Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
File: 8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa (raw, json)
Hash identifier: npPEQKCwdxsKKxOx1Y1P/UkuV/UgZFCcXoYF8ZH19Oo=
Subject key identifier: 3B:CC:44:7B:B4:00:F2:1E:10:C1:45:73:71:19:12:50:E2:B6:F9:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 027A90843B005D000532AFBC9FAD685AA5D962AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.80.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7a:90:84:3b:00:5d:00:05:32:af:bc:9f:ad:68:5a:a5:d9:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=b3b7b88f0d98c3845a985850cfa08454c43ce1a585535fe9adb8b627967be1b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:ac:b6:aa:86:03:9e:2f:03:24:14:64:35:
95:ea:39:65:fb:79:68:6f:0b:8d:84:d6:cb:5a:d2:
88:7d:a1:a4:78:59:5f:98:d6:cd:bd:dd:39:1b:09:
87:bd:a8:a5:87:2e:9b:03:55:a8:d0:87:10:0a:62:
4a:d7:bc:84:db:96:e5:f3:c7:b1:3e:2c:fa:8f:ae:
b8:0f:96:68:c0:79:bc:1b:e6:b7:97:ce:64:cb:be:
1d:ef:1e:2c:88:b4:62:49:1b:0b:f7:36:bb:df:77:
f8:91:14:a3:8d:29:2a:dc:3e:85:b6:22:41:b6:81:
c3:d3:15:0d:7d:8f:9d:c2:b8:70:6c:03:d5:e3:99:
b3:b5:a6:67:4a:16:40:eb:27:a8:2d:df:d5:0f:f1:
23:8d:4d:f0:13:6c:62:47:e9:a5:29:e5:26:06:10:
a2:d3:80:59:d5:9a:b3:a1:01:cd:da:38:7c:1f:63:
e2:65:9a:bd:a1:9c:21:80:af:31:c6:dd:30:94:c5:
44:7f:90:be:1c:4a:54:a3:ac:9b:a6:66:26:bd:96:
20:57:b3:53:7b:35:da:d7:da:3b:f7:0c:be:24:e3:
fd:05:79:0a:3a:17:93:ff:fe:49:fa:1d:e0:80:31:
27:e2:ea:82:78:28:6b:0f:7b:f3:ed:a4:ad:3d:19:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CC:44:7B:B4:00:F2:1E:10:C1:45:73:71:19:12:50:E2:B6:F9:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.80.0.0/13
Signature Algorithm: sha256WithRSAEncryption
13:e7:b1:1e:c4:c4:2d:91:3c:35:96:7b:9a:aa:fe:bf:b2:ea:
8c:4a:17:ba:47:1f:d4:d6:29:4e:69:c9:ba:f5:6f:a5:f4:40:
84:1b:30:3c:77:34:c6:cb:4d:46:4c:bd:f6:8d:af:95:88:bf:
7a:f9:85:15:a6:ac:7b:37:ec:ff:64:6c:47:e1:81:e0:5a:fc:
ef:84:99:59:c4:1d:59:da:ab:43:88:97:c1:a4:0d:47:07:f8:
5a:16:7a:3a:35:95:1a:c3:b3:cb:6a:1d:ad:ed:98:5a:2f:ef:
1b:f3:df:85:61:2b:dd:fa:a2:fe:19:f2:70:f2:89:22:c2:5e:
57:cd:da:45:e9:2b:5b:93:2d:61:37:dc:5f:cd:2e:3a:63:e9:
f3:06:79:b0:f5:fd:ce:63:ab:16:2b:e9:8f:45:83:0b:bb:00:
78:fb:c0:2b:27:50:df:06:86:d7:2f:bb:d6:06:ab:19:9e:ef:
ec:da:bd:4b:85:74:89:c3:69:fe:9a:5d:da:56:86:9b:fa:76:
c6:69:2b:9c:73:e3:f1:5b:7e:a5:b8:ee:cf:ed:ca:11:39:60:
76:f3:17:3d:71:59:2f:83:7a:e5:d4:21:9d:0b:4c:a0:7d:4b:
7d:1a:f6:0f:66:83:ad:ac:87:98:8a:39:a5:c4:36:d0:cb:3b:
cc:62:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:31 2025 by rpki-client