Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c57d0d-e861-474b-b383-3d563f8d44e6.roa
File: 28c57d0d-e861-474b-b383-3d563f8d44e6.roa (raw, json)
Hash identifier: EyVh2ELbDjqrGtFddYO6kTnFPQQIhulxajUpchhQ4M8=
Subject key identifier: 08:95:3D:7A:A5:E3:1C:60:E9:3E:BF:CD:FD:F1:27:F8:F4:BE:60:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A82FF70D1FC6A4BDC5CA3BD3F9E8848EE98423B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c57d0d-e861-474b-b383-3d563f8d44e6.roa
Signing time: Fri 21 Mar 2025 00:41:35 +0000
ROA not before: Fri 21 Mar 2025 00:41:35 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:82:ff:70:d1:fc:6a:4b:dc:5c:a3:bd:3f:9e:88:48:ee:98:42:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:41:35 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:0a:d2:87:f9:4c:17:11:ea:50:cb:5d:05:
15:a9:74:cb:28:94:05:52:b5:6c:de:1e:67:77:1b:
f2:a6:7b:2d:6a:c2:b3:3a:d6:71:fd:b1:25:ba:24:
d1:0b:5d:44:10:46:19:80:42:f2:61:27:48:c0:30:
c7:f1:b8:cd:4d:a0:42:2f:43:fd:97:cc:c2:c3:d3:
4f:70:28:3b:ba:8d:ad:82:36:c0:cb:94:c0:47:c8:
19:ed:4d:70:25:57:c1:f1:ca:3b:2a:d9:56:99:4b:
39:76:3c:4b:13:7c:67:3c:f2:d5:51:73:90:91:31:
ad:c9:6c:c5:0c:db:3c:d0:19:6d:7e:62:61:57:84:
58:a0:2d:fc:2d:27:ac:80:1e:95:8d:66:45:93:57:
16:52:93:6a:87:45:64:e7:fc:fd:13:6c:8b:4a:14:
5f:17:8d:49:d1:f9:d4:38:5f:f6:dd:82:26:9d:6a:
6e:d2:e0:5c:2f:18:a3:86:df:00:a2:47:7c:fa:f5:
6f:3f:db:48:fd:7c:a0:8a:0f:10:02:8a:4e:7c:b1:
74:44:c6:26:0a:45:30:1a:48:7c:8b:a0:54:e4:7b:
79:d7:a5:24:b9:3b:00:cc:f7:fd:93:bb:6f:20:92:
2d:e2:77:23:fd:db:c2:a3:ef:2c:cb:5b:e7:57:ad:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:95:3D:7A:A5:E3:1C:60:E9:3E:BF:CD:FD:F1:27:F8:F4:BE:60:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c57d0d-e861-474b-b383-3d563f8d44e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:9d:7a:b4:f1:e0:05:78:fb:80:86:ba:ca:0c:c7:5f:16:e6:
9a:97:06:7f:1c:25:4c:d8:b8:d7:be:da:8b:1b:f0:45:6d:f1:
2f:99:ad:7b:72:5c:31:9e:8b:22:52:c1:a3:05:e1:6c:ca:8e:
3c:e7:a7:8f:a3:61:a5:4e:a5:00:a8:18:9a:3c:f7:2c:a6:61:
0d:01:64:a6:91:a3:59:2c:c5:88:5d:a7:ea:01:4d:d0:a4:b3:
a4:f5:1e:04:0a:52:4a:fc:b0:43:aa:58:91:36:b2:4c:2f:1c:
f0:84:53:90:c1:3d:8e:a7:bd:6b:0e:12:62:e1:23:c8:d2:a1:
a4:6b:e3:20:07:90:82:29:46:fa:f1:43:63:29:3b:5d:76:66:
cf:2f:4a:e5:16:50:b4:12:6d:59:e0:f6:77:62:e4:a5:78:b1:
7a:c0:73:60:b1:f7:54:bd:6f:72:d5:78:fa:56:e7:4b:b3:0c:
08:2b:b8:aa:a8:a7:41:ea:6b:5e:b0:47:c9:75:39:76:13:40:
fb:c1:8c:6f:63:7e:46:e3:e0:5c:60:4d:f1:e7:cc:a4:10:4f:
f1:9f:82:81:0b:2e:70:07:12:47:d4:2f:12:b3:6b:60:7b:60:
67:48:04:c8:5e:01:1f:7a:77:bb:8e:fa:ba:0e:53:c5:f9:56:
30:b3:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:46 2025 by rpki-client