Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa
File: 001d631f-3920-4b24-a9e8-b7d40e1c5971.roa (raw, json)
Hash identifier: m0O4Z9sc/31HWB7p2hV69A3kAkmPjrL1YtBjt9LC5l8=
Subject key identifier: F5:95:80:99:82:DE:C0:37:3D:D8:FD:DD:17:04:A5:49:AF:F9:A0:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6344AC0D07103C457135F4000AA3EFC822DF7569
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa
Signing time: Sat 15 Mar 2025 00:31:50 +0000
ROA not before: Sat 15 Mar 2025 00:31:50 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:44:ac:0d:07:10:3c:45:71:35:f4:00:0a:a3:ef:c8:22:df:75:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:31:50 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:ac:80:cf:3f:82:f8:df:dc:9e:3a:ed:eb:
3c:1d:72:4a:08:10:3a:ab:5c:92:be:bb:e0:6e:d5:
9a:35:48:12:7d:66:ed:71:09:36:69:43:ba:28:26:
69:5d:54:3a:c9:90:fe:a6:9e:30:bc:c8:62:fa:3a:
db:11:af:05:0a:a7:1b:10:a0:f6:6b:12:51:d4:1f:
38:4f:77:01:43:41:8a:64:17:ec:5d:2a:f6:b9:2e:
60:4e:e4:54:8f:dd:cb:2e:b9:17:69:9e:06:6d:92:
1d:fd:96:40:1e:2a:9d:47:bb:a0:3b:89:14:b9:27:
ed:f6:80:63:af:4f:5a:d4:8d:9d:27:2b:5c:28:8c:
1b:e4:29:0f:26:8c:61:a3:a0:4f:b6:4e:ea:83:79:
04:29:a5:a4:ef:f1:44:44:6e:46:3c:de:56:e6:ef:
46:2f:0d:57:87:99:89:7b:fb:db:0f:f3:26:34:57:
b3:3c:3a:1f:53:7a:70:4d:ad:65:21:b2:2b:e8:d5:
cf:57:6d:bc:22:65:c8:bf:87:61:29:4b:1d:93:9d:
87:b0:24:8b:a9:30:27:d2:ba:66:2d:42:44:58:71:
5b:0e:42:3d:a3:61:cb:33:70:0d:78:7e:eb:6a:37:
ba:1b:ed:77:9f:db:97:c8:bc:97:57:41:89:fa:09:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:80:99:82:DE:C0:37:3D:D8:FD:DD:17:04:A5:49:AF:F9:A0:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.109.0/24
Signature Algorithm: sha256WithRSAEncryption
94:84:66:d4:f7:4b:0e:22:27:01:aa:7b:2f:3d:1e:60:89:4f:
06:88:9e:82:ca:7a:47:79:07:c7:0f:ac:00:38:85:f1:3c:74:
e7:a9:24:78:95:e2:96:4e:72:cb:79:a9:9f:ea:b1:f2:90:9c:
fb:3b:62:8b:f8:71:d1:d5:e2:8f:14:51:d7:16:26:3d:ff:e0:
a5:31:ca:ff:2e:07:39:3f:21:32:ff:96:76:5e:3b:46:85:e1:
e0:46:a1:b4:97:09:ad:4b:c0:c9:ae:58:12:45:6e:a6:fd:49:
67:86:f1:ad:38:e9:ed:35:31:57:1b:75:f3:57:a6:5d:07:eb:
88:e0:bc:e9:66:e2:ed:57:dd:a5:dc:8b:ce:c2:8b:04:5e:0a:
12:ee:5b:ff:bc:ff:c3:53:28:9f:df:3e:57:a5:7f:05:5c:19:
af:58:cb:8f:32:64:d9:25:f7:27:52:f3:fb:da:bd:99:c2:54:
15:04:89:2e:71:d9:b7:e1:02:2b:1c:d0:55:60:e3:9a:08:ae:
0f:55:40:1d:dd:4d:ad:47:a3:fd:a5:94:f6:8c:33:29:9d:de:
76:b2:7b:4b:3c:80:73:85:13:a3:96:27:f6:18:39:6c:1c:13:
c4:07:3a:82:27:d8:92:31:a5:06:35:47:2d:49:30:d5:e0:97:
0c:72:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:15:09 2025 by rpki-client