Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa
File: 6a62da10-7a91-4f00-8d90-807e784a45e8.roa (raw, json)
Hash identifier: xBITFjN/yfjv+4qka6bzY/JW121gzuBrLO/Wky29dDA=
Subject key identifier: F8:F9:A0:1E:18:73:76:41:71:B7:0B:44:5C:15:7A:FF:97:DA:83:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D89B4DA128EE20BB16A1925D467D91FD7779892
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.23.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:89:b4:da:12:8e:e2:0b:b1:6a:19:25:d4:67:d9:1f:d7:77:98:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=696b13407d6e4a82b284466a15cce91501882e48f6a7f8927fa2fb1ce767a39c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:3d:f1:0f:d9:20:db:70:0b:64:61:20:fc:
a9:c3:b7:bc:83:00:e9:c8:f8:18:fa:ee:31:64:25:
8d:97:d7:99:00:6b:ef:a9:87:90:7b:7c:92:4e:5d:
8d:4a:fd:7b:cb:c4:42:61:8d:ed:81:fc:46:67:6a:
cd:6e:bd:91:b3:99:2a:6b:c2:2e:4c:51:1f:5a:cf:
95:0b:26:4c:5d:9d:26:0b:58:5d:96:4b:54:4a:bc:
3d:96:d6:9f:4c:75:bd:fe:01:5b:03:51:4a:0c:3b:
af:a4:cd:18:b0:7a:54:22:28:25:cf:dd:d5:27:cf:
2d:d3:ae:3e:02:bc:9e:84:c2:86:ae:80:b8:a4:05:
30:e0:99:74:d4:9a:3f:89:47:fb:d9:73:02:f6:ab:
55:07:9a:58:16:6f:fc:56:72:a0:f9:aa:0a:d9:be:
1e:22:b9:ea:18:80:b1:fa:f7:35:9c:83:90:28:84:
53:e2:30:29:00:af:df:f7:20:35:18:97:72:34:8a:
27:dc:5c:89:77:70:22:75:af:90:df:01:61:5f:b6:
72:ff:cc:5e:06:73:2e:12:f4:5d:00:8e:ee:eb:a2:
b2:98:29:28:a4:ed:ac:ac:ac:a0:4e:33:93:20:32:
db:7c:3a:a9:7b:7d:61:2b:e4:af:c6:c1:fc:ac:ad:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:A0:1E:18:73:76:41:71:B7:0B:44:5C:15:7A:FF:97:DA:83:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.23.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:0d:9d:24:28:87:68:cb:3a:b0:f2:2e:7e:5d:51:e3:5f:ff:
39:4e:d1:55:f5:a1:a5:e5:7a:c5:ff:9c:00:ef:c2:1f:b4:51:
95:b1:17:24:f4:75:e4:80:d3:8f:73:2c:58:a2:54:38:09:13:
d4:0b:69:1a:07:c9:98:41:90:e9:30:0f:9b:91:7c:1f:fd:b5:
d2:22:5c:c7:f6:31:45:70:4e:4e:06:8a:85:18:b3:88:56:b8:
c9:83:95:ff:9a:4d:9d:7f:6c:85:91:a6:f9:55:76:24:f4:c9:
62:df:11:d2:83:0c:61:ed:41:b6:17:83:5c:7a:5b:49:17:62:
45:e1:a0:85:13:e3:84:73:db:34:68:2f:dc:c6:0f:28:89:7f:
a4:fe:f8:2b:c6:8f:39:e6:39:78:35:e3:6f:c6:57:a8:2b:6a:
c8:28:fa:54:7c:74:ee:7e:00:da:22:6a:fe:67:2d:aa:0a:91:
40:c2:df:1c:67:dc:28:b3:c3:9a:41:dc:b9:14:87:d8:11:8b:
f0:fe:43:56:79:6e:b3:c4:f8:4c:60:11:e6:3c:fc:a2:0e:26:
02:f3:dd:f5:4c:83:b8:ab:d5:c4:53:87:66:3c:cf:c3:72:fc:
53:7b:85:26:31:d8:cf:b2:97:23:87:78:f4:19:de:5f:c9:bf:
03:26:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:39 2025 by rpki-client