Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
File: dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa (raw, json)
Hash identifier: 7dn/RTmp0b9Ph+pJz8gmojJA5C+1an4L/o9sqgJnY7c=
Subject key identifier: 99:35:49:39:F4:FE:63:18:F6:23:C8:7B:F5:FD:B2:7B:D9:0C:17:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B94F8CDB20671671E59443FE0F67CD82906130A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.83.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:94:f8:cd:b2:06:71:67:1e:59:44:3f:e0:f6:7c:d8:29:06:13:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=18d861bbe82155290b0ddfd0f53835af6013b5f672764c792f1848ffd6a06bf6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:2d:64:31:15:e3:fa:70:b0:8f:0b:da:f2:
4d:0b:b5:3a:bf:18:b0:b1:26:e0:dc:14:8b:89:a8:
dd:14:58:07:97:79:9c:7a:99:d2:fe:82:ad:f7:a4:
03:44:ec:a1:76:96:03:5a:ec:80:c5:f9:2e:73:4a:
b6:69:4a:af:56:0c:8e:77:1f:95:46:52:bb:8f:25:
42:0c:8a:ba:ab:69:e7:44:9c:20:dd:c8:3d:f8:94:
c8:f8:d5:f3:6e:08:d1:1b:51:6b:50:2d:d0:c6:cb:
94:ac:c1:fb:bb:98:20:0d:6d:29:bc:c6:3c:a8:80:
0d:d2:9b:c9:c6:1d:6c:93:74:f9:0d:69:a2:69:1b:
ee:42:53:c9:a3:3a:ef:20:31:b2:a9:4a:cf:4a:c0:
2f:d4:5e:e7:ea:82:f9:01:9d:48:4f:4d:7f:44:bd:
16:68:3b:47:79:ed:f7:2a:ea:47:25:b5:11:91:4f:
6e:8e:ac:d4:e0:0b:0b:f8:a3:ee:af:a0:f8:41:7a:
c9:a4:82:6d:f2:69:d8:ed:f8:81:80:01:33:4f:f4:
a0:c0:ab:9b:db:d2:17:d4:46:10:0a:81:e5:a0:7b:
7f:00:1e:ab:a5:9b:b9:a7:85:5d:01:86:3c:31:0d:
6f:a3:13:03:bc:32:21:ed:e8:71:4d:e1:1e:4a:5d:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:49:39:F4:FE:63:18:F6:23:C8:7B:F5:FD:B2:7B:D9:0C:17:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.83.101.0/24
Signature Algorithm: sha256WithRSAEncryption
01:20:66:79:42:a1:46:05:9d:c3:16:5b:a0:2e:bd:08:8b:d1:
44:0c:95:86:57:92:da:3f:7e:8c:c2:41:6d:c5:db:76:c7:f6:
1c:00:f7:c4:98:e7:ba:15:3c:6e:8e:2a:45:67:01:ae:17:f1:
5f:79:9a:68:3f:24:45:5e:ce:fc:e6:25:a4:24:04:16:50:85:
01:9e:79:f6:71:61:92:d3:e4:09:27:14:65:c3:08:4b:09:18:
37:31:be:0f:a3:2d:3c:66:e9:35:2f:e5:76:8b:d9:28:58:71:
1b:c1:b0:9f:d7:eb:93:e9:66:ea:51:c1:01:36:b5:be:09:49:
e0:99:a5:5a:18:a5:15:22:33:81:4b:cc:22:fe:bb:7a:ac:6a:
b9:2b:41:6d:e6:55:ac:e5:8f:b9:85:ab:e0:9b:08:40:b2:69:
cc:08:87:82:33:ce:7d:67:a3:c2:59:cd:c8:e3:01:63:13:1c:
1b:10:d0:f2:bf:2e:89:4d:3f:93:e9:57:9a:26:6f:53:e4:e9:
45:91:d6:07:d9:0c:72:c9:5c:09:c9:0a:e3:9d:f5:e3:26:93:
c5:6f:58:7c:3f:33:20:f4:a7:96:cd:02:da:c0:6f:7d:34:31:
c9:0d:34:bd:66:1b:a6:88:ba:44:45:b8:5f:78:c5:1b:cc:37:
80:3a:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:35 2025 by rpki-client