Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa
File: be176b94-da1d-4662-89c3-9c11623079c8.roa (raw, json)
Hash identifier: 8y849Em4UPzwyD6bqSg7g2rai7UjjTK5LOXYRU7jqbE=
Subject key identifier: 12:34:09:CF:41:CD:2D:2C:6D:C9:D8:B4:E2:04:BC:67:3A:7E:5D:72
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 51E2FDFFF5955ECBD3545B27803C1102B455DA3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.236.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e2:fd:ff:f5:95:5e:cb:d3:54:5b:27:80:3c:11:02:b4:55:da:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=7a9756894da4e7a620e65a3d1650b203a4466e73d0dddb7332a4209ae38dd983, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:e8:f8:e2:4e:34:0a:bd:2d:9c:ba:a8:dd:
48:70:2a:3b:ed:6f:54:4d:48:d9:e4:bf:75:c2:c4:
bd:22:c8:57:5d:71:69:3c:a8:6d:1c:d7:1b:41:9f:
68:25:6a:fd:23:fa:e5:a6:96:d4:81:2d:3f:11:3a:
bf:5f:b3:8a:95:32:bf:73:e2:da:4f:50:d8:5e:13:
6b:3f:fa:cd:96:3a:96:95:ba:f1:aa:1f:75:e6:3c:
04:f6:ac:e9:87:47:15:b1:02:1a:6e:3b:d2:ba:19:
8c:72:de:c8:0a:02:fb:95:b5:76:99:c4:03:f6:54:
a5:22:f5:52:3c:e7:e0:24:52:0d:fa:d8:a6:c2:ed:
f2:2e:1a:46:9d:a0:67:90:ff:13:5d:10:d4:27:68:
52:cd:77:04:3c:7f:04:7b:1d:b5:ea:e8:9d:a3:8e:
83:88:6a:d6:1e:e9:8e:7e:f6:1e:35:f2:e0:9b:bc:
f7:86:05:e0:fe:aa:bc:44:a2:a7:20:a4:bd:42:4c:
d2:77:53:fa:60:e5:9b:e8:a3:27:72:50:bb:47:26:
33:c8:9f:bc:da:84:19:d3:e8:b8:4e:3b:98:3e:2e:
e3:46:12:7a:13:27:50:b5:a9:0a:b4:cb:0a:e3:6d:
13:4f:9c:6a:f3:1c:df:61:91:fd:5c:f4:44:79:51:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:09:CF:41:CD:2D:2C:6D:C9:D8:B4:E2:04:BC:67:3A:7E:5D:72
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be176b94-da1d-4662-89c3-9c11623079c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.236.208.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:22:25:cf:7a:80:67:98:c4:a1:b9:71:ec:4a:a6:f8:dc:47:
70:f0:ef:23:eb:51:7c:cc:85:bb:e6:f8:26:f6:72:c3:e5:a4:
28:d7:87:c2:a0:30:6b:78:03:74:ea:37:1c:60:8e:b9:95:2e:
a8:d1:0e:4f:07:3f:ee:42:4d:a8:a4:0a:aa:7d:5c:5f:a5:14:
09:fb:6f:34:59:32:30:49:ba:2d:f9:60:9a:5e:4a:ff:f0:41:
b5:13:83:0a:b9:df:c8:9f:a4:c3:24:80:fd:7a:ea:2b:e7:51:
94:57:86:eb:29:27:6e:ca:ab:4b:ac:a3:8b:95:51:e5:41:33:
a8:7d:8e:0d:fb:c2:2f:8a:da:6f:6d:c5:f2:0a:bf:97:86:b0:
29:40:21:62:b9:19:f8:4b:52:64:de:2a:a7:17:bb:6e:3f:ab:
95:63:09:db:2f:f1:d1:91:19:6e:b0:e1:be:39:fa:c5:88:7d:
59:01:da:3d:80:a7:71:44:c7:f7:52:8a:8f:cd:8e:49:0b:ce:
7c:df:b4:24:46:5c:5f:2c:8f:55:95:32:83:9c:f6:e7:44:21:
3b:e3:c7:31:98:4c:e5:91:e4:64:10:f7:08:d6:6d:19:69:3f:
fd:9b:a7:bc:67:51:56:ad:c6:13:48:8b:3e:da:03:39:a8:d2:
d4:79:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:07 2025 by rpki-client