Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef8efc10-0ade-4a78-a29d-d3809dd2cadf.roa
File: ef8efc10-0ade-4a78-a29d-d3809dd2cadf.roa (raw, json)
Hash identifier: tFl10P/jFgFl9zK3fhzpuUmwmwgFgYTZrpbVpJA9NZw=
Subject key identifier: AA:0A:DF:F7:A5:6E:D9:9C:41:66:0D:D0:0C:9C:24:BF:F7:8C:59:6F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0341F5CE4ECBC6CC400B2FA1D015F713270FE440
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef8efc10-0ade-4a78-a29d-d3809dd2cadf.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 174.129.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:41:f5:ce:4e:cb:c6:cc:40:0b:2f:a1:d0:15:f7:13:27:0f:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=8847452361fbf2427f3e095b44d7e564d9cbc38ff53eaf84b3aff3ac2d374193, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:fe:8f:06:2d:08:bc:d9:20:78:65:63:6c:
bf:98:72:38:ce:c8:91:59:51:6d:61:9d:ce:a8:3d:
49:61:e4:c6:f1:10:81:d4:b7:84:71:f2:17:f0:ab:
7c:a3:05:a4:a9:8f:99:8e:e9:7b:f1:2c:df:cb:6d:
ca:4e:de:8e:77:7f:ae:1a:42:2f:c6:06:4f:56:96:
8d:bb:6e:85:fe:48:80:63:ef:67:75:d4:f4:ae:23:
66:23:a3:b5:0e:fb:76:c8:9a:3d:5f:f4:73:5c:99:
81:e0:12:dd:bc:c8:dc:44:b7:a4:21:22:4b:00:e7:
08:2e:58:7f:2f:79:83:37:f4:27:32:a5:40:bf:dc:
5b:41:0a:15:15:1e:04:22:77:30:36:10:b5:92:a4:
b6:f7:8a:a1:e2:e1:d8:a1:c9:49:f0:43:46:ab:a5:
50:b5:03:b8:ae:20:57:7b:17:b0:3d:cd:e3:ff:8d:
aa:dd:f0:89:a7:e9:f9:ee:f6:ea:20:a7:01:2f:c0:
18:af:f9:51:fc:d3:b8:a0:6d:6b:cd:e9:ba:d4:60:
b3:02:3c:e5:c8:f4:8e:e4:81:2e:17:37:49:ea:28:
f3:c6:8d:34:82:8b:a2:f5:98:6b:36:d9:a0:c0:31:
a3:77:0e:40:60:0c:43:10:ab:60:5f:7b:53:b6:6a:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0A:DF:F7:A5:6E:D9:9C:41:66:0D:D0:0C:9C:24:BF:F7:8C:59:6F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef8efc10-0ade-4a78-a29d-d3809dd2cadf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
174.129.48.0/20
Signature Algorithm: sha256WithRSAEncryption
af:eb:50:0b:00:c6:fd:09:53:7a:71:35:71:5c:16:7a:7e:2e:
c2:58:32:7c:61:c1:8c:cb:b5:0c:89:f4:94:5b:f8:6b:05:a2:
7f:f1:16:89:8e:8b:89:13:37:5c:5e:ec:c3:e4:4b:1c:f6:18:
a8:eb:73:6a:77:c6:86:29:c7:d0:fa:f1:14:6f:7f:78:44:4b:
32:e1:79:62:91:d2:0e:dc:e8:60:46:c1:e7:8f:69:bb:b8:bd:
a4:fc:5c:20:cd:eb:e2:5a:fe:0d:f9:17:d3:a6:a9:69:dd:80:
c2:97:24:4d:62:20:b2:39:18:c4:a3:05:6d:1f:ef:af:02:69:
e7:a8:7c:12:31:27:7f:57:cc:29:dc:e8:e4:c2:09:d5:7d:a4:
08:b6:b9:7f:15:c4:ed:f3:1f:60:5a:38:a5:1f:c9:e0:1a:18:
74:2c:ca:0c:84:a3:3f:a5:cd:72:bd:a5:29:ab:01:51:4c:53:
90:62:e3:9e:53:42:32:e8:8a:26:5e:09:31:0d:9a:d5:e2:87:
54:51:be:c6:42:00:7a:c2:f6:a4:ca:f1:92:ea:03:7d:07:70:
d0:f2:7b:99:61:cb:06:84:0c:87:96:6d:4a:08:43:2f:7b:89:
5a:36:48:28:5d:18:4f:aa:1f:29:bc:29:ea:68:20:6b:0b:c5:
b0:71:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:25 2025 by rpki-client