Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa
File: 9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa (raw, json)
Hash identifier: tFF+/La/nAKr5C8BUpysRLdCN41mHe+Hucwo8lFM5Vw=
Subject key identifier: 3F:21:93:EE:FE:B9:74:BE:42:83:B3:34:63:88:12:57:55:F0:2D:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24ABC8F5DF05406C1EA9AA709482048DA9A7AC38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.232.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ab:c8:f5:df:05:40:6c:1e:a9:aa:70:94:82:04:8d:a9:a7:ac:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=ff32555a0734e499ebdcb8cac3b6869e4f6709ec8a925c60431789f5682893b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:e1:35:b2:84:fc:38:b6:78:92:cb:5d:8e:
d7:7d:7f:47:6e:7f:93:e2:30:70:43:76:38:b2:f7:
43:39:7a:6d:e9:a4:c2:74:27:d5:0f:1b:2d:c9:3a:
96:b1:f9:68:47:1f:28:04:d8:8c:73:6b:5b:9c:d1:
fa:35:49:38:d2:90:cb:d3:b5:79:a7:61:b0:80:fa:
d3:d4:5b:a5:af:83:b2:6a:be:8c:a6:e9:ed:f6:92:
ee:a0:ed:f0:59:7e:96:fd:a7:e3:a3:d6:af:7d:60:
42:37:9a:c8:0f:e4:9a:ae:98:3c:44:eb:9e:80:b8:
46:f3:77:55:41:05:9d:a6:e5:70:78:17:1c:af:08:
ba:15:27:dd:3a:b8:88:3f:c3:d7:e0:b9:b1:c2:e8:
32:19:15:6e:4a:45:1b:d6:04:03:17:50:16:e8:79:
50:6f:e1:08:48:fa:10:c6:e9:e7:af:50:94:b8:64:
2a:92:27:be:f5:f7:6b:ef:fb:10:43:08:1e:d7:f1:
85:07:60:0c:32:ef:57:86:4b:e8:0a:dd:aa:65:e9:
c2:72:af:a3:1b:c2:25:00:7a:78:9a:7e:95:88:0e:
7a:32:56:f3:25:98:34:8b:d4:7b:98:be:1b:84:41:
0b:25:0c:6c:2f:9a:af:82:84:05:6b:28:cb:5f:d2:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:93:EE:FE:B9:74:BE:42:83:B3:34:63:88:12:57:55:F0:2D:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.232.96.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:67:e5:3f:98:cd:05:57:c5:a7:c4:df:5f:b7:8d:30:b4:b4:
53:91:d6:47:ee:af:61:a1:96:67:9b:c1:33:71:ca:00:f9:85:
c4:fd:0b:88:40:5a:7b:82:b9:8e:6e:74:4e:1a:89:da:af:56:
e5:79:63:60:ef:e7:1a:cd:37:2e:f8:10:fd:3c:7d:d0:50:58:
84:f3:ac:f3:9e:29:cc:9f:57:fb:68:ae:54:83:a0:62:21:1c:
54:a7:3d:7a:a1:d2:fe:41:f0:93:31:9d:c3:1c:68:c6:06:bb:
f4:18:a1:9f:d1:f1:62:5f:ff:be:a1:7d:82:1d:40:cf:cb:21:
7d:93:84:0f:4e:f0:76:b5:80:db:f3:e0:51:51:2f:c4:22:cb:
09:b5:51:ed:1d:a1:6d:e0:2f:6c:37:2b:16:98:94:c9:d2:db:
bf:18:9f:b1:8f:ae:75:d0:3b:b3:f1:00:29:bd:13:8b:9e:1f:
dd:b0:4b:21:46:1d:32:a9:c6:d1:5f:37:26:20:45:9b:6a:38:
64:d3:67:9b:9c:9c:02:b3:46:4a:55:8a:e9:3f:2b:00:ad:ed:
8c:ad:67:cb:ea:9e:65:bd:77:3c:b0:9d:fb:1a:9d:35:4e:53:
b5:a1:95:68:b1:d9:f7:da:7f:4d:77:08:cc:74:35:38:33:55:
af:69:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:56 2025 by rpki-client