Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4aaf30f-12de-4067-8c3b-1211ddf4a4c6.roa
File: f4aaf30f-12de-4067-8c3b-1211ddf4a4c6.roa (raw, json)
Hash identifier: /dqdZ0O2ZjVfXeCB3BPMUCZeobwT6eFZTkjOjuAqyEo=
Subject key identifier: 4C:15:24:50:0C:CD:29:09:B6:9B:60:18:AF:08:F6:31:AD:A7:8C:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4BA69EE52BD1F40CEF25A2D16603773B9347A8F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4aaf30f-12de-4067-8c3b-1211ddf4a4c6.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a6:9e:e5:2b:d1:f4:0c:ef:25:a2:d1:66:03:77:3b:93:47:a8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=8b86d6bd239eeeb86443d1ea0130d25d1a010dc331e13a7aa9d1ad9c56fb3216, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:61:dc:fb:cb:ee:dd:80:9c:07:38:8f:fd:
fb:a6:7e:22:fa:9f:6b:97:c4:cf:69:08:5d:c3:2e:
bc:9f:68:00:98:15:2b:18:1a:66:7b:7b:66:0d:3b:
27:53:6d:df:18:2c:71:d3:e3:8b:7c:e9:d0:db:bf:
4a:79:53:56:38:86:b0:7c:37:17:63:0e:60:6c:d2:
cb:f9:c8:b8:9c:4a:f6:01:ad:ac:10:b3:87:54:90:
0f:a3:38:ca:21:39:ee:39:72:e1:f1:32:38:d0:7a:
b2:53:4b:82:7a:63:93:77:3a:73:1f:e2:7f:50:a3:
7f:da:d4:dd:a4:cf:7b:01:24:87:72:65:dc:43:c2:
66:f3:05:92:6b:a9:43:8a:ab:2a:9a:ec:e5:a3:c6:
d7:9c:95:cc:f6:b5:19:0c:a1:c5:c1:90:88:ad:cd:
51:e7:4c:c2:ab:3e:e3:69:67:b6:7f:a5:46:3e:df:
6f:0f:46:26:1e:f6:6c:b3:c2:96:30:9f:8b:66:5c:
a2:90:67:fc:55:87:65:60:48:7d:e9:0c:f6:e8:97:
99:2e:ef:80:e2:4d:65:9b:96:f9:72:07:ff:ef:a9:
88:2b:db:2c:f5:d7:0d:bd:32:8d:7e:14:d8:c7:dd:
e8:e0:8a:56:15:1a:2e:c7:74:3c:05:02:53:97:69:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:24:50:0C:CD:29:09:B6:9B:60:18:AF:08:F6:31:AD:A7:8C:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4aaf30f-12de-4067-8c3b-1211ddf4a4c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.195.0/24
Signature Algorithm: sha256WithRSAEncryption
21:89:c0:a5:07:c4:fb:af:d1:f9:58:c0:a1:b2:e5:59:33:40:
16:53:82:45:bf:28:71:27:5e:06:90:e2:30:cb:55:7d:49:f0:
ba:f0:83:0d:59:29:0e:69:31:be:6a:04:86:33:70:72:4d:da:
42:2f:0d:84:eb:70:1a:2f:bf:71:46:04:0b:d4:86:bc:a9:7e:
1c:b2:2b:d1:97:fe:c3:5e:b0:e3:34:6a:25:98:c6:01:80:ef:
ab:6c:20:7b:f6:4c:4a:90:d6:38:55:44:f5:d6:2d:56:b3:85:
ed:bf:8d:35:29:27:ca:d3:6a:63:5d:0f:04:af:05:fb:ad:59:
2f:12:0d:93:5a:37:40:14:cf:d3:c0:69:f0:22:c4:bf:e7:13:
a8:fa:70:05:a1:9f:2f:58:7b:5b:d9:c1:55:cd:e7:e2:8e:84:
e6:5d:74:56:69:7d:56:6e:7c:99:13:53:c7:6d:81:cc:14:37:
99:dd:08:9c:a0:cc:4b:ec:72:59:a3:91:f8:55:c4:bb:ed:a2:
c1:18:07:f8:ba:b3:d1:78:ac:3f:b7:5a:44:d6:ee:d8:ea:45:
d9:de:7b:88:32:cd:a9:ec:fe:6e:ca:13:00:b7:15:72:80:09:
f1:7e:79:eb:b4:c5:00:54:f2:05:d5:5e:f4:8a:33:74:cb:ca:
d9:e1:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:40 2025 by rpki-client