Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a71eb5-552b-47b3-a41b-bfdd426d49cc.roa
File: 74a71eb5-552b-47b3-a41b-bfdd426d49cc.roa (raw, json)
Hash identifier: IgGjakBnyi/UFs/H4aXdIlUS91PETKC52GgbrZvsmdY=
Subject key identifier: A1:F1:F0:7E:67:8A:0D:0F:3C:5E:3C:FC:5F:53:E9:C4:B1:FC:C8:A5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E2E9DF76F077466B8F08C9382EF61C27E3F3437
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a71eb5-552b-47b3-a41b-bfdd426d49cc.roa
Signing time: Wed 19 Mar 2025 00:01:53 +0000
ROA not before: Wed 19 Mar 2025 00:01:53 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2e:9d:f7:6f:07:74:66:b8:f0:8c:93:82:ef:61:c2:7e:3f:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:01:53 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d2:1d:e8:b9:2e:f7:1e:f8:74:16:b9:6b:da:
f7:22:e7:d6:5c:db:46:1f:23:f5:3d:39:85:02:ed:
58:48:e7:b5:67:aa:cb:79:ee:c3:fd:d3:8d:85:48:
90:80:30:79:8c:a2:b0:fb:3e:42:61:58:cf:46:9d:
ba:cf:50:c3:6b:67:7c:86:01:f4:16:36:95:74:f5:
24:e6:60:c7:b8:c2:72:98:ed:f4:6f:9c:78:29:15:
8f:7c:8a:a1:e9:b5:86:14:ae:7b:db:40:91:e3:4a:
f1:d2:dc:56:84:25:e0:a9:4e:60:ca:80:20:e5:04:
43:b5:a4:1e:b4:0b:29:1e:bc:b1:ba:0e:11:ee:c5:
08:ae:d8:ba:58:fa:06:61:95:22:46:8d:29:1b:9a:
eb:f9:ff:e7:d4:50:6c:9e:91:c4:3a:5c:38:b4:7b:
0c:4a:ab:30:fe:32:ca:8f:f3:99:81:63:99:90:d7:
4a:b9:85:d6:7c:67:c6:c3:c9:8f:f4:51:8d:72:cd:
29:07:40:2b:72:3c:6f:7b:cc:ac:d4:ef:c4:6e:ce:
67:ce:74:a1:c2:34:43:2b:f6:4f:dd:1b:ed:df:a4:
ac:f0:7d:9d:41:82:aa:0b:a8:9e:a2:21:8f:8c:73:
49:e8:d0:13:e6:06:a2:fe:52:ac:b0:69:28:b0:cd:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:F0:7E:67:8A:0D:0F:3C:5E:3C:FC:5F:53:E9:C4:B1:FC:C8:A5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a71eb5-552b-47b3-a41b-bfdd426d49cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.132.0/24
Signature Algorithm: sha256WithRSAEncryption
01:37:8a:53:24:63:84:e6:43:f5:e2:1a:ce:4f:9b:54:1e:df:
5f:b6:c3:e0:52:c8:50:51:66:8e:82:fa:16:68:48:bc:60:b1:
e6:ba:20:a6:a1:7e:b5:c6:bd:f9:a5:93:07:0b:e4:49:40:a2:
07:37:80:3d:21:07:95:53:1d:89:ba:91:d3:ca:cd:94:34:78:
d4:9c:3a:92:54:56:25:31:0a:bf:ed:0e:bc:60:4c:c5:d4:50:
44:0e:aa:e5:b7:b6:f7:12:7f:0b:45:37:80:71:74:82:c9:d9:
93:39:bf:79:19:ad:59:33:b1:4e:a2:8c:a9:23:3c:5b:2f:c5:
66:28:3b:ca:db:fc:ce:83:ed:bd:01:3e:13:55:c8:a8:86:d9:
e0:7e:1d:02:a6:87:7a:a6:2f:8c:92:2a:6f:36:60:48:fb:0c:
e0:8c:cd:95:78:2a:07:b4:d8:61:0d:85:dd:ca:6f:89:15:58:
1c:31:67:23:1a:80:86:90:10:70:80:cb:38:ee:c9:4b:5c:95:
88:10:e2:03:9b:82:1a:70:5f:e4:51:e7:be:73:b9:01:10:1e:
a1:d1:5d:83:30:d6:bd:a7:60:48:92:3e:4d:36:0b:94:56:b7:
b2:0c:cf:ee:52:ff:67:28:29:53:da:6b:a8:fb:4e:18:f9:13:
74:1b:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:48 2025 by rpki-client