:b3:4b:8e:4f:15:4c:
13:ff:6a:ad:16:f2:a6:d4:82:93:c2:74:b0:4a:fc:
93:ad:16:82:6d:30:aa:82:db:91:b5:d3:b2:f9:ca:
a6:4d:ce:04:a1:de:fa:05:07:29:f4:25:bc:cb:66:
10:58:65:5f:cb:7e:7c:de:cf:fb:49:3e:79:2c:59:
59:4c:bd:0b:d7:cc:ff:fa:5f:9a:c8:b8:d9:04:2d:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B5:CB:5B:77:45:CC:1B:84:FB:D4:56:5F:33:E0:C5:4E:7D:D8:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.177.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0f:83:8a:a7:bb:5e:d2:1d:ae:38:93:c3:97:eb:ed:11:8a:
79:7b:de:57:33:07:1c:f4:ec:f6:4c:ad:d2:6e:c7:68:f6:a9:
2d:51:85:a3:6b:b0:40:67:76:01:60:71:3e:51:2c:56:a8:5c:
60:ca:e8:53:24:34:32:59:8c:18:ce:a2:0b:c0:ae:46:91:c5:
73:44:06:f0:2d:c7:f2:72:ec:e8:ff:d5:78:a6:6e:63:94:5c:
7b:0d:0c:27:73:8d:47:24:fd:65:ea:f9:1c:f8:89:15:e7:c3:
6a:83:11:31:e2:9c:13:ef:b0:8a:91:54:1d:d0:a7:3a:44:fe:
40:50:a3:21:0c:44:a4:59:dc:06:62:f3:69:a8:b2:d8:10:b6:
33:57:a4:6f:12:f7:86:86:a9:34:8c:ef:f7:b6:72:39:4c:54:
72:44:43:fa:43:e1:9c:53:62:04:de:d0:31:e6:62:9e:75:7a:
60:78:94:d1:a1:bb:8a:f2:98:9a:51:83:0c:5e:b6:4f:7b:cf:
a8:6f:bc:a7:26:ec:40:b6:83:d5:6c:b3:e7:b1:09:3a:f2:20:
1d:1d:1c:bb:a3:c6:5a:1d:ff:56:64:6e:f8:63:1d:75:48:17:
25:ae:52:12:e7:41:af:bd:d2:f4:8d:90:1e:9f:76:e1:66:cc:
bf:6b:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:54 2025 by rpki-client