Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa
File: e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa (raw, json)
Hash identifier: kV3R6a9YB2IjkMj9YrQQ3CEpuuRCZkwWL9gbLeAhPG4=
Subject key identifier: C6:2A:90:8D:1B:F8:0E:5A:D3:DF:14:7A:D8:30:A3:9C:ED:BB:1A:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15000D84981EB83DFBDDDE35E6DBB091796AC723
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 64.252.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:00:0d:84:98:1e:b8:3d:fb:dd:de:35:e6:db:b0:91:79:6a:c7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=3699d9c75aa7392c518f78154957e7cf66bbc3bb92a2e791f350d8cb9f934622, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:72:79:63:f8:e1:0b:47:32:67:3b:8f:73:
47:47:06:c0:79:58:90:da:ed:61:52:78:18:cf:fe:
8c:13:65:38:b6:f1:8a:18:3d:b8:2d:fb:e0:1b:11:
9a:49:65:20:09:d3:cc:2a:ab:8e:90:19:c3:ec:47:
0a:d4:bb:a6:00:e5:9c:5e:d4:18:a6:37:eb:53:c6:
69:13:95:5a:1e:0b:ee:a6:f8:fd:04:f8:bd:75:d7:
b2:bf:9a:c9:7b:42:20:47:60:b6:7b:e3:b8:a5:9b:
28:c5:29:17:01:3a:98:41:7b:7b:aa:20:b3:bc:c3:
0f:81:9c:3f:82:0c:cb:6a:76:f0:53:9f:29:e5:fa:
78:37:49:08:9a:d0:3e:66:7b:63:32:63:6e:2c:95:
8a:c5:38:3a:f3:32:bb:31:4a:73:1d:a9:35:d5:35:
66:71:d7:48:b2:44:a9:7c:58:a0:fd:9f:6c:ba:3d:
46:5e:54:0c:7b:6f:aa:a9:af:74:66:2c:12:ee:d6:
c1:d5:18:76:1a:7a:b4:fb:e5:92:9c:34:c5:bc:73:
e4:7c:04:04:4d:de:39:9d:96:16:0c:5e:56:19:bb:
96:23:60:28:1f:fa:e4:5a:75:c9:fe:43:d7:38:49:
dc:dc:38:ab:b8:b1:3c:b9:02:40:0c:22:aa:0d:2c:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2A:90:8D:1B:F8:0E:5A:D3:DF:14:7A:D8:30:A3:9C:ED:BB:1A:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.125.0/24
Signature Algorithm: sha256WithRSAEncryption
19:19:7b:3c:c3:c1:75:d1:8e:84:ae:1d:86:0a:48:71:53:07:
f5:67:8a:6b:10:b6:f4:6f:d3:75:85:41:22:69:1d:f6:dc:c5:
8d:48:7e:06:4e:f1:f6:43:50:b4:30:6d:b0:d3:70:3b:04:a7:
3e:b4:91:99:21:7d:a8:bf:ba:88:84:07:1d:68:25:84:0c:78:
f5:c4:80:4b:69:a7:fe:d0:fd:78:ee:0c:9c:0e:75:63:10:1d:
a0:e2:8a:24:d1:3e:6e:ce:33:b5:55:62:8a:de:3c:32:59:7c:
c2:9e:27:a8:c2:67:b8:c7:df:77:1f:63:9c:f3:f7:51:bd:70:
e3:2d:97:6c:79:b8:45:cf:69:e3:b5:76:8c:93:11:1b:48:13:
73:01:db:37:79:c6:0b:49:b4:04:d6:b2:b2:40:4f:71:29:96:
cd:f7:65:e2:26:d8:cd:cb:1f:ef:6d:e3:df:38:52:a4:49:7e:
d7:29:78:50:fb:d0:88:2f:e1:14:3a:f0:53:52:52:1c:e8:24:
1f:fd:9f:d6:8c:c2:ea:47:f5:eb:d5:93:81:2d:0a:84:bd:1c:
5c:fb:28:96:41:1f:59:af:c2:7f:03:c2:65:d2:d8:f8:f1:26:
c7:a3:df:d8:81:14:bd:c0:80:2e:bb:cc:c9:61:78:e3:ef:58:
89:db:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:49 2025 by rpki-client