Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa
File: b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa (raw, json)
Hash identifier: XG0UmI1C3N85JKPQgIDTcAlCI9ioZEOtGKVEIot1wOU=
Subject key identifier: B0:D2:16:2B:3B:46:61:AF:B4:6C:CE:01:8A:C0:CB:C0:77:B1:5C:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1646BB31E6E524214184B255DECDD4F80C46A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:46:bb:31:e6:e5:24:21:41:84:b2:55:de:cd:d4:f8:0c:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=528fdfe6a3a77693fbe00b0e7d5bc4a5868e779b59192789a235a94069f4012e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:6d:b9:ac:b9:77:ec:5f:7c:d1:e1:ec:82:
f8:ca:0b:36:2d:5d:4a:e6:8f:93:17:dc:b5:63:6a:
42:e5:d0:96:d5:4c:26:e5:c0:1e:88:a9:a2:99:48:
54:fe:f1:63:94:52:4f:fa:3f:9b:82:56:3a:c1:dd:
92:a8:87:b8:ad:34:85:1a:fc:df:5d:2d:e2:a1:fa:
35:a4:d0:0c:80:81:2e:9c:53:19:de:c2:ae:d3:4f:
8e:81:1d:ea:29:3e:43:39:2a:eb:f3:da:63:e6:63:
d0:fc:1b:21:dc:8c:82:fc:40:20:89:7f:67:16:c1:
f7:1e:56:43:06:e9:3e:7d:c8:a6:14:88:d6:d0:48:
2c:c8:6d:d3:26:19:51:ba:a7:50:67:a0:0b:7e:9d:
37:e6:2a:1d:5c:c0:c2:71:6b:47:9e:3d:f5:c2:5f:
ab:f3:93:34:64:35:8c:66:a8:fb:ea:4f:e0:4d:dd:
d4:d2:e3:45:7f:e4:93:18:c8:b4:8d:18:f0:f0:30:
c6:ed:8e:ee:04:e9:46:b6:4b:83:84:d8:e3:7b:da:
e8:1c:1b:71:5b:3d:c2:e4:3c:0b:df:48:3c:8e:5f:
bb:cc:5f:8b:fd:2f:99:12:28:fb:ec:05:49:7a:b7:
17:9d:ab:8a:ab:75:c2:b6:b7:6c:3f:c9:03:69:65:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:16:2B:3B:46:61:AF:B4:6C:CE:01:8A:C0:CB:C0:77:B1:5C:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.69.0/24
Signature Algorithm: sha256WithRSAEncryption
43:bf:4f:99:29:64:31:30:cd:ee:ab:c6:d2:dd:d7:d1:f7:d2:
60:11:75:f8:bd:c0:26:9b:9b:f6:7f:e4:e8:ab:3c:68:e7:b0:
32:5a:b3:fe:9e:dd:c3:bf:8f:61:29:68:f5:4d:6c:f9:73:ba:
1c:fa:80:5f:7c:4d:e1:32:71:eb:8f:10:4d:c2:c6:b3:f1:03:
c9:5d:64:01:4c:21:46:41:05:42:11:72:c6:db:10:fc:19:74:
73:66:00:6d:a0:a5:81:fd:ee:3d:21:58:e4:d0:72:1e:81:ad:
36:60:c0:f8:35:b2:5f:23:69:3b:8d:0a:bf:aa:29:0e:35:35:
e0:75:e8:29:c6:ba:e3:39:de:11:f8:4e:76:21:45:8a:f8:69:
5b:00:1c:e0:d1:0c:d2:b4:79:3a:0c:72:36:ea:af:b8:29:c7:
63:28:af:b1:18:d3:96:22:08:c6:e5:01:7d:ea:73:5e:cb:38:
b8:d6:63:0c:d8:97:4a:e8:96:48:52:03:77:b4:93:0d:96:6a:
0e:ad:78:50:68:be:be:a8:d0:3d:f4:44:e3:df:11:e2:56:7b:
b3:52:51:82:c4:7c:cd:52:2c:25:18:71:b8:7c:3a:0c:63:4f:
96:9d:ab:9d:70:02:7a:44:97:08:a0:10:44:4d:14:45:21:f4:
7b:ff:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:22 2025 by rpki-client