Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa
File: cfbd0837-4eff-479f-a1bc-b854caccddcb.roa (raw, json)
Hash identifier: CkoEYUSxFHVzY2tgD5HySY9ILB2P1Jfi5Lt/i3hghms=
Subject key identifier: 95:24:29:51:17:9C:A6:DD:55:6A:DD:52:26:C5:7F:86:E6:F9:FB:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5180CB57BC78F091F33F3FA4A129342D3939E61D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:80:cb:57:bc:78:f0:91:f3:3f:3f:a4:a1:29:34:2d:39:39:e6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=ac375d46fb474300dcdb76efbe446fcb3fbd4025a248cd84a804989b295c58ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:39:18:75:9d:d2:3f:47:4b:9f:c3:5c:ad:
86:05:eb:d3:20:22:ba:0a:01:ff:4e:e1:3c:d0:6b:
08:bc:6d:b5:6e:04:08:12:5e:4b:de:83:14:3d:7f:
5c:f1:61:67:03:7f:c5:d9:ab:f5:1d:70:7c:ca:01:
45:d0:8f:e8:a8:2d:0b:5e:20:6e:8e:33:81:9c:80:
61:15:ac:e5:ac:5c:7c:01:f5:2c:ba:bf:e2:1d:66:
6d:95:44:a6:b4:9a:82:9d:f1:36:9c:fb:7f:e2:6e:
37:9e:4f:b8:6e:5b:5e:b7:3c:12:b5:40:d6:0b:42:
50:c4:d6:b9:f0:31:e6:ae:2b:7c:6c:4d:5b:f7:12:
e6:36:e0:37:44:56:b9:fd:c1:b0:a4:c4:b8:59:cb:
93:d9:b3:4b:fc:aa:42:51:d8:e8:48:f2:ef:0a:0a:
d8:1f:4b:ca:39:cf:f9:fe:43:68:8b:38:93:d4:1d:
5d:e8:d0:58:f9:2c:60:4f:f0:af:ac:dd:bc:06:bc:
11:e5:6f:86:bb:44:2b:40:29:b6:b8:0d:01:8b:5b:
7b:96:fe:16:59:09:4e:03:bd:0f:98:c5:86:5b:9c:
b1:6e:13:b2:23:0a:b4:33:10:67:c8:27:a6:5c:b0:
8d:56:86:01:69:e6:9a:80:8a:d6:87:cf:32:e2:3f:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:24:29:51:17:9C:A6:DD:55:6A:DD:52:26:C5:7F:86:E6:F9:FB:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.68.0/24
Signature Algorithm: sha256WithRSAEncryption
64:64:88:df:3e:d7:bf:8c:46:68:c0:d2:d5:87:17:cb:cd:05:
ec:70:2f:92:ce:d0:9e:60:2b:43:08:eb:b3:a0:37:25:10:b1:
55:d3:d1:f9:98:40:2e:59:8e:46:70:19:ec:30:27:04:80:ae:
83:ae:5d:a2:28:30:5a:37:b4:d5:d2:af:8b:e3:1b:01:24:e9:
bf:8d:3b:0e:55:e2:3f:4f:49:54:2a:80:92:73:bc:50:a3:a6:
14:35:e4:61:af:8c:fa:d7:ec:1e:5c:e6:8b:26:dc:7e:c6:a2:
86:72:1a:73:09:33:9b:a4:ff:2a:87:b7:08:f7:a1:f9:ec:8e:
ef:0e:ef:be:7a:26:07:46:7a:38:bc:d3:e1:26:d4:f6:53:28:
41:94:22:34:cc:34:98:ae:64:15:a0:a0:90:b4:06:28:f1:eb:
e6:08:1b:99:7e:34:c6:1d:e8:2f:83:91:16:50:25:98:ad:f6:
4e:bb:53:9d:69:92:bd:6d:d9:95:10:74:57:bf:35:df:05:e0:
46:ca:09:db:a9:87:27:c5:fb:41:d5:9f:65:22:22:9a:f2:04:
07:7e:75:b8:40:27:b1:23:27:12:4b:65:45:0a:08:c3:04:05:
d6:e3:3c:da:5c:78:75:9c:0a:5f:86:41:5a:e8:fa:d4:e5:cf:
51:87:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:47 2025 by rpki-client