Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d469487-1107-4d13-bd1f-6f60c5d3da36.roa
File: 8d469487-1107-4d13-bd1f-6f60c5d3da36.roa (raw, json)
Hash identifier: wx63YbXZ0wlH6hqg/ftEgEbnD9HjPyF0x0JF8GDd7y0=
Subject key identifier: 49:4E:22:F7:7B:9C:BE:15:B8:00:70:A7:38:03:EE:0A:E7:2E:AA:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15E9206D371F37C5878DBA8B10253AC1B837F249
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d469487-1107-4d13-bd1f-6f60c5d3da36.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.23.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e9:20:6d:37:1f:37:c5:87:8d:ba:8b:10:25:3a:c1:b8:37:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c8d6d1dba7c2e3a2ad0ce43757235e80ed49a775f511e83217f5068a26dd0877, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:90:e4:6b:ab:8d:a0:d5:91:fc:a1:64:56:
88:5e:c8:03:9a:d3:97:e0:1f:5e:13:81:91:69:8c:
cf:df:19:39:6a:55:c9:5d:02:40:d7:2c:2e:6e:91:
28:8f:72:90:90:70:bf:72:e9:9d:ab:40:7b:e0:b6:
b3:97:47:ac:21:6d:9e:c4:85:cb:e0:3e:87:5d:3a:
25:d8:dd:c4:2d:29:8e:4f:fe:22:be:60:b0:6a:b4:
14:da:dc:86:c6:d3:a9:f2:87:8c:c4:11:b5:fa:3c:
55:b3:15:23:e0:c3:a7:f3:bc:87:78:22:0d:fd:a7:
2b:99:2a:3f:58:a2:3c:50:20:d0:3a:80:27:ca:aa:
c0:1e:c4:3e:1a:21:0a:c4:fd:f3:8f:23:dd:b5:89:
c3:e6:12:80:99:fa:9c:bb:68:b6:95:e8:4a:ba:ca:
aa:b4:33:e3:24:85:b3:81:02:ca:55:02:b0:1f:ae:
f6:a2:0f:7e:b9:9a:10:08:86:5c:90:25:90:29:49:
cf:df:c3:40:be:36:e9:91:70:ac:59:4c:cc:db:b4:
3c:d9:ba:46:2f:e2:6e:bb:05:c7:18:4a:05:35:5e:
5d:5d:a3:d8:1f:9a:de:06:a5:5a:38:2b:05:a1:f2:
f2:71:da:23:e0:fa:0e:f9:c3:9f:bd:40:a4:d4:b8:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4E:22:F7:7B:9C:BE:15:B8:00:70:A7:38:03:EE:0A:E7:2E:AA:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d469487-1107-4d13-bd1f-6f60c5d3da36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.23.0.0/18
Signature Algorithm: sha256WithRSAEncryption
36:c3:b4:0c:48:87:31:88:b7:b7:19:f5:d7:73:1a:22:1e:01:
5a:3d:f3:84:df:69:ef:13:e0:59:4f:ac:db:19:bd:cc:8c:8f:
03:1f:44:a8:03:08:14:07:0c:5d:d2:5f:fd:b2:e4:a6:23:59:
6e:73:28:fe:af:aa:9d:2b:9d:d7:82:7e:12:b2:cc:31:aa:cb:
48:8f:9b:e7:7d:27:e8:42:c3:13:28:6a:56:b2:1c:0e:aa:84:
cc:ee:fc:25:13:01:61:97:ec:bf:ca:dd:ed:dd:84:38:bd:b4:
a2:94:1b:f5:6e:ef:61:7a:89:b3:c4:b1:2d:93:73:9c:fc:bd:
e2:48:4f:56:19:3c:83:22:dd:bc:ba:cd:ce:e0:94:2b:e8:ab:
32:63:1b:94:95:2d:38:e8:c1:97:d4:b5:cb:e1:6c:54:a1:bc:
63:cd:ce:da:03:ea:34:40:f5:d6:a1:6c:1d:11:65:58:bb:06:
75:3b:23:d0:76:99:1e:51:aa:bb:af:e1:02:f1:91:a1:1a:3c:
98:58:f0:67:33:46:df:ba:73:bf:c5:86:7c:70:b2:19:f3:3f:
8b:88:2b:a9:aa:f0:21:ed:4a:cf:1b:e8:47:48:58:2b:ec:55:
cf:59:6d:48:84:43:e8:d7:21:77:56:d4:2d:41:80:53:bd:43:
29:73:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:14 2025 by rpki-client