Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0d71862-037a-4658-900a-54d90bc19a4c.roa
File: a0d71862-037a-4658-900a-54d90bc19a4c.roa (raw, json)
Hash identifier: MxL2A5nW5OJ3fO4Jp51kKPXeNp0oggptvK9XeFaHlAY=
Subject key identifier: B6:68:30:59:6D:C4:BA:B1:53:CF:AB:8A:AA:A8:BF:C0:C2:9A:41:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18696EB6EA89AD83A5B7BF5C11521576D5218BAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0d71862-037a-4658-900a-54d90bc19a4c.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:69:6e:b6:ea:89:ad:83:a5:b7:bf:5c:11:52:15:76:d5:21:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=0214c03ffa31a87e84af905a91e4af729d4955966d955330c1e1a684d8e09271, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:96:9a:37:25:80:35:07:7f:40:6a:6c:ab:
f0:de:67:01:e4:ff:4e:7f:9c:2a:6a:6c:05:0c:53:
4c:76:8c:06:cf:69:13:05:05:75:cc:47:d2:3a:3a:
8f:69:94:ec:e9:ee:62:90:14:02:38:55:44:0f:52:
59:70:be:0e:d0:84:c9:73:84:12:60:3d:ae:86:61:
a9:9b:f2:1f:1e:77:7a:0e:b3:2b:5e:03:34:b5:d0:
fc:15:11:8c:76:ab:d6:ee:7c:76:1f:fb:11:5b:a3:
6a:fd:bc:de:0b:14:cb:4a:d8:67:3b:bd:f1:3b:34:
de:f9:73:e1:26:e8:d0:4f:24:26:47:3f:dd:ab:76:
a5:7b:45:da:c5:f8:40:cf:62:89:ff:fc:ec:c5:4f:
2b:bd:11:98:06:24:a3:b2:72:9f:a0:ff:c0:63:5d:
44:21:32:ff:6a:f8:cc:3a:f6:d9:c7:b2:39:ef:2e:
94:79:60:05:c6:d2:47:cf:8a:b6:cd:6a:da:2e:c3:
98:69:d0:79:f7:a1:7d:58:2a:e7:55:48:9c:bc:c8:
47:c0:cb:d7:88:cc:62:6c:2c:d7:cc:b0:d6:97:f6:
c7:58:ad:47:46:5b:67:4b:9c:c3:50:64:a2:3a:ed:
40:74:93:fc:c2:2d:2e:68:80:19:8c:e0:97:4a:bc:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:68:30:59:6D:C4:BA:B1:53:CF:AB:8A:AA:A8:BF:C0:C2:9A:41:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0d71862-037a-4658-900a-54d90bc19a4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
Signature Algorithm: sha256WithRSAEncryption
63:44:59:60:92:03:a0:2c:2b:da:05:ce:08:8e:3b:69:f2:ba:
31:0a:19:fe:89:1d:2d:16:f8:de:5d:bf:ae:fe:8d:33:a1:b5:
a0:ec:54:58:af:97:85:c5:6a:60:6b:04:6c:7f:03:ea:f6:59:
48:1f:a8:29:e9:7c:05:25:7f:3f:82:5b:4c:be:2a:4a:14:a1:
26:b0:3f:8e:b3:3e:62:bc:ff:72:27:67:2d:6d:5e:3e:f2:12:
8d:c2:e5:4c:37:fd:77:c3:6b:0b:9d:1d:39:0a:b4:32:f6:47:
dc:5c:87:89:f4:8c:ba:45:e0:de:cd:f9:d9:4f:1d:56:bb:ae:
80:a5:eb:f7:d0:41:3c:ec:87:20:03:b1:8d:3a:13:30:f6:89:
f7:1e:b0:e1:d5:6a:97:00:50:55:e3:28:96:21:55:65:c0:bd:
f1:a7:bd:64:f2:3e:32:70:df:16:89:94:dd:b6:d2:70:e5:46:
7d:33:45:64:1d:e5:82:d1:28:71:52:34:d8:17:d4:10:ca:9e:
96:5d:2e:4f:d2:8a:b2:8c:72:67:87:71:13:8f:9e:48:16:fa:
0b:0a:70:89:0e:2f:85:9e:4e:0f:b9:df:61:16:2e:07:50:ab:
13:56:93:8a:f1:f1:37:86:36:44:82:b7:1e:27:e5:6c:71:c5:
57:2b:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:33 2025 by rpki-client