Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa
File: 716035e6-da4b-468b-ab9f-cd3cf32befda.roa (raw, json)
Hash identifier: eegx+NQp5LdJmNAbyzd6rtZnElaSzuSdr+juBK9cPp8=
Subject key identifier: 18:B0:D6:45:96:4F:EC:E3:47:72:4E:2C:46:A3:7E:3B:11:48:4A:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3020383A07C3D9A2D63798038B52CBE12F9DF765
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa
Signing time: Sat 15 Mar 2025 00:51:05 +0000
ROA not before: Sat 15 Mar 2025 00:51:05 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:20:38:3a:07:c3:d9:a2:d6:37:98:03:8b:52:cb:e1:2f:9d:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:51:05 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:14:f5:b1:e9:d8:ec:a1:b8:c5:7d:a8:dc:
f5:40:88:75:89:84:ca:18:83:c4:82:ef:82:f4:e3:
1b:26:3e:5d:e8:6a:20:5d:b1:9d:2a:fb:91:23:dc:
7c:ee:cf:46:a3:56:15:1b:11:5a:8f:b1:61:af:ef:
fe:1f:c1:3b:1f:ad:5e:fc:05:bd:60:ac:cd:0a:6c:
59:13:70:bf:44:6a:18:fe:87:38:b9:a7:27:10:77:
90:6f:e4:10:3a:a2:e7:40:44:48:3a:fe:1c:f9:78:
44:d8:29:bf:5b:0d:14:8c:a2:6b:3e:09:3f:99:fd:
36:66:e5:a0:4b:39:7d:43:d9:fd:41:bc:d6:9f:12:
c9:f6:77:a6:a2:c1:ba:91:0b:e3:a6:13:df:5e:de:
f3:42:6e:e9:0d:93:02:ca:6d:3a:eb:c6:3b:bb:f0:
99:fb:6e:f3:1a:31:be:44:ea:e3:e2:9d:30:14:cf:
89:96:1e:54:8b:d1:6f:38:65:68:8d:6c:45:fa:da:
a7:b5:87:5c:62:32:91:78:62:52:aa:b1:96:af:af:
40:b2:3f:12:8b:a2:89:bc:29:ec:de:bb:7d:83:56:
7b:35:73:65:f6:c7:7e:2a:e4:74:84:3b:15:93:e3:
e7:7b:fe:3e:22:c1:0d:49:a8:81:e4:92:2e:86:40:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:D6:45:96:4F:EC:E3:47:72:4E:2C:46:A3:7E:3B:11:48:4A:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.136.0/24
Signature Algorithm: sha256WithRSAEncryption
21:86:17:73:cc:d5:6c:49:00:de:92:6c:d3:92:92:46:9c:07:
87:d4:43:71:be:98:c3:c7:f0:6e:9d:08:fa:e6:2c:23:24:50:
0e:47:a0:7b:f4:1d:4f:3e:91:b0:e3:5c:5d:45:14:5a:c5:6b:
f8:88:31:39:5d:73:a2:d5:66:c4:28:24:a8:3e:88:c0:67:6f:
11:fb:af:20:31:d8:31:a9:38:c2:99:d1:d2:01:96:05:d4:48:
fd:a2:9e:e3:af:28:e8:9a:a5:db:7f:ad:1c:2e:83:7c:04:7f:
66:68:3e:0a:ef:f0:f9:bf:98:26:74:37:27:b1:50:e1:fb:5f:
01:85:f3:cc:b3:9a:1a:6b:60:05:11:17:85:cc:16:de:5a:ba:
26:87:08:0a:d9:52:ac:9b:6d:b7:67:a2:c3:8b:6a:39:86:0f:
04:d1:a9:6f:fa:6b:05:aa:28:53:da:43:3c:b1:14:27:0f:4c:
15:aa:95:db:d9:b4:75:fd:c2:41:1a:2a:4a:06:19:26:8e:8a:
fd:12:58:ac:1b:a5:42:18:31:7b:b8:5f:00:a0:c5:b2:7a:5d:
0d:68:3e:61:b4:01:af:b2:93:74:10:3c:cb:df:5d:03:c0:b3:
28:9a:71:07:3b:3f:89:ff:00:a9:6b:71:6c:6e:78:15:b9:50:
7b:33:c8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:41 2025 by rpki-client