Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa
File: 8a7b1d2a-a694-4e2c-b292-4263660a9300.roa (raw, json)
Hash identifier: P67mV1NKSYpNfxcTJDLok7Ohwqc7FUK7dFMlPNeu+kk=
Subject key identifier: 65:43:9E:7D:59:87:36:0A:57:3A:E2:1A:79:27:D6:41:3D:C6:A2:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06A3780F6661442F3DD2B69564135C3B31D3C1B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 192.189.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a3:78:0f:66:61:44:2f:3d:d2:b6:95:64:13:5c:3b:31:d3:c1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=2f7c98fbf9457e1bb0906931d48bd842e47ab5484311bae97bdb279610edeeb1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:42:c6:cb:c3:82:ea:62:fa:db:d0:4a:18:
76:4c:4a:18:0c:12:1c:d4:ac:3a:fe:5a:0a:f5:cb:
75:27:c2:50:f8:80:0a:42:37:f9:91:21:fb:df:22:
3a:38:50:bf:f9:85:7d:3e:45:30:b2:88:b9:8b:ab:
44:e1:75:6f:b1:24:9b:b5:2c:8a:f4:e8:c0:35:8c:
7b:c9:47:5c:ac:ab:e9:94:ce:ef:4f:1a:32:2f:e8:
f0:5f:92:a3:e6:c7:5d:97:18:1c:7c:c0:ab:93:1e:
a8:9a:28:14:5c:92:3d:48:6e:68:7f:c1:4f:b8:ce:
d3:2a:6a:28:d7:b3:c6:95:1b:b4:24:0d:de:c7:9d:
6e:eb:a7:43:e3:4c:31:dc:5e:40:bd:f7:84:47:70:
5f:be:19:2f:a2:29:15:a9:24:0c:d7:e5:f0:9f:57:
3e:e6:72:96:e2:e5:01:e8:26:92:90:d4:14:34:87:
44:c4:bf:b8:07:75:38:2b:ef:71:1a:c0:26:5d:4f:
2b:9f:94:4f:ab:16:35:58:20:d2:c4:0d:d2:15:81:
26:a9:e0:7f:8a:05:45:00:e8:46:e3:a3:a4:60:92:
4a:7f:81:c7:76:75:a3:2e:29:34:d8:98:0c:50:09:
08:13:06:79:24:da:63:af:97:19:61:b1:8f:42:36:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:9E:7D:59:87:36:0A:57:3A:E2:1A:79:27:D6:41:3D:C6:A2:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.196.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:0a:bd:17:de:e1:40:8e:b5:74:d3:e5:3d:55:c0:4e:e7:e2:
ac:45:af:ab:8a:fe:9b:d8:60:6b:e9:2e:8a:29:ad:61:6d:b6:
cb:2e:78:c7:04:59:5d:a1:cf:f7:24:d9:24:0b:91:fb:76:3f:
07:af:7a:f8:bb:ba:55:ed:60:14:50:17:7c:5e:e8:ac:ec:29:
44:94:57:3f:76:76:60:75:45:0b:b4:2b:39:25:27:46:83:24:
f8:14:b0:9c:e0:b3:ee:bf:15:20:14:95:40:07:0f:8b:d3:7d:
8e:5f:12:83:6b:ed:b3:5f:e9:b5:43:ba:10:99:a2:a7:21:c7:
50:c2:05:8c:cc:43:4e:01:ca:55:8c:52:40:ee:a7:28:7b:16:
d4:0a:55:51:73:73:48:16:3b:e2:8d:9c:f1:b8:9d:a5:d8:36:
50:09:66:05:7b:24:57:08:d2:9e:18:dc:99:51:19:23:d3:b2:
69:cb:57:c7:70:79:a9:b2:e6:e5:80:07:16:43:db:d3:61:cf:
0e:eb:9b:11:02:b9:5c:a9:76:82:70:d7:c1:60:cb:5b:a7:a1:
dd:90:23:00:28:8d:82:2f:b5:e7:ca:b9:1f:d0:d1:57:2b:d8:
78:16:f6:dd:8a:b4:ae:45:69:6c:35:2a:e7:b9:9e:5e:7f:69:
bf:2f:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:20 2025 by rpki-client