Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5989b5a-6ca7-4f3b-94d1-8295ab72632c.roa
File: c5989b5a-6ca7-4f3b-94d1-8295ab72632c.roa (raw, json)
Hash identifier: NdySi+SNDFnq2CSmK06N/0ERmB5iYuIFqlxBaM37QHg=
Subject key identifier: 88:6B:34:61:5E:D5:59:3F:31:F1:C8:69:05:BF:7E:06:8F:14:61:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 027E5ED0A04DEA751440663F51F9A4B485618877
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5989b5a-6ca7-4f3b-94d1-8295ab72632c.roa
Signing time: Wed 22 Jan 2025 00:00:00 +0000
ROA not before: Wed 22 Jan 2025 00:00:00 +0000
ROA not after: Wed 26 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 162.213.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7e:5e:d0:a0:4d:ea:75:14:40:66:3f:51:f9:a4:b4:85:61:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 22 00:00:00 2025 GMT
Not After : Feb 26 23:59:59 2025 GMT
Subject: serialNumber=70eef2178a33eec951e48d68370466d782382d93ccd31bc8ea524e127cda8773, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:88:0e:6a:c5:38:21:65:b9:68:90:14:bb:
d2:dc:e9:62:6c:6d:3c:11:e0:dc:25:aa:b7:44:22:
18:51:9a:48:27:23:76:00:79:26:ca:59:dd:26:99:
d3:18:7c:fe:f4:de:5d:3f:de:84:b1:45:e3:b5:ca:
ec:0b:0d:f2:7e:dd:48:27:d7:8d:10:a4:d6:7a:a5:
0b:be:08:d3:0f:f0:2b:10:20:32:c8:f9:42:ec:29:
8b:ea:42:ec:46:d2:19:99:79:54:cd:b3:43:b2:2d:
54:87:0c:73:1e:ae:ea:2c:60:54:5d:93:86:32:da:
ad:e8:f5:21:a4:a2:c7:40:00:ba:d1:9f:17:da:97:
64:b3:a3:1d:cb:e3:2b:b0:44:97:45:04:7a:98:66:
af:84:26:d1:a5:6b:89:f4:7b:32:0d:5c:1d:86:68:
5f:44:28:21:98:7a:e4:cc:25:01:c3:db:79:db:54:
60:23:dd:a6:bc:24:49:1c:da:35:4f:cd:45:a0:3f:
c0:c5:46:bc:52:79:a0:a2:36:24:7f:a1:00:2b:d9:
7b:eb:15:3a:d1:13:eb:ae:f8:3c:25:9f:19:95:a7:
52:d2:4c:47:f5:1b:e2:b3:d9:c2:ad:66:79:81:ff:
24:41:75:af:b0:65:44:1f:ee:9b:a8:f2:b1:7f:70:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:34:61:5E:D5:59:3F:31:F1:C8:69:05:BF:7E:06:8F:14:61:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5989b5a-6ca7-4f3b-94d1-8295ab72632c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.213.233.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bc:14:79:36:85:df:77:e1:51:d3:c2:78:08:c2:02:94:a5:
82:1e:d9:28:a2:87:f9:29:93:67:d0:92:de:07:5a:ce:5e:6e:
67:5f:c2:6d:98:3a:d4:54:17:07:62:6d:31:b5:52:c2:c6:bc:
ee:c7:f5:2b:5e:fc:d5:c7:7c:79:33:0f:df:79:29:f6:a5:c2:
56:ba:33:2b:fb:18:fc:25:61:7c:e7:86:59:9e:8b:b0:40:d5:
03:e0:54:39:e4:76:d8:09:ff:da:b1:2a:6d:d6:7d:e1:cc:ac:
d3:79:3f:7e:ba:06:97:0c:97:80:22:e5:cf:90:2d:00:15:01:
e5:4a:9d:df:65:12:90:15:78:80:0e:6c:ae:08:4e:a8:8e:f3:
1f:db:71:86:92:35:07:cf:e4:51:94:71:55:86:00:7a:91:14:
f8:1b:b1:fd:62:69:60:99:f0:6e:10:b1:86:95:d7:c1:ac:c9:
c6:05:b3:de:b8:0d:e8:f3:00:95:8b:d3:bd:45:45:f6:49:de:
b4:3e:dd:d5:09:09:ff:9d:0f:09:af:9c:3a:5e:f8:6e:34:08:
c7:a7:98:c2:bf:0a:e8:f0:42:8f:e0:fe:e3:e4:0f:fd:c7:b8:
fb:b7:29:33:7d:84:09:1b:b6:e5:66:e5:56:99:36:59:ac:02:
a3:5b:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:08 2025 by rpki-client