Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f98877-e5d7-40ad-bfa7-c7b051a8d155.roa
File: 79f98877-e5d7-40ad-bfa7-c7b051a8d155.roa (raw, json)
Hash identifier: 4TS2Jcv5/10ImloEUtdpAoZqy/WZHI4LcjkPmQeZFxA=
Subject key identifier: 85:BB:CC:10:5C:10:37:7B:B2:3E:BD:10:C7:08:7A:68:3D:DB:84:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22EB8EAE2E8C67C4FB4FB1DB6966454B1045FFF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f98877-e5d7-40ad-bfa7-c7b051a8d155.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.215.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:eb:8e:ae:2e:8c:67:c4:fb:4f:b1:db:69:66:45:4b:10:45:ff:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=43aff5b32a65751ff3857c68365c73e5231d29f103ec597bb525ef5481f99154, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:b5:87:a1:0b:e0:2c:d9:48:79:88:be:e1:
aa:5a:7d:40:d8:0c:8f:11:8d:6c:f5:94:66:39:fa:
1a:66:e2:e4:d9:9d:45:93:a3:47:ba:7d:31:80:71:
5a:c9:92:85:a4:14:42:96:5d:6d:28:2c:e8:4d:42:
9d:29:cf:95:16:06:dc:db:4a:83:b8:43:c9:2e:a8:
5c:64:2a:e2:a6:f5:71:34:69:44:f1:d6:cb:b1:08:
36:ed:05:8c:96:a1:e8:93:fd:7e:86:aa:94:a4:3b:
bc:63:06:60:c4:ef:aa:3e:24:51:0a:3f:5a:3b:38:
f1:dc:54:29:dc:aa:64:40:d1:db:8f:69:66:6a:56:
b6:bb:1d:4b:84:6e:40:95:a0:84:f0:ad:7d:c4:3d:
45:6b:e7:9b:bf:d9:59:96:d8:09:1c:9c:fd:63:c2:
bc:2a:0a:12:af:66:db:b9:a2:36:f6:e8:28:7e:b2:
84:77:6f:92:7a:43:bb:8c:89:68:a0:4c:06:15:e0:
4d:70:20:48:c0:fd:f0:92:ec:fa:ee:5b:3a:fd:05:
a4:4e:4b:e5:b1:17:c7:ae:59:ec:f3:a5:50:fe:22:
7c:9b:8b:7b:64:81:90:6f:dd:de:8e:0e:45:1a:d1:
66:9c:3a:dd:90:d5:7c:73:f0:80:84:1c:30:6d:cf:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BB:CC:10:5C:10:37:7B:B2:3E:BD:10:C7:08:7A:68:3D:DB:84:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f98877-e5d7-40ad-bfa7-c7b051a8d155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.215.114.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:ba:bf:32:90:d4:dc:01:87:93:94:81:6f:b3:59:e8:22:d1:
14:d4:57:79:d8:86:01:e5:a1:cf:4e:ba:4b:fd:3b:12:da:5e:
02:a0:e6:17:36:74:b5:c6:b8:8f:97:7b:4c:67:85:48:5e:08:
8d:1a:d2:06:99:13:e9:48:5a:36:64:4c:85:e5:db:88:3e:2b:
93:ed:f5:70:09:26:47:63:d0:4e:16:68:d3:8a:52:a1:79:01:
8c:f4:07:72:80:d6:bd:61:db:6c:dd:6e:16:b0:db:16:f5:cb:
b4:bc:97:00:c6:03:1d:a0:28:6a:64:e2:8c:1d:70:41:38:4b:
c2:fa:6d:c3:f4:02:76:40:54:80:ec:95:8f:d6:86:e8:04:b1:
99:14:18:90:5a:1f:5c:2a:34:09:ae:8c:f8:94:62:d8:91:41:
74:b8:d9:48:19:27:fc:ed:ca:25:e4:41:20:a0:33:94:c5:7d:
f7:9d:fc:35:f4:c5:78:78:be:73:96:89:55:cb:be:58:3d:5c:
5a:81:d4:97:dc:68:0e:40:96:2f:bd:b4:1a:e1:7a:98:7f:85:
36:25:70:7b:43:fb:c2:b4:aa:9e:39:82:4b:66:e9:b7:df:fc:
d6:65:cb:9b:0b:cc:b1:b6:53:3d:55:bc:c7:3c:75:ab:57:08:
79:87:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:49 2025 by rpki-client