Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b7179f-6a8b-4412-abd7-2b97144eb1bb.roa
File: a7b7179f-6a8b-4412-abd7-2b97144eb1bb.roa (raw, json)
Hash identifier: EBms2VcImQcxHD1HxpOqJ3VnmQtb8aTLvWUhA5If+ok=
Subject key identifier: 05:F8:EA:61:4F:A1:06:37:87:7D:27:B2:66:CA:CC:2B:7C:B8:F2:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F421F29BA3BE4D1A1C16BBD925915B9CE3A55A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b7179f-6a8b-4412-abd7-2b97144eb1bb.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:42:1f:29:ba:3b:e4:d1:a1:c1:6b:bd:92:59:15:b9:ce:3a:55:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=e5ce44e5723623f4499d429ade9514619106d49ca2fe05e8856940e824067a7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:c1:ee:f9:6c:5f:66:01:c0:8b:9a:b9:c2:
62:6d:e8:53:64:59:9b:6f:aa:94:e4:50:c1:ef:63:
58:68:24:14:2e:7f:cd:7b:f8:d7:00:15:75:ad:e2:
b1:60:19:28:90:ac:98:c6:c5:8c:a9:67:f5:e1:6e:
46:60:fa:3c:0b:4b:d7:de:17:01:7e:25:ca:6d:e6:
20:60:34:f1:73:a2:1a:df:20:fd:f0:1a:09:8c:4e:
83:78:3e:3c:33:b8:1c:87:2b:b8:17:90:39:96:11:
51:59:a7:e5:cc:73:92:0f:03:8e:55:21:cc:f1:53:
c0:aa:64:f9:97:13:5c:4f:4c:ed:13:f3:2e:85:9a:
e1:6c:b9:18:f2:92:a1:db:f0:41:67:47:2d:00:ea:
ed:a6:f1:e9:2d:03:23:14:ca:b5:c6:35:e6:d9:39:
6c:9e:76:ed:dc:c3:f2:e4:72:4c:44:29:8d:18:4c:
84:ba:78:d3:c3:94:c8:e3:94:a0:90:f7:a0:10:28:
0c:39:c8:9d:43:6f:59:a3:29:ef:41:cb:3e:b5:d4:
76:63:39:7f:57:60:d4:e9:68:01:7a:b3:63:45:a2:
d6:e3:96:48:e1:c7:86:ab:a7:7a:df:6a:90:18:1a:
ec:13:e9:35:ab:74:01:85:ef:f8:15:d6:4e:44:32:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F8:EA:61:4F:A1:06:37:87:7D:27:B2:66:CA:CC:2B:7C:B8:F2:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b7179f-6a8b-4412-abd7-2b97144eb1bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.144.0/21
Signature Algorithm: sha256WithRSAEncryption
04:d7:92:89:40:d1:1b:82:96:5e:a7:6a:86:5c:75:ad:de:8a:
f8:c4:b0:bc:43:65:de:06:1c:e7:43:94:78:5f:48:65:9a:93:
24:49:bd:9b:0e:e2:88:c6:d3:8d:50:8a:df:51:06:e2:35:de:
df:7a:ee:97:38:59:f7:02:60:af:77:64:02:f7:cc:14:5c:2e:
ae:ed:11:36:60:81:51:1e:f5:44:df:3a:d2:24:f6:1d:9e:91:
cf:12:09:be:07:cd:6b:b5:85:db:8b:81:04:ab:40:2a:28:5e:
09:27:f5:a9:58:0a:d3:d3:3e:91:b0:c8:b4:bd:d7:d6:b9:60:
66:ad:97:21:51:ca:8b:d3:b5:85:c8:ee:f3:f3:df:ce:55:0d:
55:3a:af:93:60:25:75:9f:5f:2c:56:9c:a5:31:81:1a:d0:87:
09:f0:6e:87:a5:0f:75:bb:b4:89:4f:92:64:9c:11:68:71:2f:
82:eb:1e:e9:c9:48:ac:3a:48:fe:67:01:30:fc:42:4a:6d:d4:
30:cd:3c:22:2f:08:fd:5d:7c:c7:77:d5:96:2d:3e:dd:c8:00:
c3:66:21:c8:e3:ac:a1:90:ca:f0:2b:02:f0:9b:bb:41:cf:c6:
70:6b:b3:09:b9:1b:48:c5:ed:f5:a7:80:eb:69:fb:99:1e:89:
3e:20:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:28 2025 by rpki-client