Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa
File: 6b0118f9-aa06-473f-9164-82651f7287ff.roa (raw, json)
Hash identifier: zhBxxEfdSNgEWGTSFsjfz2+qhOMDOZRofcdePIa6Z7E=
Subject key identifier: FF:58:D5:DF:A2:41:F0:AF:B3:D1:F7:1D:9A:62:2E:50:6A:89:76:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DF396E4403F9316219F4C525F056F2919A6C99F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 128.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f3:96:e4:40:3f:93:16:21:9f:4c:52:5f:05:6f:29:19:a6:c9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=1047b98125ab946f146b89f85af5442853a317356bb0a8923342e263528f8387, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:f8:38:42:d7:69:0b:98:69:79:a1:c1:33:
91:98:a4:f4:37:bb:33:88:4f:d6:0c:09:c0:73:5f:
3b:e7:e0:d0:7b:7c:f9:35:60:c8:1a:4d:06:b5:00:
7b:9a:49:88:6e:3a:9e:a6:24:01:0e:1f:d6:92:f0:
55:e2:68:33:40:2f:17:8c:d6:3c:1d:1f:be:5e:c3:
69:6b:46:53:66:4b:5d:73:03:d1:9a:91:e6:12:ce:
6a:45:1c:74:1c:26:0b:a0:37:e0:ed:b3:70:71:55:
2b:df:a3:82:53:8d:95:56:ac:c2:8f:bb:ef:dc:24:
97:97:66:80:15:66:6f:7a:3f:e0:ae:16:cb:f1:6d:
c0:ae:2d:40:42:26:87:b9:75:08:ca:71:dc:24:e9:
1b:10:4a:3b:ab:5a:12:8f:da:d7:ff:16:55:94:2e:
53:26:76:27:15:5b:fc:86:61:95:e1:78:d8:53:41:
9a:ff:c3:f3:22:02:30:6f:61:28:35:a2:ec:61:d1:
24:78:55:76:5d:d6:1d:21:47:6d:61:df:7e:27:cb:
9e:17:8e:37:22:80:ee:b6:b9:ea:5d:63:12:35:21:
76:33:0d:77:dc:4e:18:1d:88:4c:59:fe:8e:71:5c:
14:fc:44:ed:8a:0e:24:6c:e6:7e:7a:22:6f:85:da:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:D5:DF:A2:41:F0:AF:B3:D1:F7:1D:9A:62:2E:50:6A:89:76:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.212.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:73:67:86:71:1d:2b:40:90:67:b9:e4:a3:ba:f2:3b:66:c1:
67:5f:49:07:7a:21:53:3a:9e:41:92:66:cf:2c:6c:a5:1f:ed:
a7:6a:8b:a0:ed:f0:60:6e:36:44:c0:5d:31:35:32:0a:8e:48:
93:aa:54:5f:50:5b:ac:70:0f:74:b2:66:78:69:b4:ff:1f:44:
e4:43:ae:b7:9c:82:47:3c:c4:00:a8:f9:11:b3:2e:6e:21:a9:
29:47:13:85:26:62:77:18:97:97:fa:4a:9d:c9:8f:e0:68:b8:
88:57:71:19:3d:9b:e0:b1:e1:33:b5:b0:a8:91:89:2e:2c:70:
05:ac:61:32:df:ab:3d:f4:b1:e5:d3:43:a8:4d:6b:17:53:ec:
be:56:d0:7b:73:2b:90:03:76:92:af:01:3f:ba:8d:a5:09:28:
22:11:48:0a:35:48:ad:cb:1d:ad:34:5e:c3:75:fd:e4:61:3a:
60:d0:13:41:26:5e:5d:71:97:07:d5:5b:6f:55:17:3b:01:93:
94:94:ef:71:c9:4e:c6:9d:21:86:4d:26:03:0b:e7:c4:3a:13:
7f:60:12:51:80:13:4f:cd:33:12:3a:44:84:53:4c:da:3e:2f:
71:c7:35:d6:2b:95:60:c9:83:af:30:86:46:4b:a5:9f:67:13:
cb:d6:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:19 2025 by rpki-client