Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0a295a-e9b4-4654-8dce-88b4f64f0808.roa
File: 6a0a295a-e9b4-4654-8dce-88b4f64f0808.roa (raw, json)
Hash identifier: 4zqkBN4jLfLZ3OB6jhZPElr5Z6D+jnprXv+DU1yhs+A=
Subject key identifier: 28:B0:B6:17:03:7B:38:B8:87:95:88:51:8D:C4:64:F1:9E:43:69:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 37F82EFDCDFEC78FA2E1D6DE3068EC8CA304EADC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0a295a-e9b4-4654-8dce-88b4f64f0808.roa
Signing time: Sat 15 Mar 2025 00:40:23 +0000
ROA not before: Sat 15 Mar 2025 00:40:23 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f8:2e:fd:cd:fe:c7:8f:a2:e1:d6:de:30:68:ec:8c:a3:04:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:40:23 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:53:6c:d3:5b:59:a3:53:be:2d:fb:3f:80:
61:dd:12:72:2d:a0:90:d0:a9:93:e5:54:82:0f:c1:
3a:6f:39:81:eb:20:27:ea:4f:30:5b:47:e1:dd:28:
35:60:35:59:e6:fd:b3:91:5a:e7:f4:9a:ea:92:b7:
c1:c0:99:a8:21:87:f1:1a:a3:df:97:62:39:83:1f:
0b:77:17:29:73:92:20:be:77:4a:38:89:57:56:a7:
60:66:a4:ba:5c:8d:c9:f9:ca:64:08:d1:8e:4d:ff:
bd:74:85:ef:3d:08:de:83:fe:2b:c2:e9:5d:f0:72:
cc:33:0b:34:a9:c7:0f:37:28:e0:a4:60:92:dd:30:
39:7a:74:f6:21:f0:14:51:09:11:59:77:bb:9b:17:
be:34:e2:fe:e3:6c:b0:5d:21:40:9c:f0:0a:e8:ee:
21:f1:b6:73:51:b0:6f:53:ec:16:91:0b:ca:11:33:
d3:82:ef:05:01:91:0c:e4:0f:9f:2b:35:7d:68:c9:
8c:ce:da:a7:fe:6f:71:06:da:d2:6c:02:79:fb:e0:
a5:75:e3:fe:79:19:b2:c4:e2:64:b7:e1:32:1a:91:
a7:cf:61:69:06:23:84:66:5b:08:a1:74:f1:bf:e7:
78:3f:ee:f8:7f:fb:8a:c1:d4:58:39:da:c1:e4:19:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:B6:17:03:7B:38:B8:87:95:88:51:8D:C4:64:F1:9E:43:69:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0a295a-e9b4-4654-8dce-88b4f64f0808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:b4:66:1d:18:7f:d9:32:7f:87:49:54:18:db:2a:58:d9:7d:
7e:45:40:ef:27:a1:ab:93:32:78:f8:f4:ab:72:ee:62:b6:66:
5a:06:00:ef:76:27:4d:52:8e:1c:90:07:91:d6:db:2f:e5:a2:
18:3c:4f:4b:d4:d0:e9:8c:18:98:c1:e1:7a:e0:64:e1:43:bd:
d6:28:5c:6e:87:16:99:1b:22:f6:2f:a4:9b:40:6c:b3:6e:18:
a7:98:6a:ed:76:a4:16:c0:af:a8:31:9c:7c:75:5a:93:a9:b2:
2a:f4:3e:19:78:42:36:e3:79:50:4a:c1:c8:36:3e:21:76:c0:
de:3f:f4:4c:ea:a2:05:f4:68:23:87:07:cb:c8:29:24:19:12:
e3:f4:1e:d0:77:1d:67:30:7d:d4:9a:e1:ea:2e:b5:06:59:c4:
07:5c:e0:5f:39:6e:b7:3b:45:28:5f:f3:8f:b5:93:5c:18:78:
50:8c:de:de:fa:d3:dd:18:6c:23:7f:20:9c:02:d1:30:6d:13:
93:b4:6c:3d:6b:e5:55:f5:6d:00:a2:b1:df:7a:60:ee:6d:51:
0c:63:f7:3b:29:1c:35:ad:ef:da:5d:05:7d:81:46:20:06:dd:
c6:50:9c:87:05:f0:ae:47:4b:f7:44:13:ad:a9:99:e7:16:01:
09:f6:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:49 2025 by rpki-client