Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69367ace-f6d0-43b7-8e3e-2583410a3580.roa
File: 69367ace-f6d0-43b7-8e3e-2583410a3580.roa (raw, json)
Hash identifier: XsqNopscFvo2p9V4iQP29VyVtzZf04ZZGr4PvhBaeY0=
Subject key identifier: AF:53:2B:F5:88:CA:FF:06:6B:63:5D:D7:49:5B:B3:00:48:06:52:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EC661A2B5BA224E65005AAAD67F6912A5A4B42A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69367ace-f6d0-43b7-8e3e-2583410a3580.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.57.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c6:61:a2:b5:ba:22:4e:65:00:5a:aa:d6:7f:69:12:a5:a4:b4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=f212ff10a1ca2685231ab054923c5686e4296ecb4a249b4b87376890fba58f68, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:de:ae:a9:d9:de:70:3e:ec:77:34:85:6f:
10:e2:01:4f:ab:3e:0e:6b:ba:fd:e8:6c:e5:a1:00:
e2:2a:6b:6b:c9:c6:c1:53:4b:65:9a:ea:ce:8c:29:
e2:2e:95:f1:39:b6:09:c8:09:38:a1:d5:9d:f5:0f:
77:c4:f6:93:53:a2:32:71:d9:f6:47:4b:4a:84:b3:
98:04:8d:21:a7:f1:1a:7c:66:49:eb:80:92:0c:b8:
16:e2:dd:28:c0:51:94:4c:14:81:7a:f4:27:05:30:
d5:60:c6:ec:8a:78:43:47:04:4f:39:bb:57:63:88:
e4:92:e4:73:8b:f9:6b:3b:cb:b1:68:c2:29:3b:fe:
50:15:e5:41:7e:80:25:19:41:07:b7:f7:78:44:0a:
b1:66:59:97:09:93:4a:9c:61:36:13:9f:0c:85:ea:
e1:58:69:9a:76:8c:41:1b:2c:3e:b1:84:a0:6e:33:
e7:5d:5a:92:96:47:b4:aa:56:24:c2:05:4f:66:5c:
5d:de:9e:81:40:13:90:cb:28:81:d6:2a:7e:0a:40:
38:a2:61:54:ae:0a:c6:7d:c9:02:5a:75:92:7c:9d:
ff:b3:14:80:3c:97:ca:cd:21:08:8b:3b:45:d6:c4:
4a:e4:27:96:8d:ac:0f:89:f1:cd:94:b7:16:ac:a9:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:2B:F5:88:CA:FF:06:6B:63:5D:D7:49:5B:B3:00:48:06:52:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69367ace-f6d0-43b7-8e3e-2583410a3580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.57.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:20:8b:f1:43:95:82:86:6b:c8:24:51:e3:e6:a2:97:c6:b0:
e6:18:cd:76:ad:ce:2a:60:32:a2:fa:90:67:f3:cc:61:67:63:
8c:fc:e2:e0:8c:63:ac:76:ee:1b:77:54:08:2d:98:94:00:e9:
ba:79:5e:0f:1a:17:fd:77:da:63:85:96:a3:f4:38:87:b1:3e:
e6:95:13:4c:a1:82:d2:67:ea:7b:1a:b4:4f:57:53:e3:99:6e:
c1:03:e5:ee:9b:2d:ad:27:f9:d9:0a:d8:79:e0:76:cc:af:9d:
34:e4:1b:1f:07:b9:fd:84:6d:5b:e3:c4:49:fc:08:f5:0e:81:
97:99:bf:c1:85:cd:6d:53:3c:a2:b7:77:8e:51:b0:db:c3:d5:
5a:2b:09:9c:f7:1a:79:dd:ba:ee:76:ed:88:fc:4f:67:54:28:
8d:c0:72:42:b7:1b:3c:ed:ab:fd:af:45:f3:68:ee:50:15:f5:
85:6c:39:3e:52:da:d8:0f:65:b7:6a:ed:f7:ed:8b:69:86:61:
50:1e:cf:d4:6b:85:34:f9:4f:07:9a:a3:66:9b:5c:4e:20:25:
d9:b9:bb:c5:2c:d5:c1:d5:3d:7d:88:99:dc:7c:92:10:b9:5d:
93:0a:ed:cf:5f:b1:a9:9e:a6:b3:a4:9f:85:04:1a:59:1e:25:
e1:6b:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:40 2025 by rpki-client