Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1708c9ff-3127-454f-89db-7342094cdf97.roa
File: 1708c9ff-3127-454f-89db-7342094cdf97.roa (raw, json)
Hash identifier: iy5N3nO4BMPFiptceVoHElzby1vogdIrjqdNfCx9AaU=
Subject key identifier: 29:D9:57:51:14:5A:45:22:A5:3D:93:7E:52:68:0C:DB:F9:DF:8C:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24543E366E25286FE5C225C22ABDA9D98314FEDB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1708c9ff-3127-454f-89db-7342094cdf97.roa
Signing time: Fri 14 Mar 2025 00:52:25 +0000
ROA not before: Fri 14 Mar 2025 00:52:25 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:54:3e:36:6e:25:28:6f:e5:c2:25:c2:2a:bd:a9:d9:83:14:fe:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 14 00:52:25 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:1c:b3:c7:fe:50:10:31:a4:5f:70:19:81:
6f:34:15:fb:6f:d8:60:c9:6a:24:e3:2e:a0:76:56:
2a:80:5f:a7:64:d8:67:32:a2:7d:f4:56:71:37:81:
a4:a2:65:cf:f5:d8:81:59:24:ec:46:2a:32:fa:c3:
35:21:fb:5f:c7:f5:f4:91:be:f4:2e:d6:b6:02:26:
d4:c8:7a:45:21:dc:b8:6b:3d:8b:67:68:d8:68:b8:
5e:d4:80:38:b9:39:25:4e:7f:14:d4:e2:2b:39:e4:
18:31:b7:3f:34:d2:b8:20:ca:77:8e:0a:35:a1:6f:
91:85:8c:69:10:0a:22:a9:26:f7:da:e6:f8:67:45:
ae:02:9c:b4:29:7d:9f:86:a6:19:df:90:c8:31:8c:
4f:d1:e4:66:48:90:96:2d:2d:18:6e:83:cc:3c:bf:
3c:83:a2:8f:7e:d1:9e:5b:30:20:4d:7d:e7:2f:d3:
94:07:20:8f:ab:6e:a5:65:2e:03:55:47:56:f7:9c:
e3:3a:cd:0c:84:a2:53:86:cb:32:dc:26:59:17:c4:
8d:40:88:13:f3:8a:71:9c:2d:ef:68:1e:66:14:04:
ce:49:c4:66:fc:53:20:03:d9:89:4e:9e:5d:11:1c:
70:60:14:7b:bd:3d:30:34:f1:39:e9:67:12:fc:f3:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:57:51:14:5A:45:22:A5:3D:93:7E:52:68:0C:DB:F9:DF:8C:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1708c9ff-3127-454f-89db-7342094cdf97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:02:75:a4:b2:70:56:55:a9:1d:73:e5:91:b0:70:0e:04:af:
6f:cf:2e:51:ce:1e:72:30:80:c8:11:a4:58:f9:70:e0:b3:e3:
33:0d:c9:97:f3:6d:00:31:ee:c8:e5:c8:9f:71:d4:2a:2e:b6:
e2:a4:38:91:35:33:8e:f9:dd:c9:0b:c4:73:b6:b6:a3:b2:e3:
c6:0a:50:4c:0d:e1:ba:26:cc:7c:ce:27:59:07:31:f7:51:e3:
33:50:a8:7e:bd:5f:ae:88:19:98:2e:63:e1:e3:7f:fe:f2:e6:
53:5d:62:34:1a:13:3c:58:2d:86:f4:54:19:dc:16:d3:be:2b:
48:54:7f:5c:06:21:45:34:9e:8b:39:01:d5:04:65:55:77:20:
a5:0b:bc:d6:f8:d4:18:cd:18:f8:81:0f:af:72:c2:19:3e:90:
96:41:b4:e9:97:21:2b:43:8e:e3:93:6a:e4:5d:1f:79:2c:3c:
70:ab:c7:68:a1:0a:f9:68:71:65:0e:1d:3d:a9:4c:7c:f9:13:
46:0f:cf:94:fd:2c:41:3f:4d:b0:72:dc:99:98:f5:b8:51:12:
9e:80:30:01:52:8c:36:89:d3:ef:ac:36:26:35:bd:3f:20:1e:
00:18:96:13:be:31:33:8d:f0:8c:04:36:17:73:b2:7e:e9:b6:
af:60:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:02 2025 by rpki-client