Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa
File: 293c2826-82f4-42e2-82d9-04501c4668dd.roa (raw, json)
Hash identifier: FqSMpvkj4BpQVGRmrEWRrr7B7Tv3ouYD0PRc1cRA1lk=
Subject key identifier: E6:43:80:82:65:97:80:A9:E1:22:44:A2:D5:72:4A:0A:7E:91:88:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7FDB42EC111DF9A5AF4D550A9C3FABF27FEBC308
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa
Signing time: Wed 05 Mar 2025 00:40:12 +0000
ROA not before: Wed 05 Mar 2025 00:40:12 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:db:42:ec:11:1d:f9:a5:af:4d:55:0a:9c:3f:ab:f2:7f:eb:c3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 5 00:40:12 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:bc:07:3b:09:5c:8d:f2:57:cb:81:3b:8c:
51:ae:28:f7:a4:dc:b6:24:06:bf:58:29:02:b3:28:
ad:1a:88:5d:be:7d:82:bd:8f:eb:c1:5c:7a:46:f4:
17:0e:84:f5:15:77:50:39:59:a4:0c:78:49:c5:ca:
db:01:0e:3e:a2:f5:c7:41:9f:1a:9f:c3:17:09:9e:
02:94:0e:3d:18:23:e5:bf:02:55:ea:65:c2:39:54:
0a:dc:e3:d7:d3:99:12:78:f1:d4:f2:1c:57:64:a6:
e5:56:fd:9e:c5:23:d6:e3:99:00:db:9d:89:25:6d:
8a:a5:d8:83:a5:fb:0d:71:04:b7:20:d5:3c:61:4c:
af:9c:53:62:f1:67:b5:7a:22:da:42:88:19:c9:1c:
62:56:2a:e1:aa:a4:20:1d:ff:76:3e:8e:17:97:f7:
e5:ad:2a:c1:a1:0a:43:94:18:7b:d1:24:8e:3d:33:
6f:77:10:8c:b8:df:ac:10:bb:06:96:2a:09:38:88:
26:23:a5:82:c6:46:7a:d3:5a:3d:80:60:aa:3b:0f:
eb:ff:16:bb:77:79:5b:72:e1:6d:b4:33:fa:37:aa:
97:46:9a:59:cb:8b:c4:93:f0:6e:79:ee:c7:df:77:
fa:25:03:73:b2:e8:64:b6:3a:4c:02:da:82:c9:18:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:43:80:82:65:97:80:A9:E1:22:44:A2:D5:72:4A:0A:7E:91:88:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:c8:3d:7f:bd:59:3b:49:db:80:a8:41:4f:e1:70:17:94:14:
46:e5:71:e8:cc:96:04:e0:d2:c4:b8:11:07:6a:5b:86:92:a1:
9c:53:c4:18:2a:24:f4:fa:8c:7b:5c:a7:9b:1a:a8:a7:6d:13:
39:11:17:fd:50:0a:9d:61:5f:ee:28:b8:be:13:00:5a:de:e3:
0b:72:52:0c:38:95:8f:eb:b2:a2:5b:30:85:e3:29:50:bc:ea:
de:41:ca:db:8e:78:2f:64:a8:f7:66:11:2f:74:02:15:0b:f0:
ee:97:3b:6b:7d:10:30:7c:31:ed:ad:7e:5c:06:d2:68:73:08:
b1:3a:59:65:cd:ce:e0:f0:33:3d:15:bf:b4:a5:e6:98:04:f9:
38:4f:9b:d9:e8:68:0b:b2:1e:60:6e:d2:e6:40:1a:1d:d4:89:
dd:0c:ad:a9:c4:53:3b:32:f9:3e:87:c4:9e:8e:a9:4a:9b:5f:
de:54:2a:4c:06:43:b5:69:33:40:9a:73:2b:aa:fc:77:57:39:
3a:c0:29:47:b1:e2:08:b1:ed:c0:3d:0e:63:d9:03:11:9d:09:
ad:48:c0:7a:9d:ab:ef:70:8a:36:3a:45:ef:a0:66:10:a2:a8:
6a:d7:b2:41:d8:17:2d:02:25:24:44:1f:0c:03:4a:18:ec:bb:
1a:a4:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:28 2025 by rpki-client