Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02a4bce-f042-4374-8a36-f18814b95c14.roa
File: d02a4bce-f042-4374-8a36-f18814b95c14.roa (raw, json)
Hash identifier: h4mNYAHBHE4tvMpJ2hmAbBh0WFFKdAev2vQHNXZLyhc=
Subject key identifier: 19:92:B1:3F:CE:13:08:B8:46:D4:7F:EE:54:BF:E7:E5:AD:C2:0A:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E4D28418830B2B79EC78FAE7803E85AD3BDEAC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02a4bce-f042-4374-8a36-f18814b95c14.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4d:28:41:88:30:b2:b7:9e:c7:8f:ae:78:03:e8:5a:d3:bd:ea:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=409f9a4c1a08632e7d062fcea206a8e1238ae9a1b589b962d30f1d3ffe3964a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:f7:7c:64:5f:24:15:e7:6c:5e:c6:c7:17:
00:b3:89:cd:4e:38:84:c0:20:cf:65:13:c9:ab:a4:
72:58:7c:04:0d:53:47:9c:dc:8f:a7:1c:3b:ae:88:
59:e3:b2:e7:3d:cc:2b:54:3d:a7:fc:32:34:33:87:
78:a9:4a:15:12:40:14:1f:a6:3d:ae:c7:16:a7:c7:
49:e1:36:3b:53:52:8a:b0:7d:4e:d9:63:78:15:47:
b2:62:9b:eb:b2:25:0d:24:55:68:0a:65:e4:c7:36:
0f:51:c5:de:bb:f4:3f:73:fd:34:c9:02:56:15:4f:
eb:a4:9f:dd:25:b0:4c:e2:d4:e1:75:18:75:81:99:
74:33:28:25:65:40:89:6c:3e:46:8c:5c:9b:1c:0f:
2c:b6:00:a6:5d:9d:1d:cd:02:5a:d3:56:0e:69:63:
97:3b:df:d2:da:bf:f9:49:c7:28:cf:96:50:5f:b5:
ac:ad:f0:b3:fd:2a:c2:1f:e9:8f:cb:91:6b:16:86:
ab:f5:c5:1e:a6:8d:7e:d4:31:90:60:5d:95:18:9b:
9b:38:c3:ca:35:0b:f5:a0:dd:55:28:2f:9e:c0:85:
69:05:c9:d2:91:26:48:fa:cb:57:01:9c:89:ed:5c:
f0:c4:99:be:15:fd:fd:8b:39:13:45:d2:2e:2f:99:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:B1:3F:CE:13:08:B8:46:D4:7F:EE:54:BF:E7:E5:AD:C2:0A:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02a4bce-f042-4374-8a36-f18814b95c14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.20.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:e1:cb:86:e0:21:1c:70:3e:8a:6b:f6:28:56:e2:b9:e4:93:
4f:f6:03:dc:9f:f3:9b:28:cc:aa:59:8b:70:f4:6c:17:44:f5:
e3:d5:c3:6a:1d:4b:2a:3f:35:2f:1d:a1:9e:6e:9f:38:0e:e1:
75:49:33:e7:9e:1e:29:be:02:48:95:d5:28:1a:82:6d:3a:4c:
26:4a:0c:3e:1c:11:7d:53:15:2b:ba:d0:1b:31:49:f1:13:31:
d8:41:d2:90:fe:11:b0:5a:9f:0b:8a:d6:43:aa:5f:fd:52:07:
fb:dc:12:ad:2e:78:04:a3:ce:fd:32:68:fb:12:f8:c9:a5:b8:
34:7d:3c:a2:df:25:9e:ab:17:89:d1:cf:c5:66:f1:8b:a7:e8:
46:ad:f1:f9:54:97:d7:60:a5:5e:46:be:a0:0c:04:d4:07:d9:
f7:56:8b:eb:64:fd:89:c6:0e:1a:64:4f:4e:be:73:f3:37:68:
57:6d:03:58:43:a2:53:89:62:dd:56:74:3d:1a:76:3c:35:4a:
14:88:ad:c8:e3:c8:b7:73:d4:0a:a6:a2:eb:e6:c0:7c:de:35:
41:56:6d:e1:80:19:b2:9f:e8:b3:b7:bc:2a:63:ee:c7:1f:b6:
9f:0e:37:96:54:65:a8:99:54:4c:75:eb:a1:41:35:80:86:e5:
75:4f:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:02 2025 by rpki-client