Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84098119-db6f-400e-8b50-d3b7152181be.roa
File: 84098119-db6f-400e-8b50-d3b7152181be.roa (raw, json)
Hash identifier: JyeYohlp0cOXtE6BYdyE6fBAlPCMI5QAonk3feLVUTg=
Subject key identifier: C7:E5:1C:15:F7:8E:D9:7E:44:D5:79:55:1B:7A:AA:35:4F:46:F4:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F8CCE94EFBEF2BF4221047824A59EE78C102EB4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84098119-db6f-400e-8b50-d3b7152181be.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 166.108.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8c:ce:94:ef:be:f2:bf:42:21:04:78:24:a5:9e:e7:8c:10:2e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=e8a7b22f2b72287d6764b3b29678a8742561a355789937498ee87a618ada1bcf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fb:8c:9b:8f:98:a3:14:4d:3c:bb:cd:1a:8c:
50:72:e5:ac:10:47:a0:45:26:59:23:c4:e0:e4:37:
1e:78:40:ee:0a:40:b0:74:70:75:18:37:0b:0d:cb:
c2:6c:a3:cb:15:4a:f1:b9:cf:38:a7:64:62:1d:1b:
5c:56:ec:66:e3:7c:c7:22:0c:45:b8:e5:07:9e:ba:
83:36:8b:7a:76:27:8d:56:7b:31:a0:77:71:61:25:
ef:ef:d2:4f:23:82:bb:71:cc:f5:3b:41:68:92:73:
16:5b:0d:5f:7a:01:c2:5c:c2:d6:fa:53:48:b9:46:
83:a9:62:8c:6a:a2:49:f5:8c:61:a2:76:51:82:cd:
dc:0d:ad:20:5a:96:6f:76:00:08:37:78:dc:41:32:
b7:08:aa:3b:13:1d:e9:56:9f:d3:e2:1c:42:7f:67:
fe:8e:24:a4:f2:36:d0:60:e2:b8:22:7c:3e:cc:7d:
ed:0e:38:97:33:b3:c0:92:16:16:41:13:a9:39:d0:
ee:63:fa:85:06:96:58:78:64:28:af:b4:b8:d8:0d:
26:21:62:12:00:3b:4f:f6:e4:ca:ce:c6:29:c2:ca:
66:9b:38:82:c6:e7:9d:95:b4:c2:5a:18:eb:80:7e:
71:dd:56:c2:08:51:0e:4f:1c:08:3d:88:5f:5b:e6:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:1C:15:F7:8E:D9:7E:44:D5:79:55:1B:7A:AA:35:4F:46:F4:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84098119-db6f-400e-8b50-d3b7152181be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.0.0/19
Signature Algorithm: sha256WithRSAEncryption
45:a8:48:2c:e4:fc:ec:d2:63:87:50:a6:5e:a6:e2:2b:8d:d7:
8b:68:60:2a:d3:ff:e4:13:5d:64:65:e8:d9:6a:64:2c:87:9c:
92:42:28:bb:66:f4:e6:7f:50:86:7c:3f:a5:cc:17:66:60:44:
eb:05:5e:aa:5c:30:2a:25:f4:13:44:81:f0:f7:75:e2:2b:01:
d0:6a:ab:84:d9:6b:44:2e:f3:5c:2f:5f:92:10:60:ff:75:13:
35:79:c3:4f:41:7b:cb:34:07:3a:8a:0f:59:5e:fc:81:34:c1:
b1:64:80:df:d2:e8:65:05:a3:1e:ba:8b:0f:ed:20:48:f4:e1:
5f:69:0c:41:e3:08:a9:67:9e:f5:ce:0a:63:15:59:b8:b8:db:
31:52:48:69:13:4c:f6:51:54:0b:78:ca:6c:9c:c4:42:fb:49:
b3:1e:98:64:91:3b:39:5d:f3:87:d2:90:32:ad:f6:f2:14:99:
b9:98:5c:b3:5c:6e:9d:16:4b:69:e7:f5:24:db:16:8c:80:70:
24:01:79:65:91:92:4f:6c:e2:c4:0f:b4:9b:8b:8b:07:09:59:
33:37:88:b1:06:7d:4c:b3:0d:f1:c3:63:16:e6:96:96:7d:df:
69:67:90:ce:78:f3:53:d4:0b:8c:96:67:5a:a4:21:4c:25:31:
22:40:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:30 2025 by rpki-client