Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa
File: c017381e-018d-4bd0-9469-10e4c81d2392.roa (raw, json)
Hash identifier: Q8qwYEOxxEZ0t0GiqkZ1p7AVRAztw6eW7pFcnDKbZuQ=
Subject key identifier: 4D:6D:BC:FE:EB:98:B3:F8:8C:84:93:B4:97:F3:56:6D:92:CA:0F:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70389FE0D2D7E88694C38865C73AE9AB1169522E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:38:9f:e0:d2:d7:e8:86:94:c3:88:65:c7:3a:e9:ab:11:69:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=80465934614c473402326f1252d38836e5da37ae753164941bea7ac9dea6a078, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:ce:c4:21:ad:f1:13:5f:43:c1:25:53:f5:
17:25:12:d0:b1:b3:96:44:6d:66:9a:1a:bd:16:30:
ce:ad:c8:4f:f3:33:83:05:79:65:1c:dd:ac:3a:6b:
04:11:68:ad:92:dc:0b:57:80:ae:05:44:db:45:0e:
e0:de:db:b7:89:64:56:0c:6d:c8:37:a3:49:7e:48:
72:07:b9:53:21:80:69:30:9a:a4:cf:cc:05:4d:e2:
bd:9a:c9:ea:39:f2:db:6b:d2:bf:7d:10:d8:f1:96:
08:87:30:c8:9c:fc:16:7e:9a:fd:ca:64:30:11:48:
ee:71:26:2c:54:48:d3:61:71:cc:a2:67:54:9a:80:
d3:ad:ba:26:7e:76:6f:7c:6d:c0:5f:d6:d1:ac:2f:
c7:7a:c7:06:64:c4:3b:87:79:e3:1f:a1:09:a2:61:
1b:06:39:dd:24:c8:3c:d8:03:ed:cf:1b:cc:b6:c9:
15:3a:9d:c1:93:fa:16:a4:33:ca:1a:52:0e:9a:45:
c8:8a:37:72:ca:0d:ee:7d:52:d9:3f:34:22:01:74:
fa:c1:5a:e4:bc:6d:54:35:52:27:29:ed:ee:03:8e:
aa:ac:df:41:60:41:30:c0:ad:ff:3b:2a:ba:35:fb:
e9:c0:1a:41:24:cc:cd:ad:14:66:92:e0:32:76:66:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:BC:FE:EB:98:B3:F8:8C:84:93:B4:97:F3:56:6D:92:CA:0F:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.153.0/24
Signature Algorithm: sha256WithRSAEncryption
47:67:cb:b6:d1:fa:a4:6d:af:3b:1b:50:89:c9:65:78:7b:f6:
17:64:c3:0e:fc:74:19:8d:d5:21:f6:a9:8c:6a:db:c6:2a:95:
28:a0:89:20:3e:b6:fc:76:d9:2e:81:dc:26:66:8f:12:ad:e2:
69:e4:3b:61:21:63:90:4a:c8:9a:80:25:f7:db:68:6a:8a:77:
ca:a7:1a:c1:a6:9d:ae:0d:e2:1a:92:7d:f4:10:ee:f7:cc:76:
4a:26:ae:8e:a6:2a:07:77:16:3a:52:33:bd:f9:cd:f9:df:29:
9f:a0:f0:4c:2d:28:38:9d:53:ea:e9:63:a7:4b:a8:38:97:7f:
ff:47:2a:2f:73:b0:cb:77:17:39:c4:36:b7:f2:39:9f:79:f2:
21:be:d0:b1:63:a9:c1:de:a9:5a:d5:ee:f1:2c:f3:23:c5:64:
a2:6c:bd:cb:f4:e0:c3:a7:a2:06:8e:95:19:de:7b:80:6f:0d:
45:0e:7d:3c:a2:b3:3b:5b:9f:92:6e:00:8b:16:ed:2b:9c:bd:
3e:97:54:13:dd:47:68:d1:df:92:d2:6a:14:61:bf:e1:35:b5:
35:fe:1d:52:ee:1f:ec:a7:bc:8d:56:82:da:40:f6:58:46:7b:
e7:9d:f8:ac:30:14:e1:f1:6a:63:74:7d:f2:4c:69:e6:93:c3:
5e:b0:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:51 2025 by rpki-client