Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa
File: 2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa (raw, json)
Hash identifier: EjcLupxZzE7K5MP6+lAiR4xty7cEeu8/tEarASC9Nxw=
Subject key identifier: CC:30:51:BC:20:4D:27:3F:30:4B:27:5A:CF:4B:1D:F4:C2:96:94:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 669C1A7E8F67FF626F1C0C13AA24C077D76B89D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa
Signing time: Fri 28 Mar 2025 00:01:07 +0000
ROA not before: Fri 28 Mar 2025 00:01:07 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 192.43.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:9c:1a:7e:8f:67:ff:62:6f:1c:0c:13:aa:24:c0:77:d7:6b:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:01:07 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:53:3f:24:de:7e:e4:90:35:cb:04:63:74:
de:97:bd:20:9a:d8:66:d7:a2:d1:1a:82:c0:8b:66:
a0:dd:22:80:e1:6b:70:d2:83:42:ec:4d:96:dc:a7:
39:05:40:a7:a4:14:0d:bf:bf:f5:26:db:9f:56:63:
d6:d1:63:76:78:71:d0:8f:d9:fa:84:3d:49:98:6f:
b4:fa:52:27:3f:c9:4c:5c:d0:3b:5e:f7:2a:bd:3b:
be:1a:e5:4c:5b:03:61:45:2f:d4:1d:30:41:16:ba:
97:cc:f1:47:74:6e:75:3d:ea:8a:25:51:a7:86:c7:
04:cf:24:54:dc:28:32:79:db:2b:de:ec:23:30:ca:
fc:d0:7e:61:9c:2c:46:b5:d8:f7:61:0f:3d:40:f7:
dd:3a:ec:78:19:14:3e:df:76:e3:a3:3b:21:c2:7a:
27:7b:bb:9c:86:ce:3e:35:0d:f0:6b:9a:e7:94:c9:
b6:3e:dd:2b:18:76:45:44:f4:2f:83:0d:ba:42:e4:
fb:24:c6:4d:37:88:ba:e9:7b:0f:1d:32:c8:6e:1d:
22:e5:3c:55:1b:af:46:23:fb:f2:da:e3:3f:91:26:
70:2b:5f:a9:a3:c2:50:e3:ed:a4:8e:ec:a8:4f:de:
23:44:5c:24:ad:e6:93:f6:8f:d3:f6:3e:bc:d2:0f:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:51:BC:20:4D:27:3F:30:4B:27:5A:CF:4B:1D:F4:C2:96:94:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.43.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b7:01:a0:5e:f0:66:2f:31:56:33:87:27:f7:17:d6:c7:bf:
d6:4e:0c:72:31:53:91:1b:92:cf:cd:46:b4:aa:74:06:0d:85:
50:38:08:29:5f:12:3b:46:f3:bf:0f:a5:6c:66:a2:8d:00:57:
ed:b4:02:4e:8c:50:cb:7d:e5:00:5f:6c:d1:ac:be:33:77:ba:
c6:19:a9:2f:f9:64:88:5f:fd:af:aa:5f:07:c4:8e:68:77:93:
c9:2e:ae:ff:9b:2e:ba:50:13:66:26:78:c0:7e:58:4a:9a:bb:
af:74:88:fe:6e:2c:28:fe:ae:7c:37:5a:9e:62:1a:0a:ef:0f:
0d:16:55:73:96:c6:19:b8:5f:44:db:fa:55:10:3d:1f:0b:fa:
ea:96:ea:4b:32:97:e9:53:a3:73:a5:84:f7:a8:bd:e5:a4:98:
9f:b0:c6:6a:88:27:21:76:25:56:74:26:cf:4a:98:47:2d:f5:
b3:e3:54:56:74:4c:35:4b:0c:8e:ad:4a:03:6a:a9:d0:2c:ce:
d0:7b:fe:06:1d:3e:cf:59:0d:ae:03:59:b2:27:ee:88:1e:4a:
b2:51:90:13:25:fa:14:96:9d:9d:b7:2f:5e:03:d9:fe:2a:e6:
43:cb:68:fa:70:1e:08:9f:18:56:3b:a5:7b:65:9a:23:ff:98:
47:17:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:46 2025 by rpki-client