Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63a9fdb9-203f-44fc-be57-4c4b2236e6c1.roa
File: 63a9fdb9-203f-44fc-be57-4c4b2236e6c1.roa (raw, json)
Hash identifier: /M0kJl/M8tgmmUrrMB8LTztmxRwNBvnNmzmMYCQPWRQ=
Subject key identifier: F0:EA:0E:B8:63:3C:91:9F:E5:8A:91:84:14:41:74:10:F4:A3:45:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D91EC218EE6FD86084670B79AB5D75C0F3FD88B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63a9fdb9-203f-44fc-be57-4c4b2236e6c1.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.24.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:91:ec:21:8e:e6:fd:86:08:46:70:b7:9a:b5:d7:5c:0f:3f:d8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=2c32002cca91b9ac874df3962545adfd435985f10baedad7fbc05775dcb153ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:c6:09:a3:36:c8:75:07:62:de:30:12:40:
2d:a4:0d:da:f8:18:9b:44:97:51:c7:ba:d4:24:de:
b3:da:0a:7f:39:77:d9:e2:e2:6a:2a:6a:7e:82:0a:
21:8f:0c:33:bb:5f:b2:8e:18:4b:5e:11:87:36:86:
30:25:38:2b:4d:9c:76:99:bf:30:10:56:f2:47:a4:
47:e9:b0:8d:41:5a:9a:4b:04:a6:30:2b:89:4c:c9:
e6:68:a6:18:6f:3b:1c:56:9f:b8:27:ec:36:2a:90:
5c:8b:11:05:c2:44:e1:06:b5:52:00:59:c0:1f:e7:
4e:06:ed:00:4a:9b:0a:da:2c:c6:78:dd:a9:2c:0c:
13:a8:75:21:08:6c:ef:d0:55:8f:d5:ae:5a:dc:5a:
46:28:11:1b:92:82:26:5e:3f:40:4d:8d:b1:48:1a:
c4:b5:5f:73:91:15:1a:57:7b:40:d9:81:6f:30:38:
ef:0c:87:7d:87:7d:91:ec:eb:51:1c:05:59:85:4f:
e3:03:df:4a:3c:4a:f4:c0:f1:ba:57:42:05:f9:c7:
0d:8b:99:b7:84:a3:28:40:fa:57:ac:5a:2e:97:5f:
ae:5b:5f:e9:cc:a6:5d:26:38:22:24:b6:52:bd:31:
44:12:a7:1e:4b:ab:b7:9f:60:b7:58:82:54:8c:ef:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:0E:B8:63:3C:91:9F:E5:8A:91:84:14:41:74:10:F4:A3:45:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63a9fdb9-203f-44fc-be57-4c4b2236e6c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.24.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:4d:3d:53:1f:62:c9:0d:39:b5:27:ab:fc:41:05:36:a3:b7:
48:3e:91:ab:03:be:a1:3a:ba:52:8f:3b:91:b7:f2:51:eb:e5:
1e:81:91:6f:21:9b:f6:cf:4e:78:c2:3e:90:9e:a6:2d:b0:fe:
1e:4b:06:88:49:c9:0c:2e:fa:69:7f:cb:d7:00:a4:fd:25:ba:
23:50:2e:74:cd:9e:10:57:a1:1f:f1:0b:45:74:99:7c:55:c9:
85:34:b0:24:c6:a9:6e:92:e9:7d:26:59:ef:17:bf:57:38:d7:
e5:01:f1:63:99:06:1a:6b:9e:f5:d0:ca:2a:94:90:44:85:f9:
41:28:f0:dd:9f:a3:c6:8a:fe:4b:92:aa:91:6e:e0:c8:70:2c:
be:df:72:ec:1d:56:c3:73:ec:c4:28:5c:9b:5d:8d:37:2b:92:
32:02:e8:93:8b:cd:77:c7:c8:41:00:6e:c5:b4:4b:ae:7f:98:
89:cc:78:0e:3d:72:4d:c3:26:8a:6d:4b:9c:67:da:77:f6:dd:
f7:f8:d6:99:1a:0b:73:bd:0e:33:57:87:87:db:12:55:75:19:
5d:79:c1:4b:c8:b1:a5:e6:5d:bf:5a:cb:73:d5:a3:8c:01:92:
6f:7c:0f:03:c7:5e:39:0e:7c:71:44:29:8b:bc:2b:e6:6f:65:
3f:e0:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:49 2025 by rpki-client