Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0a2129-9dc9-4f7b-b350-4e41028e5506.roa
File: 5e0a2129-9dc9-4f7b-b350-4e41028e5506.roa (raw, json)
Hash identifier: +vFwQ+4tyF+HqSqXp2DZyzgUJofhSwULxQMLliLkw5A=
Subject key identifier: 4E:66:D4:7D:1A:A6:A8:2A:46:8C:63:0C:0E:47:5C:6C:93:6C:1E:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 427E5376848CFFD9B587A36DF290278AED5EC193
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0a2129-9dc9-4f7b-b350-4e41028e5506.roa
Signing time: Fri 14 Mar 2025 00:41:18 +0000
ROA not before: Fri 14 Mar 2025 00:41:18 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7e:53:76:84:8c:ff:d9:b5:87:a3:6d:f2:90:27:8a:ed:5e:c1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 14 00:41:18 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bc:98:ef:77:59:a1:7c:79:32:a7:eb:9c:8f:
11:b7:54:f8:f4:38:2c:17:2e:8a:5c:fc:de:77:7b:
79:ba:55:a7:bc:50:65:29:64:fa:4e:3b:f9:39:a5:
15:c6:64:75:80:d4:2e:09:70:41:8f:58:8d:6a:e9:
09:2d:6a:9f:51:a1:33:89:b0:d0:0c:ae:14:20:9b:
ab:7f:e0:d0:58:fe:cc:36:e3:25:ca:20:b5:79:c7:
84:5a:fa:1e:71:83:f1:fa:d6:b7:b0:d7:3b:b7:98:
17:de:e5:1e:0e:bf:f5:d9:6d:0e:b6:b0:42:46:15:
75:46:91:46:ef:73:b8:82:02:6c:63:4e:ba:06:c1:
88:b7:78:48:12:12:bd:f0:b9:9c:44:78:93:db:02:
3d:69:2f:00:0b:ae:7f:ac:0f:4c:d0:35:b2:3e:ed:
be:27:8b:f0:af:f0:3b:08:b3:a0:e5:a3:52:28:60:
08:14:85:71:1a:45:47:2a:33:15:ef:cf:5c:5e:f9:
56:73:b0:b1:ca:3a:cc:a4:2d:95:3c:cc:67:46:3c:
20:b8:a4:0f:c2:98:e8:33:b3:6c:bb:4d:6f:a2:46:
76:bf:cf:cc:f8:c3:dc:d2:36:e7:88:d4:c4:07:db:
64:67:ab:c0:06:34:f5:3d:c5:41:7b:77:09:be:00:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:66:D4:7D:1A:A6:A8:2A:46:8C:63:0C:0E:47:5C:6C:93:6C:1E:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0a2129-9dc9-4f7b-b350-4e41028e5506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:fd:61:82:2a:d0:05:60:7c:81:2a:ee:bc:d4:2b:48:07:c8:
82:56:30:a5:45:85:19:ca:da:37:a7:92:e3:33:c9:51:d0:11:
a4:8e:db:54:f8:6f:70:d2:6a:e4:0f:ec:cd:4b:57:2a:a4:b8:
45:4a:be:e1:13:d0:18:57:e3:46:34:fd:f9:81:be:f8:e2:c2:
d8:b9:63:96:45:8f:9a:21:fb:d4:3e:4f:f7:8e:16:0e:f6:3a:
b1:1f:21:3b:9e:ca:e5:35:a3:a5:2b:e0:19:ed:a1:c3:e5:e6:
c9:6c:5e:a6:b9:f7:32:2b:b9:c9:39:72:b9:12:f3:41:d3:84:
cb:da:ae:65:34:86:9a:79:79:67:91:10:49:01:db:d6:7d:d8:
d3:99:64:a7:8d:2f:6a:e2:fc:d6:9e:8c:dc:94:ef:5b:25:26:
75:ad:0a:da:42:c6:83:d7:ab:8b:04:9f:26:7b:3a:b6:b9:e9:
df:2a:4f:3c:4b:63:9c:11:68:b0:a9:b1:52:fe:f3:e1:77:5c:
50:71:c2:9a:24:32:4d:50:35:21:be:44:95:bf:18:04:8c:dc:
45:58:9e:a7:e6:15:37:71:89:a1:1d:1a:4e:90:16:b4:77:9c:
04:2c:63:12:47:5c:b2:b3:6a:3c:37:1d:d9:2f:49:24:ce:e3:
1b:18:fe:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:33:17 2025 by rpki-client