Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eeda78f-8b49-4200-b55a-88078b060f3c.roa
File: 6eeda78f-8b49-4200-b55a-88078b060f3c.roa (raw, json)
Hash identifier: L7ziwRu1Xaj+b4W/pCT7dyq2+pD8wSKCXJHxsEihqfA=
Subject key identifier: D0:91:D1:EC:BE:45:26:C8:6E:E1:5B:69:DE:EC:E9:3A:C7:54:CF:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1194A0444391AF0CEFFB5696463B91EF19D19C1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eeda78f-8b49-4200-b55a-88078b060f3c.roa
Signing time: Sat 15 Mar 2025 00:00:52 +0000
ROA not before: Sat 15 Mar 2025 00:00:52 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:94:a0:44:43:91:af:0c:ef:fb:56:96:46:3b:91:ef:19:d1:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:00:52 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:c6:6f:c5:ed:90:4b:44:cb:7c:42:3a:dd:
d9:67:2e:39:6d:5d:08:4a:dc:ec:4e:55:1c:e7:05:
85:2f:e9:a8:b1:d1:8c:3a:42:61:fa:bd:ad:e1:5b:
0b:97:01:63:69:aa:b9:84:83:f4:92:85:7a:7f:31:
8b:37:d8:91:4c:77:e6:d8:a9:22:13:88:ea:e3:7b:
d6:f6:9f:e7:24:4c:b2:9c:5d:9e:9d:2d:99:1b:07:
7f:80:68:6a:b5:2b:58:f8:e5:18:82:fa:5d:63:72:
ad:b9:00:6b:ed:b7:67:59:51:59:81:1c:d1:81:ac:
d3:a9:ec:9e:8d:2e:d1:42:70:c8:75:ca:32:50:5f:
f9:54:e1:7d:cc:52:5a:22:1c:06:7f:3a:57:bc:8c:
06:b0:68:1d:ce:08:bf:7f:13:25:bd:ef:12:ab:e8:
8e:b3:d8:18:a0:79:c2:ea:a7:84:f0:79:1e:e5:3f:
2d:5c:ab:f5:4c:98:74:9e:f1:e6:3e:a4:34:5d:68:
e2:d9:13:df:27:49:e4:8c:ad:12:8e:52:cf:c4:2c:
98:71:e7:7f:b1:25:e7:ff:eb:c1:5a:50:29:34:f1:
63:9c:c7:b6:8f:f4:1b:39:3e:50:9c:09:13:d3:e1:
c0:0d:bc:69:b7:e4:aa:62:80:d6:2c:42:1b:67:38:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:D1:EC:BE:45:26:C8:6E:E1:5B:69:DE:EC:E9:3A:C7:54:CF:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eeda78f-8b49-4200-b55a-88078b060f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:ef:6f:10:6e:a6:bd:b2:fc:29:2a:93:8c:1b:2f:d6:9e:f2:
65:60:01:37:03:45:fe:3b:e2:f6:38:10:4a:20:0c:fe:43:59:
59:78:aa:4c:23:60:07:1f:93:74:42:3a:d2:46:e6:0f:92:9b:
cc:55:10:d3:30:a4:b6:bc:19:d8:ca:cf:87:1b:39:28:da:dd:
58:88:0d:00:97:f0:14:1f:dd:79:e8:f1:58:7a:c5:6d:5d:40:
86:3d:54:70:07:f1:c5:d4:7f:7c:e8:99:d9:62:ab:49:c9:4f:
f9:97:86:28:99:87:02:5b:9d:45:8c:0e:10:97:13:13:15:a0:
97:27:df:0d:1e:56:7d:59:2f:da:23:0f:ef:bd:69:91:41:6c:
ed:e5:02:38:c2:f7:19:d5:14:79:03:3e:1f:4e:cb:0b:40:d6:
64:47:e9:fb:bb:e1:b5:ed:ef:e1:28:59:52:f7:1f:46:05:ea:
ef:92:df:95:3b:8f:40:60:0e:e3:17:12:f6:0e:49:43:4f:8d:
4d:6f:cf:6c:b1:b1:c0:1f:c5:ca:af:e1:1b:00:3e:ab:34:28:
4a:95:38:98:17:3b:e0:d3:d3:c6:e2:4c:86:eb:f3:ef:e5:35:
a6:13:6d:48:a7:02:2c:c0:0c:71:3f:bb:76:a3:d1:68:2d:53:
85:e6:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:40 2025 by rpki-client