Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79bee52-f4ce-4ffe-a0eb-b634b07203f1.roa
File: c79bee52-f4ce-4ffe-a0eb-b634b07203f1.roa (raw, json)
Hash identifier: 5VJKUhCig4w8yhR2heNjeBhRf1vV19CGwL49ymqAdI0=
Subject key identifier: 17:8F:DF:21:F9:B9:83:41:EE:E6:EA:AC:95:AB:A4:91:2E:79:1F:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0AFCE41523B89B90677BAB253D0F388BECB99EB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79bee52-f4ce-4ffe-a0eb-b634b07203f1.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 72.44.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fc:e4:15:23:b8:9b:90:67:7b:ab:25:3d:0f:38:8b:ec:b9:9e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=1067fbbb8134dc84fc7af1f0ac83839af5269f694128ce8affa065155966bcbf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:70:db:0a:ee:6c:f9:48:ab:f0:b0:23:60:
32:92:0c:69:a6:41:68:7c:56:f1:e5:82:72:aa:1f:
af:5c:a1:b4:8e:a2:29:5c:a6:1d:7b:85:a9:97:72:
b8:0e:74:6f:f0:08:29:ef:67:94:5d:a5:3b:14:7f:
8d:a6:51:7b:20:3f:ac:fa:ca:dc:29:d1:4c:d5:e7:
78:39:9e:47:fa:5d:0b:8d:a7:a8:ae:90:8b:05:89:
be:9d:dc:c3:af:ea:e0:69:31:84:e3:b4:91:18:b8:
bb:92:57:19:55:d1:9f:d2:75:fe:75:34:9d:b1:d9:
83:50:71:d3:c1:f9:e4:3c:1b:70:20:6f:f6:f7:82:
03:8a:db:15:f7:04:89:41:b9:8a:d6:e7:75:cb:82:
c3:d7:a3:d7:31:40:76:06:70:f5:36:e4:cb:40:db:
5c:1d:2a:dd:5e:8d:91:17:a6:97:be:6d:da:3b:b6:
58:a4:98:77:03:78:7b:e3:7d:a6:ad:15:a8:c6:3c:
a0:6c:f7:6a:91:6e:35:f4:71:f8:4e:19:69:e4:da:
7b:b2:6c:d5:17:db:d7:72:42:9f:13:b8:17:7b:a4:
c4:5f:6e:b1:db:ec:22:2c:63:8b:4c:b8:89:49:dc:
0f:47:81:0d:21:df:e9:9f:c1:d0:80:93:a8:55:57:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8F:DF:21:F9:B9:83:41:EE:E6:EA:AC:95:AB:A4:91:2E:79:1F:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79bee52-f4ce-4ffe-a0eb-b634b07203f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.44.34.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:7e:97:04:56:73:96:b0:ad:12:7b:47:21:9e:60:50:a3:90:
9a:7f:be:43:3c:cc:1a:09:ba:a1:e0:1b:28:9e:20:18:e4:a5:
f0:e1:2f:4f:51:4f:74:71:d0:41:7e:9a:b5:86:17:1c:bc:d0:
bc:1f:a9:f7:ea:2c:f0:d8:31:18:31:5d:4a:da:96:3e:bf:f1:
0e:91:2d:11:de:4f:40:70:a9:e3:38:b4:96:57:72:85:b3:6a:
f1:59:05:12:db:cc:e0:7c:6e:91:56:5d:f6:07:55:5f:52:64:
94:97:f1:c1:b7:da:03:cd:36:f9:6c:cb:a2:bd:ba:2f:e2:55:
a2:e3:a5:ec:94:fb:97:50:91:f0:d4:9c:bf:56:53:7b:7a:3b:
a3:42:8d:8c:77:d5:53:b4:f6:06:88:98:d9:e8:78:b6:ef:de:
80:11:7a:5e:b1:5a:d7:86:bb:5d:e3:9d:d5:72:47:b6:3a:40:
b7:33:ce:16:c1:1c:68:0b:a7:b1:1c:b3:04:7a:b6:8d:c5:c3:
fc:bf:2c:10:01:fb:e7:6b:89:c7:89:dd:d1:d7:e8:ac:85:aa:
0d:18:3c:8c:e1:7b:b4:8c:ac:39:b8:4c:40:8b:3b:96:a1:3e:
ab:a8:e5:b8:79:03:24:88:18:a7:f5:8c:e4:4a:89:ec:82:20:
1f:d4:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:49 2025 by rpki-client