Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/784d895c-8d00-4fcd-a843-ee93bc08908f.roa
File: 784d895c-8d00-4fcd-a843-ee93bc08908f.roa (raw, json)
Hash identifier: 22iDuJmA0SE1A/F5bcHsVb1Oy9q0UBWzQ7iaP2AnaRQ=
Subject key identifier: F6:EE:29:FE:35:AE:3C:43:DD:DF:1C:4F:8A:CE:2A:FE:C0:20:61:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55E406710D0E7A01F8B52E349CE68EF76EFCE604
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/784d895c-8d00-4fcd-a843-ee93bc08908f.roa
Signing time: Tue 04 Mar 2025 16:20:10 +0000
ROA not before: Tue 04 Mar 2025 16:20:10 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.21.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e4:06:71:0d:0e:7a:01:f8:b5:2e:34:9c:e6:8e:f7:6e:fc:e6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 16:20:10 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:41:e1:25:a2:61:a6:80:67:bc:30:07:fa:
d5:b4:27:5e:8c:84:e6:2b:15:3e:e8:0a:d1:9f:92:
a7:47:25:79:95:1e:bd:d2:c8:7c:d8:de:03:fb:8f:
12:15:b0:e1:31:1f:d8:67:8d:85:79:c6:35:12:10:
7d:86:8c:53:3a:d3:ea:a1:e1:d4:90:cc:3f:69:57:
54:01:79:5d:4d:e6:47:12:e4:92:aa:23:c8:1d:ee:
53:59:33:26:fc:7f:87:07:0d:66:76:30:a7:51:92:
66:c0:6f:16:c2:26:ed:39:67:5c:32:25:0d:85:f8:
fc:fb:b9:63:77:01:ca:15:dd:b8:ab:76:92:0a:06:
f6:f4:a1:54:dd:83:f4:db:fb:f3:62:e0:1a:d5:e9:
4d:cb:87:65:bd:7d:22:90:2d:a4:38:73:cf:c3:36:
3f:8a:bc:4a:27:ec:9d:6d:12:18:fb:77:35:79:93:
bb:4c:73:fd:a3:d3:01:df:e3:2a:15:07:33:71:ef:
4e:91:d8:34:af:1d:5a:c4:51:6c:61:93:37:23:d8:
44:2b:c4:13:42:d7:40:13:f9:ca:e3:11:4c:aa:48:
d9:09:22:a7:32:c9:8b:42:f6:fe:a5:8d:b8:2c:8b:
c7:df:7f:ed:a2:b1:2e:1e:6c:41:32:57:87:36:49:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:29:FE:35:AE:3C:43:DD:DF:1C:4F:8A:CE:2A:FE:C0:20:61:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/784d895c-8d00-4fcd-a843-ee93bc08908f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.21.40.0/21
Signature Algorithm: sha256WithRSAEncryption
66:46:5a:12:18:14:71:d2:d2:01:ee:e6:b1:7d:cc:17:5f:cd:
c0:f3:86:64:ee:91:f8:63:78:1c:a7:94:d2:3b:a0:3f:10:6e:
c9:5d:da:61:a7:c2:80:c2:49:4b:fa:09:47:f1:e4:5f:d8:c0:
c8:fe:69:6a:49:5f:ea:2c:25:a7:88:a1:68:3f:c2:a2:6e:07:
8f:23:1c:2c:96:4a:c5:71:17:ad:5c:57:7d:0a:ca:c8:d9:73:
2c:a4:ac:01:08:52:ab:84:0b:c9:f9:c2:d4:41:ca:76:81:30:
ac:47:d8:9a:f0:1a:e5:bd:b1:c0:a7:a0:c9:b4:4d:39:26:cd:
f7:f7:95:81:79:31:eb:c7:b5:5d:f3:7b:6a:02:33:fb:0b:42:
2b:85:f4:b4:77:69:d1:9c:ec:36:63:13:82:4b:45:1f:10:80:
f4:9c:70:e0:62:97:12:62:67:cc:a5:cb:16:c9:33:0a:e8:a6:
d6:20:5c:f1:42:51:e3:45:80:41:58:71:a3:17:91:b7:4a:24:
f8:26:73:82:ab:b3:0f:84:44:9b:91:2a:19:69:b3:d3:83:fa:
7e:64:f2:ca:49:e8:af:8a:fb:a2:89:1d:44:9b:a4:18:34:26:
51:0e:53:0f:b8:ef:51:2d:ee:51:bd:a9:6e:e0:b8:17:8e:3a:
6b:95:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:50 2025 by rpki-client