Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa
File: ba95c612-340c-484f-bd1b-02425457802a.roa (raw, json)
Hash identifier: g6vmbI/V1TaV84Kw2FIrcxUtQM0YXAAR6qtdgN/L7so=
Subject key identifier: 39:05:AD:4B:6B:BB:F4:CF:57:D0:A0:B7:83:E1:DF:45:41:1B:04:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6971A2067202D289499FF2367158BE21B3CB9694
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.200.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:71:a2:06:72:02:d2:89:49:9f:f2:36:71:58:be:21:b3:cb:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=1e78535982fa843acceda14d9d38f82b335f88ca221c7c09e851cc340a6299e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:c1:bb:b5:92:2e:d9:7c:bf:5d:27:31:3f:
51:e5:42:e1:b7:b5:1f:1e:21:a8:bb:6c:dd:33:d2:
25:db:72:84:65:40:11:71:91:1d:df:3f:38:f8:07:
0d:e1:48:27:2e:81:62:7e:81:4c:a0:f9:43:30:bc:
2f:65:5e:20:4e:65:ae:31:71:95:54:b2:b3:6f:33:
6d:ca:59:cc:fd:14:90:92:27:f6:98:5e:8b:32:1e:
a2:5b:11:b6:62:c6:dc:dc:74:4a:7d:f5:ca:bc:ac:
80:51:39:05:e0:06:a3:0a:7b:6f:94:a0:c4:8c:b7:
88:05:f9:c4:30:e6:f0:02:29:47:a6:5e:42:e6:6b:
eb:92:cf:14:bc:24:be:91:14:50:cc:27:31:a3:28:
e9:29:57:10:9f:ba:f2:8e:db:03:f3:43:df:5d:91:
37:e7:d5:7d:9f:aa:c1:85:9c:34:e7:54:45:2d:68:
88:ca:b3:10:14:fa:19:86:a9:2a:81:f4:c2:e6:1a:
cf:7c:90:05:a9:4d:74:85:51:2b:ca:9f:ad:14:e2:
f4:eb:13:8c:49:cf:b4:21:0e:b2:46:27:85:57:6a:
cf:4e:a6:f2:34:22:88:a8:28:15:56:37:45:09:9f:
fc:c9:e1:6e:39:73:32:e1:04:54:e5:b8:1a:de:ee:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:AD:4B:6B:BB:F4:CF:57:D0:A0:B7:83:E1:DF:45:41:1B:04:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.200.0.0/13
Signature Algorithm: sha256WithRSAEncryption
40:72:1c:c3:e7:55:32:87:4a:01:00:77:8b:3d:b9:86:92:e5:
a5:24:6d:76:72:2b:b2:c2:bb:24:d1:e6:e2:b6:15:16:28:89:
a8:af:1d:cf:cd:7b:52:12:b3:32:04:cd:87:4a:3d:26:27:fa:
4c:f4:ac:c3:f2:51:00:3b:4c:22:7f:c5:e4:bb:8d:96:16:bc:
77:05:4b:21:f8:07:31:52:99:53:6d:47:5c:e0:a4:e2:4c:f7:
16:4c:46:e2:32:fc:49:80:d7:34:75:b5:6f:67:80:6c:41:5c:
9b:8e:7f:d6:5a:6e:68:95:1d:f7:1c:1f:71:c0:f7:74:bf:26:
d9:ef:c3:08:7d:e7:e4:9a:75:61:c6:5d:0e:ce:ef:9f:64:12:
e8:b0:44:8c:c3:b8:8f:14:d6:be:6a:76:a6:8a:5b:6a:fa:a1:
39:78:4c:65:0a:c5:ef:fa:46:2e:e6:39:29:26:63:a4:57:35:
5f:e1:b6:c7:a7:15:67:69:d8:42:91:e6:73:63:d1:e5:cc:1e:
1f:cc:4d:9b:d1:16:ba:4a:8a:8e:ae:ec:d8:7f:78:27:22:59:
e5:da:2a:e4:f3:a4:5a:7f:a1:23:da:f8:60:9b:1d:66:5e:cd:
e3:c6:02:05:81:75:b2:f2:8e:67:91:f9:65:3d:6b:a4:4f:8e:
ee:05:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:48 2025 by rpki-client