Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa
File: 843bf734-db6e-432f-a611-4c86a79225b5.roa (raw, json)
Hash identifier: fXzCDPWpwTEL5U2ZGLb7ZG+Isy1MC5I2k2ECZgDoY4I=
Subject key identifier: E7:36:B7:B9:CC:E1:D2:BB:F7:0B:2E:54:C9:39:BD:3A:88:77:F9:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 78FB6E7CD194460FF2F3B5F54D9851B56CDF6BAD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.24.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:fb:6e:7c:d1:94:46:0f:f2:f3:b5:f5:4d:98:51:b5:6c:df:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=b33780d26fad944b61461bc9694c8c809d8a6ff50c812ef6feba0673de67f02a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:da:82:b4:6b:7f:06:14:d0:62:5e:4f:ea:
64:6b:8b:f0:c9:92:95:57:4e:63:ad:25:23:e8:9e:
32:fc:5f:fa:46:70:ba:53:9d:f7:a1:1e:5a:03:ac:
45:66:d4:73:73:f9:42:a0:c5:40:bf:93:cd:3d:e0:
97:ac:e1:78:71:a0:85:cb:d3:f0:e0:40:9f:23:e7:
5e:80:52:6a:c5:75:c9:13:76:38:7d:b4:44:ca:9b:
ab:78:fa:e5:55:4d:fc:64:6b:e8:b7:2d:35:77:06:
61:91:85:4b:2d:0a:dd:2b:5f:52:16:e9:49:44:9b:
aa:c6:61:0c:62:c1:9f:ff:d3:b4:2d:24:52:c2:ba:
97:93:28:f3:31:b1:08:a0:e4:88:85:d3:9f:4d:80:
57:a0:ed:ca:39:01:cd:5e:5e:8b:45:97:b8:99:8f:
28:ea:ec:35:22:90:bd:3d:e6:e8:39:fa:73:ea:67:
74:af:3d:e0:e8:70:05:db:f0:e8:7e:c9:cc:99:f1:
7a:d9:cc:2f:92:63:78:07:a6:e2:47:5a:9d:bc:fc:
65:a3:e7:03:94:ff:66:7c:9c:06:74:bf:41:78:b2:
3b:2f:ba:58:97:56:51:6b:2a:15:79:90:99:22:49:
80:c6:5c:9d:38:4e:35:ae:87:c3:fe:84:11:86:ba:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:36:B7:B9:CC:E1:D2:BB:F7:0B:2E:54:C9:39:BD:3A:88:77:F9:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.24.30.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:66:09:12:2b:58:35:b4:d1:4b:8c:ff:94:18:16:41:97:b2:
ce:d5:f8:28:39:2a:8d:96:bd:78:ba:82:25:7b:2c:01:3c:22:
20:05:49:6f:cf:99:c0:9c:fb:92:1e:f9:91:20:39:1b:50:17:
7a:3a:fc:47:fc:f2:aa:50:a5:c6:e7:9d:4e:14:2f:75:76:1e:
5f:b4:8e:80:28:ca:0d:dc:8a:b2:7d:1c:06:08:bf:9d:98:c9:
e8:fd:1b:53:f4:18:86:c8:6a:f2:61:4d:c0:9a:da:a6:53:b6:
cf:49:00:a2:73:0c:f8:78:de:c7:c8:08:b7:2c:20:95:b4:2e:
48:9f:f8:a6:09:1d:b3:9c:cd:20:5e:b8:61:71:a4:f6:74:39:
24:be:80:64:de:8a:0f:0d:2f:a8:97:02:70:f1:ad:c0:e6:a3:
09:b0:28:92:3c:25:b0:61:fd:60:88:ac:a4:24:5d:8b:32:a4:
03:30:d5:a5:a9:ab:11:17:b9:79:4e:51:11:f5:4f:ad:4b:14:
2d:c3:55:11:22:79:57:8e:38:a0:62:ce:7e:20:e6:86:26:97:
52:5f:1c:ab:4c:4d:2b:0b:98:c7:dd:2d:50:76:be:38:46:fe:
61:4e:ce:4d:f9:92:67:8a:70:3b:08:8a:a2:6a:ab:08:bb:03:
5d:06:e6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:36 2025 by rpki-client