Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb6fb2ab-7246-41b5-b4bb-9b1eacb6ca5b.roa
File: bb6fb2ab-7246-41b5-b4bb-9b1eacb6ca5b.roa (raw, json)
Hash identifier: 8sLrXJcYPynbQf6Q8V/Ei/NK7tAFrL/Hqcs7caJe0pM=
Subject key identifier: 12:6B:C8:C7:86:D1:61:03:19:AC:79:B6:D8:FC:14:42:67:12:1D:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7ED02570A3CF2B7C711A8297D442F3653D2AD1A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb6fb2ab-7246-41b5-b4bb-9b1eacb6ca5b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 162.73.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d0:25:70:a3:cf:2b:7c:71:1a:82:97:d4:42:f3:65:3d:2a:d1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=9defc538b25d749e6a06bb4506758db9c09c95efaaf7eb99a87259a00021068b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:3f:47:25:64:cc:6e:16:19:7e:1e:56:29:
82:58:c1:5d:fd:a5:18:a8:8d:a3:ed:63:b4:33:6b:
b2:de:28:7d:ed:47:3d:47:b8:2f:89:4a:9e:d8:04:
8a:6b:6d:97:28:5d:3f:c0:20:24:ab:79:aa:bb:e0:
70:c3:c6:ed:31:bd:87:81:8f:c6:32:09:8b:5e:ed:
85:c1:b6:4a:ce:ee:94:03:e8:7a:53:d3:f9:29:80:
56:d4:99:68:86:ad:c8:fc:1c:7c:d4:d5:e2:ef:10:
06:f7:2b:3f:c7:47:9d:ea:fb:0d:14:96:f0:47:b4:
bf:70:dd:fb:b3:fa:90:3c:d4:32:20:d1:b6:34:04:
7d:02:33:72:56:b0:63:b5:a1:28:d4:9e:aa:4e:fc:
d8:94:25:b2:b7:ca:7f:f6:9f:fd:b8:81:1d:5c:87:
fe:58:78:e3:d5:81:f1:34:80:dc:3c:0e:e7:76:0d:
7c:20:90:e0:45:3e:e4:46:1b:61:0f:44:71:56:7c:
82:75:d5:f6:d1:76:07:55:4d:c2:7f:7c:4d:51:5d:
c2:5b:85:d6:09:86:19:8c:ac:b4:4f:41:d3:f3:79:
4e:2f:0f:6e:8e:57:42:02:44:fc:1e:4a:d0:ee:fc:
0b:be:b7:f7:92:03:16:0c:f6:07:dc:2a:a0:00:1b:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:C8:C7:86:D1:61:03:19:AC:79:B6:D8:FC:14:42:67:12:1D:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb6fb2ab-7246-41b5-b4bb-9b1eacb6ca5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:32:ba:91:61:d6:47:86:e4:eb:c9:95:60:6b:ae:da:a4:7a:
9a:17:89:b0:5b:34:a0:96:8d:b9:d5:6c:2b:0a:f9:e3:86:ca:
eb:77:90:21:ba:6c:c4:9e:6b:4e:52:fa:54:28:62:7b:0d:83:
53:14:ea:b6:3f:76:f9:75:9d:63:99:d9:d8:b8:45:78:1d:d2:
f1:38:d1:85:45:7f:ee:58:bf:bc:e5:ec:d2:49:fc:2d:8f:e0:
fa:f3:15:17:b4:ab:96:ad:d1:6c:63:a3:83:65:f4:b4:e6:48:
0d:1b:54:cd:fc:6c:88:25:ab:69:38:ac:2f:e7:72:60:42:7a:
ad:36:e0:0f:0a:06:e9:f5:a4:c4:2c:db:be:6f:bc:12:6b:a3:
3e:8f:ec:78:67:49:9b:d8:24:6e:31:07:42:15:21:a3:2a:36:
27:ba:13:e2:9e:db:e2:ea:e1:41:4d:28:3d:4b:ce:30:30:35:
fe:85:55:29:e4:68:e1:47:e3:f6:34:20:4e:34:8a:a3:33:91:
f9:2a:cf:16:b2:17:87:40:46:bc:12:c1:5f:c8:b8:76:62:b9:
78:41:d3:d7:c3:ae:7c:4e:e6:cd:c4:82:4c:07:fd:f7:06:33:
36:47:d7:2a:ea:5f:38:6c:4a:06:27:8d:6e:55:5d:fb:0f:e5:
bb:c8:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:46 2025 by rpki-client