Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99801eb-2ad6-48ea-8827-0f2ada07b0b2.roa
File: e99801eb-2ad6-48ea-8827-0f2ada07b0b2.roa (raw, json)
Hash identifier: XPVrHYlHe762z3Pok/NZwJ1XPq1pW+2bviI5l2Uh2qA=
Subject key identifier: 03:AF:40:22:6A:83:C1:06:DC:85:10:35:D1:2C:D0:DF:FE:9F:B3:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20DEEEC1A1248A255DC0C7CB2B93FE9B9822A9E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99801eb-2ad6-48ea-8827-0f2ada07b0b2.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:de:ee:c1:a1:24:8a:25:5d:c0:c7:cb:2b:93:fe:9b:98:22:a9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=eebb79d7a0fcd815ac07cc2fa13fea3e4d2dc1dbbcb021d4e4debd84b7384ab7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:8b:48:c4:2c:4c:22:fc:cc:2f:ad:a7:3c:
29:fa:1e:d2:40:77:31:14:b1:18:52:20:34:7d:f2:
9b:77:e2:79:b4:4d:38:e7:9a:b1:ab:7e:bb:03:4d:
31:4a:67:77:c1:69:4f:14:ab:01:a6:ac:f0:6b:de:
21:68:fc:72:89:a6:d8:af:b1:16:9f:d7:ca:88:f1:
db:95:59:d0:e8:03:5f:26:d7:71:35:a2:01:9b:d4:
46:56:ca:e2:fa:38:58:d5:2a:99:3d:63:46:d7:71:
2f:b1:be:40:7e:4c:c7:f1:cc:22:b7:22:b6:31:2a:
2e:40:f3:45:59:81:6f:49:bd:be:ab:18:7c:c8:fb:
a6:ff:47:6b:d9:7b:e8:4a:72:6e:13:ef:29:22:95:
4e:e3:58:fe:6f:f6:f0:6f:52:cd:03:10:72:a2:5b:
b2:7d:5e:9e:78:c0:c9:cb:e3:2a:5e:7c:32:5b:1b:
33:f2:8a:f4:dc:7e:51:4b:79:02:12:ee:21:90:67:
ca:b7:99:58:c0:e0:e2:7b:91:32:e5:a5:ca:3e:e6:
00:4c:a1:a2:ad:32:12:d4:a0:d0:80:9f:ac:be:a3:
b7:8b:cd:b8:f8:3f:31:be:2f:32:af:7f:79:18:cd:
0e:21:2c:ae:7c:41:5c:25:dd:92:e2:53:61:fa:bb:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:40:22:6A:83:C1:06:DC:85:10:35:D1:2C:D0:DF:FE:9F:B3:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99801eb-2ad6-48ea-8827-0f2ada07b0b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:a6:fa:0b:fa:5d:d2:11:40:cb:77:bf:8d:6f:ca:b3:07:6e:
09:9f:16:ab:2f:4b:88:8c:59:fc:de:52:fb:76:66:bf:76:0e:
9a:5d:33:4f:c0:86:cd:41:6d:2f:09:1b:7d:18:b4:19:1d:cd:
7f:87:13:d9:68:cd:9f:37:b0:90:31:3b:01:0b:79:31:fc:d3:
3f:53:29:c1:5a:da:1b:b6:96:79:21:9e:65:45:5e:fb:b6:3c:
f4:fd:7e:79:a3:e2:ea:a5:e5:43:c4:c9:73:86:01:62:c1:95:
f9:85:3e:d9:08:c4:97:6c:db:7f:84:87:f2:b9:63:70:6e:a5:
89:ab:20:7a:79:1e:fd:bc:84:20:41:70:5c:28:63:de:76:4e:
84:5b:6d:06:14:02:a0:b3:c7:a2:80:7a:07:4f:c8:1e:5f:d6:
27:f7:f2:d4:b1:00:de:a3:ec:5e:33:0b:cb:b1:3e:bf:1c:d9:
4e:81:d0:ac:f1:65:42:be:2c:d0:04:98:e1:35:88:5f:86:27:
06:6f:13:0e:19:58:20:57:e8:ae:6a:41:98:12:94:d2:0f:9f:
ec:7a:dc:ad:fc:16:9e:e1:93:8e:96:f4:f5:65:f8:29:d0:b0:
10:c9:a9:22:98:dc:9f:77:fc:93:f0:60:d0:4c:dc:04:f0:1d:
55:78:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:12 2025 by rpki-client