Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd734d0-d1b1-4ced-9a1d-bd41125f450a.roa
File: 6fd734d0-d1b1-4ced-9a1d-bd41125f450a.roa (raw, json)
Hash identifier: qdV2nlZqF1Rag583+fOybR2CP/d1XRr6VCeljhtDTw8=
Subject key identifier: 16:B3:1E:15:CF:AC:DB:E6:3A:E9:89:C8:13:63:57:85:AE:3A:36:53
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4DD53898B6988520FF2AE73B3440428159ECD2A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd734d0-d1b1-4ced-9a1d-bd41125f450a.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d5:38:98:b6:98:85:20:ff:2a:e7:3b:34:40:42:81:59:ec:d2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=44abbe544b78548e07494ae51951ac964916da768f8da71cb3c30a57e46cbd0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:d5:35:e2:8e:d6:d3:0b:f0:80:d5:7d:b6:
9d:22:86:60:e4:c5:55:6c:77:17:93:34:b4:ad:0a:
c0:c4:cb:54:4e:2d:9a:25:0f:02:de:5f:bc:99:40:
dd:30:d7:d2:ed:1a:d0:33:4c:0e:e0:36:3a:69:72:
e1:ab:f1:06:41:b1:dd:e5:46:30:6a:a1:a9:3b:11:
91:a5:b5:6a:d4:f3:61:1e:05:8d:d2:02:b3:49:65:
71:2b:63:27:a8:86:a4:ba:6d:11:1b:03:60:2e:24:
65:65:b0:c1:9b:fb:71:28:5d:4b:03:b6:37:2b:2c:
ec:3c:00:27:84:8e:5e:2a:f0:a4:25:c4:bf:b3:3c:
8e:07:ee:09:83:d4:06:6b:78:4e:da:33:11:ee:be:
40:d6:db:8a:1d:31:3a:ee:b7:38:a8:27:73:e6:10:
dd:2c:d4:6b:96:65:ff:3b:7b:48:fd:de:a3:88:17:
54:30:84:15:6a:f9:d0:87:11:30:e2:ba:94:67:b0:
8c:2c:c1:77:39:5f:84:63:09:73:74:b9:6b:f5:85:
65:81:00:0e:5c:c8:1c:5c:12:a9:92:56:ed:7e:d5:
f5:7e:dc:a2:52:23:c4:d5:64:57:34:2a:0a:5f:33:
23:e1:1f:ee:99:97:6d:70:70:0e:19:58:7e:24:8c:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B3:1E:15:CF:AC:DB:E6:3A:E9:89:C8:13:63:57:85:AE:3A:36:53
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd734d0-d1b1-4ced-9a1d-bd41125f450a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.74.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e7:9a:fe:aa:20:b4:e4:92:1d:7b:ec:7a:72:b7:ca:06:65:
7d:c0:c2:e2:5e:5d:09:45:58:2d:ed:bb:35:b5:a9:ae:ae:f4:
77:b6:1e:f3:72:30:3b:6a:08:f8:eb:49:ff:ff:18:63:e3:94:
56:ac:68:af:0f:26:89:74:da:3b:40:43:4d:7f:3b:60:b9:1c:
68:dc:1c:60:a0:fd:3a:6c:44:88:d9:ce:5d:03:01:92:11:ae:
44:e9:48:85:77:d1:1a:af:f6:31:cc:1e:8c:33:9e:14:8a:fd:
46:86:c4:42:11:7c:e1:53:19:41:ef:be:07:d2:50:2f:f0:e1:
da:d1:78:29:55:7d:1e:df:45:b0:b1:d6:c0:00:0a:65:45:71:
bc:79:07:ab:e8:c8:84:34:ab:eb:6c:8b:51:b1:99:61:b3:de:
1c:be:1d:d6:16:68:15:af:23:12:08:10:66:81:5a:da:5b:70:
86:69:f2:57:db:8a:bc:3a:6f:f1:34:79:4c:af:a6:b9:f8:38:
ec:4a:33:fb:53:9d:bd:7a:29:dc:da:ef:a4:86:33:79:3c:2e:
5c:d8:cd:e5:8f:1b:8e:2b:95:61:c6:fa:36:f2:f1:03:a5:c8:
4e:38:eb:cc:9d:dd:89:5a:26:0e:8c:32:a2:c3:e1:86:89:26:
b5:c3:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:04 2025 by rpki-client