Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa
File: 748f2f33-3075-416b-84fb-09804fc32e95.roa (raw, json)
Hash identifier: F4FnEUNX0L1cH+pJi/K8M438J7m9rCEyBH+tP0EN+zg=
Subject key identifier: C5:38:AD:E7:89:0D:4B:CC:6A:D0:FF:A5:62:1E:F4:97:F2:DF:64:09
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2818CFD68A96405C6BA16CC7C36F133291F9A941
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa
Signing time: Sat 29 Mar 2025 00:21:52 +0000
ROA not before: Sat 29 Mar 2025 00:21:52 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 107.22.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:18:cf:d6:8a:96:40:5c:6b:a1:6c:c7:c3:6f:13:32:91:f9:a9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:21:52 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:e0:e4:8d:20:52:cc:35:ce:6a:72:b2:8d:
b7:ec:05:6d:fd:c0:14:d9:db:2e:44:7e:3a:33:ed:
6a:11:e4:ea:5d:e2:b4:b9:c2:21:a3:5b:6b:dd:7f:
37:87:37:28:a8:65:40:a4:fa:22:89:90:88:f7:03:
13:cb:aa:39:e5:cc:d1:c2:da:21:e0:f4:c0:d7:57:
93:0d:70:0e:76:ce:66:0a:9b:d9:04:a7:95:57:0a:
fa:58:18:af:05:a6:71:4a:5d:f1:1a:ae:f2:2c:4c:
a7:c0:79:ea:46:6e:fe:9b:95:85:2d:70:eb:d0:d6:
12:86:c8:a9:fb:9e:bf:53:26:ac:48:c2:4e:3f:3c:
1b:f0:02:4e:04:bc:5d:97:fa:6d:f1:d9:18:38:d2:
8a:fb:99:32:df:a7:e9:1b:85:55:f8:85:14:42:8d:
60:fa:25:63:54:ed:e1:3b:46:ee:9d:dd:1e:e6:95:
5b:ea:71:30:2a:5a:98:69:f8:01:f5:70:56:7b:13:
43:1f:9a:64:94:bc:bf:37:ff:5f:da:57:09:88:71:
1a:49:69:cd:94:74:4f:5c:5b:5b:cd:7a:ac:b6:97:
18:7e:2a:4b:6d:89:04:b9:15:37:ff:71:c1:bd:f0:
72:d0:66:f4:5a:c3:8d:bf:c1:90:8d:13:fd:65:a5:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:38:AD:E7:89:0D:4B:CC:6A:D0:FF:A5:62:1E:F4:97:F2:DF:64:09
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.22.192.0/18
Signature Algorithm: sha256WithRSAEncryption
cd:ec:3d:e7:7f:f8:bb:2a:5a:4a:82:02:d8:59:7e:e0:34:e2:
0e:81:77:2b:d2:27:56:d5:05:4f:68:5d:36:a4:c8:40:06:37:
5b:71:52:75:cb:f8:e9:ae:57:07:8f:97:4e:df:fb:1f:83:f6:
39:35:7a:09:18:45:15:81:34:8e:75:27:fd:17:e6:f9:dc:f5:
fd:fe:ce:8a:25:7d:ce:6e:83:53:b6:6e:11:2c:18:e9:bf:94:
4b:6b:fd:18:f3:ba:37:2b:86:50:ea:e6:2c:ca:51:ab:6f:a3:
69:1c:06:ed:c3:43:66:d4:1e:31:8a:41:86:b6:23:f7:e5:bc:
96:81:3e:4c:fb:27:d6:57:f9:93:8d:26:44:3a:57:3e:2d:d5:
35:5d:d4:a6:56:77:bb:e4:98:d0:b4:05:d9:bc:15:1e:17:76:
5e:c2:5d:a1:31:78:72:49:0d:04:f4:52:77:cd:56:fa:08:09:
f4:42:65:32:a9:25:19:fd:ca:fa:ad:e8:34:93:96:a8:1b:4e:
d4:c6:6d:c6:f7:68:aa:1d:67:c4:c1:aa:f6:27:c7:39:c7:78:
7a:72:35:5f:7f:9c:98:00:ac:b3:da:1b:c0:38:d6:26:f1:e6:
77:13:09:53:9c:f4:8c:86:fa:19:28:2e:80:91:b3:c5:f3:82:
3f:41:be:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:50 2025 by rpki-client