Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227bf4de-3fe9-4706-9a15-6810d1cb02f8.roa
File: 227bf4de-3fe9-4706-9a15-6810d1cb02f8.roa (raw, json)
Hash identifier: XcdWxzPQl9rKLS3UBbEd7zFpgHJnXeW4kiXzegXArDk=
Subject key identifier: D4:99:50:2F:8D:C7:88:37:E4:42:DB:FD:33:2A:93:81:E9:BE:5A:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12BC36C8F76AAA66711FA20F8E7501CB288A06C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227bf4de-3fe9-4706-9a15-6810d1cb02f8.roa
Signing time: Sat 29 Mar 2025 00:40:21 +0000
ROA not before: Sat 29 Mar 2025 00:40:21 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 161.193.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bc:36:c8:f7:6a:aa:66:71:1f:a2:0f:8e:75:01:cb:28:8a:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:40:21 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:6e:d8:2b:c0:08:91:70:94:a5:0f:33:46:
85:86:60:72:83:8f:88:9a:99:67:65:0e:1a:09:14:
21:f8:7c:2e:60:44:d9:ad:50:ff:44:4e:ea:80:dc:
e7:27:5b:5d:74:bf:eb:6a:b3:a4:c9:f1:04:30:a7:
c4:b6:ff:0c:42:d9:03:32:f2:af:40:21:56:02:86:
f5:03:ca:9d:ef:9a:3a:83:42:48:d1:16:65:d2:74:
73:74:1b:db:61:8c:d0:54:99:96:aa:be:33:81:63:
5f:94:ab:2b:85:6a:b2:11:63:1e:ee:1e:55:8a:de:
05:06:98:ab:39:70:e6:7d:a4:91:35:ae:62:59:88:
e7:cd:0a:a0:a2:3d:5c:09:5c:35:90:60:af:99:b1:
25:b1:54:2b:40:63:3f:15:af:84:39:0b:2e:57:86:
9e:10:d4:bf:47:e3:69:90:cd:f6:bb:63:be:77:e6:
d9:ed:84:7d:cc:49:20:5b:cc:8f:0a:c3:f6:e1:60:
62:e0:36:ca:3d:fb:02:40:4c:e2:1f:53:93:26:d4:
c0:94:70:20:1f:db:19:6e:fa:d7:fe:b3:15:27:79:
5b:84:57:9f:04:3b:08:85:07:5d:02:bd:b6:4e:ab:
50:08:17:cb:b9:7a:c4:e8:62:6f:28:9e:45:a6:8b:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:50:2F:8D:C7:88:37:E4:42:DB:FD:33:2A:93:81:E9:BE:5A:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227bf4de-3fe9-4706-9a15-6810d1cb02f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.193.128.0/18
Signature Algorithm: sha256WithRSAEncryption
76:a5:01:9f:85:d1:91:1c:f2:f0:53:35:c0:64:b2:68:bd:86:
02:43:60:22:d1:bc:64:95:fc:ce:4b:0f:54:dc:34:fb:19:0b:
ab:e1:29:06:5b:35:de:90:92:93:b1:30:30:07:cb:6c:05:15:
4b:6b:86:52:4d:05:e3:b0:1f:f2:b0:6e:01:2e:a3:7d:82:80:
f1:8c:98:98:56:1b:18:96:f6:7f:a6:75:ac:b9:34:d3:4b:39:
3f:29:e7:6b:5f:14:88:83:71:dc:ac:7b:ef:7f:48:44:a4:dd:
e3:b4:e1:7d:38:6f:6c:eb:01:4a:1f:9c:40:df:44:d1:d7:5e:
0c:f8:0a:5c:57:65:f3:98:32:e3:f0:f5:db:6d:24:12:f2:d6:
9e:b1:23:ee:53:3b:00:ed:c7:d8:6d:ca:76:2b:30:31:21:8a:
b7:27:e1:22:ff:53:0b:64:06:7d:71:f8:af:f9:d1:f7:69:75:
46:9f:64:6a:40:90:03:13:92:88:65:40:b9:3c:74:d4:a6:32:
e7:cd:c0:39:e9:28:69:74:f3:99:90:38:46:f0:f7:7a:85:a4:
57:92:dc:d5:a0:56:de:26:29:7d:e5:b9:1b:1b:22:72:ad:41:
7d:29:34:38:5e:73:42:57:d0:9c:49:64:0d:60:52:0d:eb:7f:
f1:a4:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:56 2025 by rpki-client