Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa
File: a575592a-4f8e-4da1-aed9-48fad479afb1.roa (raw, json)
Hash identifier: bglhr96S7lxOigCPFEaZqlKgDYV01xwqCIBsWmXKSRo=
Subject key identifier: B0:57:4D:C6:AC:E9:E5:67:8E:D0:EB:74:2B:0E:58:CA:B8:0D:9B:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 321C7D59D799B6EA1CA2647CE40725311E9FCC0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1c:7d:59:d7:99:b6:ea:1c:a2:64:7c:e4:07:25:31:1e:9f:cc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=a45e6dcb86448724c178d23304b72b08ad58de75dd012671f5eef945810658a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:4e:e0:56:4b:77:e9:b3:6a:56:bc:f6:ec:
6e:c6:41:c2:37:c9:b8:b7:e3:77:6f:35:35:e5:df:
78:c6:a9:92:54:f5:1b:3a:ef:95:9d:0a:e9:ea:da:
49:cb:81:c8:4c:fd:f2:28:a6:80:a8:4f:52:d9:8b:
03:ad:cd:07:56:d6:62:f3:71:b1:81:7e:e6:1d:d5:
17:be:c0:b2:96:bd:f9:58:4b:92:9a:db:35:8b:db:
5e:60:45:d6:21:0d:67:30:50:00:9f:9a:9b:40:7f:
d8:60:59:d1:ef:41:84:c0:5c:1a:a4:4e:d3:39:67:
3a:c1:96:d0:9b:47:ee:25:2f:be:c3:12:37:f8:ad:
42:eb:39:71:66:44:25:b8:4e:1c:58:08:5c:85:a3:
29:a6:f4:08:d7:9b:cc:4d:6c:c7:d5:9d:4a:8f:66:
3f:d1:77:22:f1:81:d2:d9:61:19:f3:4b:82:58:37:
d5:40:b7:e0:45:c5:80:24:d8:e3:8a:48:aa:46:d7:
28:86:8f:af:23:5e:67:4a:ee:43:de:e0:34:2a:19:
03:fd:f4:cf:0c:a9:13:58:d7:72:2d:df:6e:09:9d:
b9:ac:f9:ef:67:1c:41:9b:9b:25:a9:70:59:28:f4:
d5:07:28:c2:5a:37:f1:ca:3f:7d:e1:c8:f4:06:e5:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:57:4D:C6:AC:E9:E5:67:8E:D0:EB:74:2B:0E:58:CA:B8:0D:9B:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2a:e8:fd:0c:bf:c2:c7:e4:69:b3:dc:18:cb:6e:cb:a7:98:
4d:de:91:80:95:c8:96:6b:25:a4:bf:73:99:22:65:95:31:c2:
46:12:0e:da:8e:a8:c9:8a:bb:28:77:f4:6b:7f:10:60:d9:6b:
6d:62:27:a9:c7:5d:fa:2a:49:01:2f:55:07:6d:29:1f:bb:b3:
95:29:e7:30:4a:ae:f3:51:70:cd:30:f9:7b:99:71:94:02:e7:
db:c4:73:6f:e1:79:ea:78:6e:2f:b6:da:07:9e:8d:11:6a:27:
a3:c1:9e:97:e9:9c:6f:a1:82:4d:2c:c3:e8:cd:6a:d4:cf:ea:
07:5c:09:34:d1:d0:7c:5b:8f:30:eb:d6:ed:0f:6f:e2:50:c9:
a5:09:2a:91:cf:36:b9:3c:a5:6f:14:35:dd:f7:65:5f:f2:0b:
40:5f:95:cb:67:58:75:a8:c0:dd:f6:1b:04:2e:06:99:f3:d9:
6a:d7:a4:28:ba:5d:03:f3:67:43:6b:e2:47:03:16:3a:ed:ce:
6a:95:4a:e8:a9:79:ef:76:66:89:32:0c:bd:a0:b3:6b:d1:f3:
96:11:3a:60:0c:cb:3b:40:d6:66:43:a5:2a:0c:23:18:f7:4e:
f1:ee:df:57:02:01:0e:76:ad:63:72:81:28:4c:f5:47:fa:d9:
4b:ad:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:53 2025 by rpki-client