Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8c2b78e-8c6c-4311-a68c-2246a6fd1450.roa
File: a8c2b78e-8c6c-4311-a68c-2246a6fd1450.roa (raw, json)
Hash identifier: gs2GqFe6nJApjaFgWrxCKv3fS2TxgBzSW5eILL1XifQ=
Subject key identifier: F7:E4:DF:43:53:6B:D3:FD:3E:23:5B:15:F2:03:BA:C2:DE:9D:CD:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72456F6A4E4F0AA4469265A22CA8917D312E217B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8c2b78e-8c6c-4311-a68c-2246a6fd1450.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.236.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:45:6f:6a:4e:4f:0a:a4:46:92:65:a2:2c:a8:91:7d:31:2e:21:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=a2617b4b73d9b633d5924572d9248818be12b17134c1984c3c16bc657f7b8501, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:b0:21:2a:69:ae:90:7d:37:59:30:82:41:
be:c7:ad:ab:a0:47:66:97:22:ff:bf:5a:37:a0:c5:
9a:23:7f:ae:6c:76:45:a7:c4:0d:2a:4e:33:c9:f0:
6c:d6:7f:bc:d7:a6:30:55:7e:01:24:c2:d4:d0:38:
00:94:4e:92:e7:8b:8e:43:5b:77:14:f1:1f:58:a7:
70:31:3d:f5:29:c2:76:74:d6:5c:dd:20:0c:47:7d:
19:6c:67:fc:bf:01:90:8e:fe:6d:4c:bf:03:90:27:
68:e3:1d:18:52:34:56:ea:fa:47:3a:0b:fa:1c:a3:
3a:ad:61:b2:ba:f4:9e:01:1c:59:7c:3f:06:9f:af:
ae:16:80:a9:07:6c:80:f6:5b:27:11:67:47:e6:c8:
89:12:d1:f1:8e:59:5f:28:8d:e0:ce:f1:f0:fc:4f:
2d:f1:ff:c4:ba:17:f2:87:9e:a9:36:8c:50:b9:61:
a2:ee:22:57:0b:68:17:03:10:90:a9:ca:b5:95:8b:
1c:d3:9b:2d:ec:07:d3:56:dd:4f:28:f7:cb:8e:f1:
ca:2a:de:ba:56:1c:72:e8:4c:50:39:d1:7b:8d:a3:
3a:1d:64:82:36:dd:9e:04:88:c4:cd:01:0e:a0:1a:
82:04:dc:48:fd:05:33:e6:f9:d1:11:b2:4a:2f:ed:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E4:DF:43:53:6B:D3:FD:3E:23:5B:15:F2:03:BA:C2:DE:9D:CD:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8c2b78e-8c6c-4311-a68c-2246a6fd1450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.236.216.0/24
Signature Algorithm: sha256WithRSAEncryption
86:84:b7:e3:60:ef:b4:0e:f5:0b:1a:cd:72:f9:b9:54:31:06:
44:55:19:f3:ac:30:d3:94:59:07:b8:85:93:94:e1:97:79:1b:
02:8b:18:f1:42:8b:92:97:05:99:f7:d7:2f:79:68:66:79:66:
c4:f5:0d:df:0b:0e:fa:89:f4:07:f8:7e:26:05:72:ca:ac:9d:
a6:5d:ab:e8:7d:44:35:92:cf:ae:70:82:be:fd:4b:36:ca:32:
9b:fa:49:79:e3:20:85:c5:1d:37:83:d1:ae:8a:1a:85:96:c4:
1a:a4:d3:51:6f:3b:61:e0:2e:d0:60:df:35:7a:98:93:e6:56:
4f:69:e1:95:0f:44:98:20:40:b1:6d:f6:5b:ea:7a:46:dc:05:
61:59:93:67:b5:a1:de:d5:5b:40:88:6a:53:90:9d:e7:71:4d:
ff:1e:93:f3:09:25:87:8c:aa:e6:c2:55:21:51:24:80:4e:37:
db:ab:28:00:9e:ec:9a:d0:9c:47:0f:89:10:66:cd:b3:27:9c:
4e:d5:5a:5c:25:43:00:5c:5e:28:9c:c6:4a:c0:da:7e:35:7a:
21:4e:5e:f3:13:5f:1b:5f:19:71:7a:e4:54:6e:04:d6:11:5c:
e2:1c:a6:e4:09:a9:01:df:c7:53:d9:d3:3b:29:52:4d:db:ab:
20:0e:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:09 2025 by rpki-client