Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f35aa982-4508-48f5-9aee-d528e96cd9dc.roa
File: f35aa982-4508-48f5-9aee-d528e96cd9dc.roa (raw, json)
Hash identifier: 9MSNQJhtg8prR1NLJANAyKtQYXA/psrbkdGc0cN9mLw=
Subject key identifier: A9:FC:D4:A7:42:3A:9D:32:32:20:A7:8B:3B:35:09:33:03:54:E3:00
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E329E37A710428FDF9DBA4404F2FBCBB367E377
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f35aa982-4508-48f5-9aee-d528e96cd9dc.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.26.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:32:9e:37:a7:10:42:8f:df:9d:ba:44:04:f2:fb:cb:b3:67:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=a3bea0a9d3eba2321c9cb552653e64abc2e483f3c8b6e0d7aec7f50ec3391ab8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:68:61:51:4d:b7:45:3f:61:0f:61:f6:01:
21:47:64:09:47:a1:06:d9:13:3d:83:90:6a:fe:24:
44:6b:5f:d3:0c:d8:f9:da:49:0a:4c:c5:ef:5f:b1:
87:20:e0:bd:ff:fd:58:84:d3:1c:28:ed:36:98:d2:
b7:8b:3b:4c:12:a7:24:09:5e:49:44:71:c9:33:3c:
9d:66:7a:a0:9e:c4:23:97:84:72:e2:83:49:85:0b:
97:f8:63:13:88:d1:ad:78:30:43:4d:93:f7:3c:79:
d2:00:f4:4a:40:47:42:c5:27:f7:11:95:00:58:24:
3d:24:35:35:a1:b6:45:14:85:02:f8:45:86:43:01:
8c:ca:75:67:fc:f3:84:1f:2a:7c:bd:a4:51:7b:dc:
6b:6c:bb:06:a4:01:f8:6a:a8:78:a3:ed:2f:68:9e:
9e:e6:91:70:ac:d7:72:fe:58:73:70:14:3f:ab:15:
f1:f2:a1:9b:fa:20:5c:05:e4:bc:43:ce:b0:9a:ff:
7e:7b:9a:65:8a:8f:52:07:cc:9f:b6:9a:b8:d0:d7:
ef:18:e9:30:cc:df:ad:dd:b8:cf:53:a3:54:c2:f0:
09:92:83:65:f7:44:90:70:33:8f:da:cb:2d:ed:f5:
be:87:00:78:d9:62:b5:12:42:3f:d7:4c:02:b5:ca:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:D4:A7:42:3A:9D:32:32:20:A7:8B:3B:35:09:33:03:54:E3:00
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f35aa982-4508-48f5-9aee-d528e96cd9dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.26.0.0/18
Signature Algorithm: sha256WithRSAEncryption
21:fe:37:a2:b1:70:24:6c:77:b4:b6:a8:f7:14:bd:25:b9:7e:
46:94:64:f1:cd:36:2a:95:6c:f6:af:ae:ab:80:1a:d6:d3:12:
b8:81:bf:c8:ec:25:2b:35:15:a1:55:4c:ef:f4:f5:a7:4b:75:
8a:54:6b:21:cb:e8:69:64:8c:35:a0:b2:77:3f:c8:cf:4c:58:
41:4e:bf:c9:0c:e9:a0:24:02:11:d7:62:e6:6f:ac:29:b9:c8:
10:bc:6e:ac:33:8d:d5:35:e2:68:ae:75:7f:9e:52:4d:20:6f:
be:b6:cb:80:68:4a:f3:4f:de:37:1c:a1:07:62:57:80:0a:fd:
78:65:9d:d6:e5:d1:d4:63:14:55:b6:94:85:c9:75:19:7d:ae:
87:55:81:2e:f2:b8:31:cd:75:74:88:e6:ae:0a:77:0b:57:6a:
43:a2:55:d1:b0:76:ae:65:4a:15:44:6f:7d:fd:57:81:a5:21:
c6:0e:ae:6d:1d:33:9d:14:16:cd:39:e3:90:53:8e:56:19:67:
8c:c1:c3:aa:7c:df:69:5e:b2:f5:02:91:2a:32:84:f9:98:18:
0a:09:18:2c:1f:ba:f3:2a:73:7f:db:f0:1b:af:dd:25:7a:d9:
b1:8a:dd:0c:d7:37:4e:0f:07:0e:ca:bd:0a:1d:de:fa:66:a0:
f8:f7:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:27 2025 by rpki-client