Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa
File: 7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa (raw, json)
Hash identifier: p4ROf7V9TM83a5xNNy4g6dNB9GiBmnVrEeIRWp0jr2g=
Subject key identifier: 35:CE:13:44:FE:78:4A:7E:4D:AB:C0:2A:16:65:D6:67:24:1F:09:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 23D8E4ECC7E72BCF9600A5230D69157CE43E7CEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d8:e4:ec:c7:e7:2b:cf:96:00:a5:23:0d:69:15:7c:e4:3e:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=e3062010dbc1775b4b78d3b5421266f24c0cc7fbb5982555fbd1165e1b99403b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:6b:10:0f:2d:63:e6:a7:54:1e:69:cd:f7:
7c:42:50:1d:02:9a:4f:45:d6:35:70:b8:fb:bd:7f:
15:91:21:50:9c:7b:81:00:ca:74:f7:0a:60:1a:42:
27:7f:bc:b4:38:c2:2c:e9:80:20:ae:48:37:1c:b4:
20:af:8d:11:ee:c9:d7:3f:49:e3:7f:43:98:45:75:
02:44:cb:f4:a4:74:db:2d:ac:b7:00:35:78:56:5b:
cb:08:e0:96:a2:90:47:6e:cb:3e:af:80:8c:50:75:
54:1e:49:ce:a3:07:97:4b:05:6e:20:91:51:73:06:
cc:62:2e:44:f4:13:7d:ba:bd:e6:cf:1c:75:d7:31:
fe:87:5c:ba:ba:3d:01:76:9f:4a:bd:7d:76:3c:1f:
88:8f:11:24:e3:75:d3:53:a7:4a:a8:90:74:18:f2:
36:16:b9:b3:28:66:74:47:43:5e:0d:69:ed:07:c3:
fb:49:23:30:07:3c:ed:80:8f:72:02:f5:c3:70:4b:
30:24:1b:0c:99:58:af:b1:21:17:fa:09:07:cf:7d:
43:8f:2b:24:e4:51:6c:08:99:94:8f:46:05:a4:f8:
93:82:d6:67:9a:9e:ca:9f:8c:fd:ef:26:f7:4c:4d:
71:4e:e5:68:30:ed:5a:35:f3:60:89:f2:ef:fe:9e:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CE:13:44:FE:78:4A:7E:4D:AB:C0:2A:16:65:D6:67:24:1F:09:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6a:ea:06:32:2d:83:2c:40:08:35:56:0d:0c:9a:a6:bd:39:
43:e4:af:60:2a:d0:25:e3:88:a6:3b:1e:29:8e:f1:05:b1:b8:
bc:af:d7:5e:ca:16:40:57:17:b9:d7:45:82:c8:f6:5d:9a:f6:
7d:5b:4a:2e:69:52:47:32:9a:01:03:01:50:dd:85:75:90:97:
d1:63:20:ba:5e:ae:1a:68:08:84:85:f3:94:3f:b5:fe:1f:6e:
95:92:78:d8:6e:87:5a:52:3f:9f:54:53:66:8d:ba:97:72:c0:
89:b2:45:7c:97:06:57:f3:36:4c:5a:1b:63:43:bb:45:f5:ac:
c0:a3:e9:cf:b8:23:60:69:e8:52:75:65:ae:da:05:01:bd:7e:
90:2a:46:a1:d0:ce:ad:d7:1f:ad:9b:fd:25:c6:03:8b:b9:70:
fa:a3:5d:94:b1:f7:11:57:76:14:48:03:75:2d:e2:30:10:97:
23:eb:d2:6a:eb:e3:36:e4:a8:cf:5c:bc:66:f1:41:65:e9:85:
48:ea:6f:71:d8:6b:c1:99:10:29:0c:eb:40:8e:91:98:ee:73:
5b:c6:cd:0e:7b:e5:05:d1:08:e6:86:e4:c1:1d:66:a2:1d:ca:
ed:67:49:b8:f1:1b:84:27:9a:64:d7:a9:0a:04:45:6d:23:b2:
d9:c9:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:37 2025 by rpki-client