Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d43a58c1-65d8-408a-9da2-aac1d5d7a248.roa
File: d43a58c1-65d8-408a-9da2-aac1d5d7a248.roa (raw, json)
Hash identifier: UfQ8o6peWOYfY8wKGByy0LZ+kLAhx859cB/UjUbXo3E=
Subject key identifier: 98:5E:4D:F2:2C:C3:46:7C:6E:2E:04:DC:3C:26:4F:DA:CF:13:33:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D5FB907333C1B988ADEDEF37D3D665D699FBFEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d43a58c1-65d8-408a-9da2-aac1d5d7a248.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5f:b9:07:33:3c:1b:98:8a:de:de:f3:7d:3d:66:5d:69:9f:bf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=12d157c25713da602d870e6a1abac7a3f81ed27aeeb6551a15b43ba7aa4a86ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:3b:e2:61:a0:09:68:97:93:2b:d1:e9:84:
55:79:fd:6f:4b:a5:e8:3e:68:11:7d:c6:aa:03:5a:
9b:09:45:f6:07:43:13:17:f4:cd:50:0e:f1:b7:89:
87:8e:38:9f:f6:5d:4c:71:72:57:a8:d3:8f:07:aa:
25:34:7f:8d:4c:73:13:8c:1c:08:07:9c:f5:82:df:
44:14:b4:29:44:1e:43:a7:5c:58:38:ba:10:e7:5e:
2a:b1:ec:2d:cb:dd:07:c0:60:d9:5b:aa:75:c1:0e:
f6:e1:3b:75:92:bc:18:9e:fd:1a:88:39:eb:e3:f9:
f9:5c:b6:ab:04:60:9d:90:81:fd:e0:5d:3f:f5:d9:
aa:89:ac:41:45:b1:b7:f0:94:c0:d7:1d:95:5b:cd:
b3:fb:43:34:c2:ce:8f:04:c8:9b:c9:8c:bc:2d:29:
b2:de:cf:fe:df:24:fb:6e:b5:7c:ed:0d:b9:5e:0f:
6e:9c:db:7f:0f:02:d6:ae:b0:bb:6b:c6:ce:61:2a:
5f:12:f7:fd:b4:cb:71:4e:f6:ed:63:dd:91:16:25:
87:ba:cc:4d:4d:ee:79:13:82:d3:92:16:b7:24:24:
b0:48:6c:3d:c4:20:6b:09:ce:cd:30:56:17:05:ba:
30:7b:40:75:9b:d6:ac:67:eb:a8:3a:ff:59:ee:d6:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:4D:F2:2C:C3:46:7C:6E:2E:04:DC:3C:26:4F:DA:CF:13:33:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d43a58c1-65d8-408a-9da2-aac1d5d7a248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.128.0/18
Signature Algorithm: sha256WithRSAEncryption
64:68:54:63:ac:b1:c9:99:34:33:a0:0e:b0:cc:43:d2:e1:af:
49:0d:16:29:ab:8b:ae:5a:f9:67:5a:a1:ea:4a:e5:7a:e4:1e:
a8:4f:0a:0b:d0:6d:d6:f2:61:b2:ad:68:d2:8c:3e:1e:bc:4e:
cb:f0:59:8e:62:ab:8a:b8:66:f1:d0:bc:f6:46:49:2c:e6:1b:
07:60:7b:e3:ae:f3:4e:e4:61:58:26:63:88:b4:04:d2:64:60:
de:30:bc:48:07:05:3d:88:6b:87:ca:fe:d9:ba:a4:17:79:d7:
79:f7:09:ec:73:71:d5:19:fa:c1:53:0e:95:79:23:e4:3a:cb:
98:42:49:a0:99:55:8e:9a:b6:fa:ea:b7:07:90:cb:52:e6:21:
9f:72:b8:12:75:66:40:45:73:0f:fb:1d:6e:56:11:04:c4:2b:
9d:ed:42:09:dd:41:39:32:cb:10:83:be:ff:fe:14:c3:57:75:
d8:41:8d:a6:f3:43:09:e4:a6:37:ae:6b:0a:b5:3f:f0:76:9c:
b9:ff:62:26:b5:ef:9d:d2:f1:2b:61:4d:e2:2c:77:70:76:b1:
ae:9c:fe:d9:d7:72:e6:cf:e1:73:40:f9:ec:5f:7b:cc:03:d5:
bf:1f:94:66:07:29:80:f1:fb:b9:06:4b:72:25:c3:2b:2e:76:
7a:34:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:09 2025 by rpki-client