Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0aecca8-b5b2-4595-9f0a-580808d0a23c.roa
File: d0aecca8-b5b2-4595-9f0a-580808d0a23c.roa (raw, json)
Hash identifier: AWRW5GJ+8PTxYdsDbHUlXRy6k6fTQbdGCPXPac8avao=
Subject key identifier: 72:43:C6:D2:2F:2B:A6:78:17:BA:86:57:C8:5E:9D:87:13:0D:92:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E4C90E12135FD591AD873B9DA1961999F26703E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0aecca8-b5b2-4595-9f0a-580808d0a23c.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.166.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4c:90:e1:21:35:fd:59:1a:d8:73:b9:da:19:61:99:9f:26:70:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=4e23a9b3db1320d8bab4e7503487fe2da8c07c9a4fa7df755be6b363e0477951, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:29:4d:61:08:0e:53:f3:03:ef:7a:00:f7:
fb:b0:82:56:db:0f:b3:20:c7:66:3b:0b:cb:e7:6c:
7a:97:bf:13:f3:b4:a4:a7:31:cd:98:97:dd:4e:ee:
2d:31:2a:57:8a:82:6e:ab:d0:0d:1e:b0:3b:c3:c2:
13:25:4a:5c:69:d1:ac:4a:bf:c8:cb:cb:17:9c:49:
6b:6a:72:12:38:24:7a:36:3f:6b:2f:a2:32:07:82:
02:95:16:e1:18:c6:2c:2d:1e:c8:9a:b6:62:0a:7e:
c5:39:41:e9:c5:c6:35:5a:20:95:45:94:22:6e:d0:
a2:a6:8a:0b:1b:be:71:b8:b5:0b:72:7a:35:8e:3c:
06:9b:55:cb:66:13:d5:93:7f:19:c8:71:a2:93:e4:
61:e9:29:a9:fb:11:91:27:65:64:24:01:b0:42:4f:
4f:97:b3:03:f4:11:3e:3d:96:89:90:b3:4f:f2:a6:
e3:79:8a:f7:6a:b3:fd:eb:80:5e:8f:c8:1e:e5:2e:
f4:1b:8c:07:53:4e:81:80:ea:be:34:ea:42:64:fa:
be:58:fd:4b:cd:ec:bc:b6:ea:b3:e7:a1:84:7a:db:
65:4f:f1:df:1f:0f:70:ce:23:5d:bd:6b:2f:41:ed:
29:1e:2c:25:d9:a5:8b:e5:21:1e:d7:57:3c:55:16:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:C6:D2:2F:2B:A6:78:17:BA:86:57:C8:5E:9D:87:13:0D:92:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0aecca8-b5b2-4595-9f0a-580808d0a23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.166.192.0/19
Signature Algorithm: sha256WithRSAEncryption
89:83:4c:e3:aa:d4:21:b2:16:d4:13:17:b6:5b:5f:70:2c:f7:
54:8e:3c:93:87:52:7f:67:40:bb:32:f3:f8:1a:39:e0:9c:04:
a3:31:de:35:31:37:a0:ad:93:8c:16:8b:53:db:ce:2f:6f:0f:
3e:5e:9b:9e:b5:ff:82:51:8e:b5:b0:f1:38:f5:07:bd:0a:76:
31:3e:f3:35:ff:ef:26:f9:6a:49:23:fc:c5:4c:e3:c3:f9:da:
50:f2:16:55:74:15:08:ba:53:c5:e0:8b:2f:5e:b9:a2:36:e3:
48:9f:de:09:a3:f2:31:5e:d6:08:cc:f4:ec:ad:9b:99:0f:6e:
1e:0d:ab:49:b2:6c:ec:ac:1e:86:48:da:c3:ac:09:c4:11:e5:
cf:cc:ef:a4:9a:f2:19:cc:1e:c4:59:7c:5b:7a:97:10:90:b8:
83:94:ea:0b:ea:02:38:56:1d:fb:cb:4a:14:38:57:d5:2f:7f:
3f:33:88:51:7d:bb:59:f7:63:e6:a5:ca:ff:68:8a:f0:d4:53:
79:2e:d6:a7:ab:02:61:51:40:ff:b1:78:09:cd:df:5c:3f:de:
25:48:ec:82:cf:8f:c9:20:98:66:2b:6e:28:ab:72:ac:ca:95:
41:1d:30:c3:b7:11:bd:84:46:d7:b6:fb:7c:96:28:85:b1:04:
ab:e9:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:10 2025 by rpki-client