Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10fac08e-1966-4fa7-b3e3-3f554fc3df25.roa
File: 10fac08e-1966-4fa7-b3e3-3f554fc3df25.roa (raw, json)
Hash identifier: PHn6Quip7w7QIZgqa0hxT5YsGW8BZo/zvsKbv0gNfq4=
Subject key identifier: F4:F5:EB:97:E0:0E:10:2E:D6:EE:5D:9C:91:29:BE:F6:BF:50:FC:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26D76D73E22973E7D1FFB4ECF461881CADD4C317
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10fac08e-1966-4fa7-b3e3-3f554fc3df25.roa
Signing time: Fri 21 Mar 2025 00:22:10 +0000
ROA not before: Fri 21 Mar 2025 00:22:10 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d7:6d:73:e2:29:73:e7:d1:ff:b4:ec:f4:61:88:1c:ad:d4:c3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:22:10 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:a0:15:d9:22:ab:39:21:6a:2c:68:c9:43:
1d:e2:58:a2:f2:57:f7:2b:38:37:69:e0:04:5a:98:
7d:18:de:0e:b1:9a:75:11:7e:3f:3b:a0:ac:48:c2:
3f:fe:58:7e:a2:0d:58:be:98:ca:39:e9:be:2d:92:
c7:13:01:a4:ca:6b:54:48:20:fc:43:e8:25:24:35:
4e:14:08:44:e5:27:44:7b:5e:9c:ce:96:57:0c:91:
2f:c6:b4:dd:33:cb:ef:aa:7d:b9:b8:6f:53:3f:44:
8a:5c:30:f3:d5:cb:0b:38:da:a0:5a:4f:8d:f2:4d:
86:38:d2:40:61:1a:de:a1:a6:2f:15:09:8c:0a:8c:
2b:ac:f8:0d:06:13:ec:13:33:ca:2b:39:03:45:fd:
20:db:1f:28:ee:b5:55:22:57:17:ef:ef:34:f3:96:
24:bb:9d:20:67:9f:39:32:7c:12:32:6f:2e:fc:45:
14:e0:46:97:18:54:6a:ef:fe:fb:16:b9:a1:c2:24:
bc:d0:5c:1d:16:d0:75:c8:df:70:9b:70:4a:34:6c:
7b:29:d1:27:d7:e3:f4:77:fa:ac:eb:05:15:b7:79:
1b:ce:48:be:0d:ee:6d:59:db:69:2c:99:19:df:92:
ec:7d:9d:ea:c8:2f:d9:c1:b4:14:d1:ae:3d:2b:3c:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:EB:97:E0:0E:10:2E:D6:EE:5D:9C:91:29:BE:F6:BF:50:FC:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10fac08e-1966-4fa7-b3e3-3f554fc3df25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.72.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:93:56:d8:68:1a:34:22:0d:00:8c:1f:d7:00:49:ed:09:b1:
58:44:b1:bb:5a:ad:15:37:9c:bb:12:21:90:b9:d8:6c:29:60:
c8:15:0b:9c:28:9c:8e:57:58:e5:27:7a:10:be:4d:c0:fb:8f:
cb:84:92:fc:db:56:9d:0f:03:f8:6e:ba:e4:64:5e:34:38:cb:
65:07:21:0a:1d:f9:f9:91:d6:7b:57:ed:4a:77:21:89:76:bf:
0b:a4:85:22:36:70:85:1c:f3:6b:f0:d2:a0:1f:87:c4:8e:88:
dd:57:98:c0:5c:91:25:7b:14:0b:ca:dc:39:40:1c:95:46:7b:
49:72:3a:f6:8a:85:e4:be:e3:b5:f9:8c:eb:43:5b:e0:ae:16:
da:78:c5:04:25:3b:00:75:64:23:b0:ee:16:d4:2a:60:54:93:
ce:7b:74:4c:2b:3c:1f:19:b1:c0:33:17:28:64:7f:89:ce:e4:
58:d0:cf:b3:33:56:5e:51:39:7b:e3:b7:4e:4c:69:32:75:df:
64:00:0c:53:b8:3c:3a:81:c1:9a:a2:48:66:3a:0e:d2:64:11:
b5:75:9a:73:3a:3a:cb:08:7f:a7:f2:82:4f:f2:9f:48:86:9e:
6e:94:ca:8d:28:32:0e:2f:86:33:6f:c3:2f:f8:41:1c:a8:f5:
6a:b1:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:03 2025 by rpki-client