Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
File: 259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa (raw, json)
Hash identifier: jY4QTcMA8SDShzmXHLBdoxx1u50oZnTvDfzFrBUPtS0=
Subject key identifier: 6D:3B:84:55:33:56:FC:40:1F:AF:AD:AA:ED:1B:5D:E1:58:1B:25:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 569C836D0C4378ADA33AC51EFE57B5D4018FA00B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
Signing time: Tue 04 Mar 2025 18:00:20 +0000
ROA not before: Tue 04 Mar 2025 18:00:20 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.88.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:9c:83:6d:0c:43:78:ad:a3:3a:c5:1e:fe:57:b5:d4:01:8f:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 18:00:20 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:04:b3:5a:37:84:26:71:4d:8b:ca:ed:10:
71:04:ec:6f:6e:7d:0a:c8:3a:e5:26:57:24:39:bb:
d5:ed:77:ac:38:b8:1f:35:a9:95:78:fa:28:aa:e2:
7b:9f:7e:d0:77:30:9f:dd:56:21:a1:7c:97:2b:bf:
93:48:f6:ff:40:02:82:d8:a2:a0:de:0e:10:da:79:
d4:7a:b3:d3:ad:09:67:32:ab:db:a6:9c:06:c7:94:
3f:fd:6a:cb:b8:2f:ad:07:98:ee:2c:72:c4:94:09:
98:63:14:52:9b:df:1b:d9:4d:3e:82:6a:53:11:a6:
63:b8:07:d1:75:67:36:83:de:6b:b1:b0:34:4d:a7:
a3:b6:85:74:50:32:8f:93:34:64:62:03:3e:36:4c:
33:5a:2a:22:b7:cb:81:37:ce:1f:6c:9b:50:54:9d:
27:a4:9b:32:2e:e9:1a:2f:dd:85:4d:b8:1e:24:f6:
4a:4c:22:61:65:ed:da:92:eb:6c:e3:44:1a:0f:f3:
78:e9:14:db:7e:cc:b8:77:4f:84:c6:c0:15:f7:60:
7d:18:4c:06:35:64:1d:0b:76:f7:f4:0a:7a:c0:13:
1e:fe:d2:82:3d:be:b8:f7:de:d2:b4:b2:b3:86:37:
49:ed:cf:41:fb:4a:de:4d:1c:26:ce:8c:02:4a:63:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3B:84:55:33:56:FC:40:1F:AF:AD:AA:ED:1B:5D:E1:58:1B:25:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
64:26:74:1f:be:20:cf:82:96:8f:a7:7d:26:98:83:fc:fc:f9:
06:8a:c9:0d:85:13:55:b6:f2:c2:64:c4:0b:ca:93:f3:84:16:
52:6b:9c:c5:75:e3:24:5d:36:dc:c9:ec:76:2f:07:31:e1:81:
0c:1f:06:2b:2e:d9:6e:f1:b9:62:4a:07:19:60:1f:80:2e:42:
47:a9:d5:ce:16:d8:9d:62:f7:b4:41:99:31:54:e8:18:29:87:
76:cb:16:3e:f2:05:3b:0e:ee:17:98:0c:c8:fe:9e:e9:a3:c8:
47:8c:9a:29:36:36:06:b5:63:9f:e8:8a:1d:07:22:17:8c:86:
44:bc:0a:ea:cc:02:4c:c7:c8:63:11:e1:f3:fa:ac:ec:d0:ab:
94:62:45:03:1a:ec:01:5e:ee:ba:7b:03:33:e1:8b:08:6a:ff:
65:b8:d6:f0:ee:c2:52:3d:e4:08:fb:4e:db:9c:b7:e7:4e:e1:
7a:f0:44:71:9e:45:80:4b:d7:70:72:b8:a7:28:ff:34:b3:42:
5a:f4:aa:43:35:43:e4:1d:b2:96:3c:ce:64:23:44:4b:37:55:
4c:61:b1:6f:d9:b4:35:21:8b:3d:3b:ea:48:e4:9e:1a:9f:dd:
02:15:12:1b:38:fe:91:4b:01:00:3a:43:c5:c6:48:eb:92:50:
f6:87:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:30 2025 by rpki-client