Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68a68b32-0643-4d0b-a543-f8916c97493c.roa
File: 68a68b32-0643-4d0b-a543-f8916c97493c.roa (raw, json)
Hash identifier: xeslb7LELuy6ctMMvD4+IyzWGVKMl2y4t3T5BeXlnTo=
Subject key identifier: 95:89:6A:7D:CF:01:25:70:E7:DE:D2:FD:DC:E7:A3:35:6F:60:51:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A529582C4AF03387113463DF997A5887B0EB82E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68a68b32-0643-4d0b-a543-f8916c97493c.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 104.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:52:95:82:c4:af:03:38:71:13:46:3d:f9:97:a5:88:7b:0e:b8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=9cf8c25c207f59958a9423ac8a5bbcefea3e7442978e034760c414f65390a842, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:55:7a:d1:9d:e5:3e:ed:7b:96:f6:67:a2:
79:c1:1d:99:da:cd:e8:da:87:f0:c8:7c:3d:0d:d7:
fe:49:c5:8f:b1:89:94:dd:f0:61:56:83:13:ea:a8:
44:43:c0:b1:85:d1:81:72:f3:e6:13:3f:5e:07:bd:
a2:fb:32:27:10:af:f3:46:98:c9:df:b6:3f:6b:7a:
62:00:4f:ff:aa:c1:98:31:9e:c8:09:ee:4d:64:85:
8a:da:23:ee:c8:a8:a1:be:0d:86:03:da:9f:27:20:
28:6d:ef:74:63:c5:ef:03:31:55:ea:81:94:d3:d7:
61:11:74:ec:e1:53:b0:fb:4d:bc:74:c1:a4:82:95:
43:96:a2:e4:4b:a4:4a:f4:fb:e4:97:0e:9e:fc:83:
b9:e3:f1:1f:28:a5:e9:7f:18:2c:b3:d7:44:5f:28:
fd:ae:0e:ea:65:30:5c:b9:d1:f7:87:97:ea:a9:36:
ac:82:68:f8:1e:a9:23:3b:d8:ea:8f:72:55:ee:77:
df:5e:f2:a4:fd:84:23:b8:70:a0:94:c4:3a:5c:75:
11:e8:17:be:38:ba:0e:e6:6b:48:d6:c9:5e:d6:0b:
f3:fe:98:f5:3a:26:00:fe:57:e1:1a:ce:fd:90:34:
44:70:08:c7:5c:37:a2:88:89:95:cc:e2:34:cf:e0:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:89:6A:7D:CF:01:25:70:E7:DE:D2:FD:DC:E7:A3:35:6F:60:51:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68a68b32-0643-4d0b-a543-f8916c97493c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:8b:f8:c1:28:2d:b9:05:7c:2c:38:fc:ae:73:53:46:75:17:
5e:3f:0c:57:0d:9c:63:69:66:de:43:c3:1d:4d:bb:7f:0f:0c:
6a:d9:db:c2:1e:a7:f8:4d:25:d9:15:e7:b5:56:af:26:28:51:
01:40:2d:fc:f8:d8:f2:cd:3b:c9:40:c4:bf:91:ae:fb:79:31:
95:29:c4:54:8c:db:07:29:3f:3f:c2:51:8a:9a:a3:af:9f:58:
6e:f3:4e:d5:3e:47:7c:98:76:f6:e5:d0:77:d4:71:b9:45:0a:
73:35:3b:f2:8d:0b:bc:ee:c2:94:ea:82:ba:14:75:3d:32:10:
97:20:6c:22:06:4b:ec:5f:5b:5c:9f:4e:47:c3:ed:b9:db:fc:
88:a4:b9:bd:18:32:23:67:8b:19:49:74:65:8e:53:5a:6a:fa:
66:ae:ca:60:d3:04:19:a0:de:9a:3a:5c:d3:c1:6b:03:f4:e2:
dc:d6:79:74:d2:09:79:d9:3a:b3:2f:e2:38:b6:86:e3:8d:2d:
19:ad:37:7c:89:45:72:73:94:d8:4e:9d:fb:fb:5f:80:8c:50:
df:f3:16:b8:fd:37:80:40:15:39:ba:52:f9:43:78:25:1b:56:
81:ff:11:52:d4:dc:69:67:f4:e8:a5:b0:ad:fc:d7:f3:89:be:
fb:9a:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:11 2025 by rpki-client