Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
File: b624d9cc-a7a2-4009-8cac-c0856276648d.roa (raw, json)
Hash identifier: uc01ZXBINcIsR6ZQHbH9ifLlqa27GZWB4gAqd5Nz6gI=
Subject key identifier: A1:14:F6:A0:44:1B:31:75:B4:8E:E1:63:2F:0D:F7:B0:A7:3F:C1:88
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D0BEA3C6B1F453324389D23DF53EA364EDCE481
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.114.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0b:ea:3c:6b:1f:45:33:24:38:9d:23:df:53:ea:36:4e:dc:e4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=1ddc6daad7d7b1d42f3384ae8cf634d02514a1f62c33cbde13cbc24ec613cf7d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:39:e2:2b:a6:c4:96:f1:8e:b0:00:b2:07:
c4:28:df:33:73:47:1a:e9:e3:f2:d3:5f:24:53:10:
14:e2:d5:46:62:d0:d7:68:14:49:b1:a5:ea:59:e0:
7c:ce:04:67:77:5b:14:b2:1e:94:14:d5:92:d7:ad:
37:0d:15:c6:c0:58:53:ab:db:c0:a7:6b:26:28:9e:
51:a8:48:e5:02:92:5a:27:d0:39:88:c5:f4:85:9a:
c0:10:b3:b2:50:d4:99:c5:ae:a0:20:d2:52:f7:b9:
80:da:b2:26:ff:30:3d:ca:8d:ce:36:39:31:34:d4:
79:0f:c0:d8:a4:c8:b3:7f:b9:9c:f1:63:32:57:ba:
10:82:48:a0:e0:a7:68:a7:ee:12:5b:0c:b6:66:3a:
fa:63:f8:14:35:3a:2b:2b:7d:ba:ed:f4:b5:2e:7b:
a7:27:7d:d4:06:59:f4:7d:36:01:4f:54:3e:31:e5:
36:ed:31:0f:81:a2:9b:ec:04:d8:cf:aa:49:cb:ac:
16:5b:c2:2d:be:09:86:18:fc:45:0a:53:48:2a:ed:
44:90:c5:e8:02:3a:86:15:99:b5:79:55:99:ae:a7:
40:bc:9e:ca:46:d0:5c:0f:86:fa:75:63:8e:3e:fd:
58:15:d9:1c:34:b9:0b:ca:15:2c:0e:51:32:64:d4:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:F6:A0:44:1B:31:75:B4:8E:E1:63:2F:0D:F7:B0:A7:3F:C1:88
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.114.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:4d:1c:3f:98:5f:3e:5e:58:e7:91:bf:7a:9a:c2:f0:9e:e1:
b6:ce:d8:b7:30:bc:99:c4:3d:a8:78:4d:65:93:6b:51:b4:99:
96:ea:03:ca:d1:d2:9c:8b:0b:52:cc:70:d5:53:58:14:22:1b:
da:53:11:94:7e:68:51:5b:f0:8c:9f:2a:4d:94:35:7a:12:2f:
41:92:e1:46:83:fa:c3:73:e0:43:21:74:e1:aa:e4:c3:f7:58:
7a:53:71:82:51:24:53:d5:83:f0:be:ac:f4:be:ea:29:5f:2b:
88:06:27:2a:13:d3:8d:99:3f:28:b6:a2:b9:3a:1c:84:43:08:
78:ce:e3:0c:c5:59:5a:2f:8a:68:16:72:a6:c9:10:63:5d:f0:
fb:85:1f:ff:42:ad:39:c7:98:d2:6a:2e:30:60:ec:18:0c:dd:
df:73:4c:36:fb:a5:0b:5b:11:ba:eb:3d:f8:a0:1e:6c:bb:af:
a2:65:f4:c2:18:37:fa:8a:31:b9:53:59:5f:9a:17:55:a3:18:
35:de:e5:bb:86:07:2e:1b:be:8a:c9:1f:41:06:c4:4b:5b:16:
f8:5c:21:50:1f:f3:c8:1f:45:09:05:bb:9a:c8:fe:2e:bd:3b:
78:4d:dd:36:ee:69:00:d1:1d:19:d1:26:61:da:c7:54:0c:47:
71:8e:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:33 2025 by rpki-client