Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2efa47b-abae-4edd-bc60-e8042483c05d.roa
File: e2efa47b-abae-4edd-bc60-e8042483c05d.roa (raw, json)
Hash identifier: ZK78TZjdAIVCLaZURduc63RGWhFLGsiuDY1BEfboQh8=
Subject key identifier: CD:D7:8B:04:30:F7:66:65:65:FB:36:33:15:26:54:84:56:FE:09:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F1B2F967BB664AD81EBF06F8AB3988975436D9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2efa47b-abae-4edd-bc60-e8042483c05d.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1b:2f:96:7b:b6:64:ad:81:eb:f0:6f:8a:b3:98:89:75:43:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=60bdd2f893f495cb9f5e86353d94fe195af08f44013facd7f189ba56f15021de, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:64:5c:b8:4f:b9:b6:e0:96:5d:7f:de:c9:
c4:44:c5:f3:1e:2f:d2:50:c5:a0:ba:4c:d0:86:55:
12:76:03:58:8b:16:39:e5:e9:6d:c4:aa:bd:1b:20:
37:30:cb:b5:f7:d9:97:8d:41:98:c5:83:89:5f:75:
a6:c4:d9:b6:35:71:85:55:08:06:7f:eb:eb:eb:be:
e7:da:08:9a:24:01:dc:87:d9:b7:29:c7:1d:cd:7f:
eb:a7:fd:bf:1b:7d:3d:ad:58:3a:dd:60:3c:c6:60:
c3:2a:68:b2:93:54:20:21:c5:f7:e7:2d:e2:fd:3d:
c4:ab:97:f3:4f:1d:a7:9f:80:d5:56:f4:39:dd:93:
27:54:cd:08:cb:27:a7:ff:1d:d9:16:42:1e:4e:b5:
b0:e6:29:37:74:60:4f:1f:15:3f:e8:fc:ad:5e:b8:
2a:a4:38:af:13:64:33:b0:dc:63:71:4f:f6:0d:7e:
1e:de:73:c2:71:41:00:5c:83:b6:ba:fd:43:74:1a:
cf:15:a6:69:fa:93:e6:4f:28:b8:dd:eb:9e:3c:bc:
9f:de:f1:60:6a:96:aa:d8:65:ed:90:81:3e:4c:1f:
15:46:07:50:78:1c:79:28:6b:ad:e6:83:ff:06:d1:
9b:e0:3d:0b:f7:3c:20:3a:da:12:51:36:e8:fc:96:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:8B:04:30:F7:66:65:65:FB:36:33:15:26:54:84:56:FE:09:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2efa47b-abae-4edd-bc60-e8042483c05d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.100.0/23
Signature Algorithm: sha256WithRSAEncryption
84:43:d8:8e:e4:9a:e9:01:1b:77:7a:51:a6:5d:fd:aa:ea:29:
12:f9:fc:fe:36:1b:27:14:43:40:75:17:40:26:cf:d8:ac:9c:
69:d9:a1:45:a7:2a:a7:92:8c:62:eb:a9:e6:29:f5:04:c0:cd:
ef:39:6a:d6:f5:80:76:00:45:76:10:d3:67:b9:2a:dc:69:2f:
1c:c5:4a:d8:0c:bf:91:ee:64:08:ba:fd:2e:f6:c8:8d:6f:a7:
ef:5d:a6:c9:87:2d:42:b0:c0:ca:03:38:fb:04:d3:30:df:88:
62:1f:49:cf:6d:9e:2c:d0:8a:14:79:17:ab:ad:6b:ec:5a:0d:
ef:16:52:2d:53:7a:f2:ee:0a:89:bb:ce:9b:47:f0:63:2c:45:
62:ac:eb:37:00:d8:57:72:25:25:8c:d0:27:a8:78:16:94:23:
77:99:c0:83:86:43:ff:7d:0f:e5:ce:dc:f2:f4:d9:dc:f3:99:
a8:60:9d:a4:82:7b:da:d6:03:9d:6d:24:7b:e3:54:fa:77:ec:
d4:72:81:cf:61:fd:65:6e:37:ee:3d:95:3d:77:d1:b6:0d:f9:
b5:40:5c:a4:2e:c5:85:30:53:11:48:21:71:af:53:25:40:81:
8f:4c:29:df:49:d3:ee:ce:3d:36:de:17:0b:cb:dc:cd:25:37:
62:e3:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:13 2025 by rpki-client