Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e989a3c-6316-412a-a304-1a759390ec3b.roa
File: 5e989a3c-6316-412a-a304-1a759390ec3b.roa (raw, json)
Hash identifier: U6oEN3Jl0NNFq+3rkLdUJY0/3u2KYGQmtzrbMK3CgBc=
Subject key identifier: 49:69:4F:85:16:A9:B6:E1:D9:14:A9:72:1B:D6:31:E9:F4:53:0C:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38E2FDE0B60570A07EFD1A8637A3B38BF687C656
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e989a3c-6316-412a-a304-1a759390ec3b.roa
Signing time: Fri 28 Mar 2025 00:01:02 +0000
ROA not before: Fri 28 Mar 2025 00:01:02 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 170.26.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e2:fd:e0:b6:05:70:a0:7e:fd:1a:86:37:a3:b3:8b:f6:87:c6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:01:02 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:5f:9b:b0:c8:e0:bb:83:41:12:79:42:6c:
01:84:84:ff:5f:90:78:f0:88:f6:6b:06:95:25:95:
c2:cb:67:b9:6d:df:59:a0:a2:60:23:23:58:2a:3f:
a4:29:4c:55:c9:42:3c:4f:0d:e9:0e:2c:c2:b2:2f:
6d:39:9b:1d:d8:f5:2c:14:6c:2f:a0:96:d9:c1:ca:
ed:51:77:d0:4b:8c:38:44:48:43:52:9c:75:49:5c:
9d:2d:37:bf:e8:fe:19:80:fe:9d:28:7f:29:f2:eb:
ac:dc:a5:c4:2f:b6:37:56:54:2d:00:0a:c7:10:d9:
a0:35:6e:a7:99:bf:d4:a2:3d:b1:d1:2f:7f:fb:91:
29:51:ed:4e:7e:43:12:83:16:77:bf:eb:33:e5:54:
26:43:03:04:0f:13:58:8f:cb:31:20:58:d1:4f:57:
d3:7d:19:89:16:b9:c7:24:8a:64:e1:44:90:6e:df:
23:80:ba:19:01:cd:e3:04:b1:9e:7e:d4:33:c8:d4:
bb:a4:70:57:50:e3:cf:b4:81:85:4d:54:f3:72:15:
cd:74:d2:d3:5a:0d:22:b1:b7:82:45:2a:35:07:ba:
5c:6d:47:f5:ee:fd:d2:30:ae:b5:05:0b:f9:02:05:
dc:dc:8f:10:a3:9d:d9:c5:fb:f4:74:d5:4c:3c:a9:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:69:4F:85:16:A9:B6:E1:D9:14:A9:72:1B:D6:31:E9:F4:53:0C:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e989a3c-6316-412a-a304-1a759390ec3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.26.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:80:1a:de:2f:7b:d0:0a:2e:cc:56:1b:5a:a3:6b:7e:f4:4b:
4d:c8:14:96:82:f3:84:42:39:a7:c1:f4:74:d9:cf:0f:2d:ee:
d4:28:31:c9:95:fc:2e:f9:26:05:4b:cc:3c:0a:be:26:50:18:
3b:1d:29:71:ae:35:ab:af:c4:0d:0f:1d:d4:57:70:af:2c:24:
31:22:f4:11:e9:06:2a:1d:fc:2a:8f:72:9f:0b:ae:e4:e2:81:
1c:9a:51:9e:f9:d2:a2:c7:08:50:82:ce:50:aa:9e:43:a2:6f:
dc:80:d5:a7:b9:9f:5c:86:af:e4:7a:d4:db:48:6c:0d:56:ef:
10:1a:fa:42:0a:3d:70:d6:20:a7:5e:87:31:40:48:00:dc:3b:
30:5d:c0:d1:1a:d7:d4:8d:07:01:38:22:7e:05:cf:b4:47:44:
c1:39:f6:5d:ce:db:39:3e:64:dd:11:b9:e6:72:1b:7b:63:bd:
e9:58:0f:69:12:ee:7a:45:0b:df:6d:77:05:7b:9e:cf:ab:44:
f0:2a:f4:69:05:f1:6a:70:a6:9c:9f:c6:e7:99:e8:08:4a:12:
13:3a:3d:58:02:da:d8:1e:d1:b3:e7:56:d2:7d:5a:48:1f:6f:
42:8b:d3:41:f2:89:4c:ce:c4:27:b9:d4:b6:64:72:85:34:46:
56:5a:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:11:47 2025 by rpki-client