Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78dd12dd-970d-4fa6-87a0-5b7eea0423c9.roa
File: 78dd12dd-970d-4fa6-87a0-5b7eea0423c9.roa (raw, json)
Hash identifier: yOZ4OjRTWHWB+nBfjmUrp2WA3qjyyzgoMLblZZSqnTI=
Subject key identifier: 68:70:59:B9:B6:66:28:F5:18:05:4A:64:5C:CE:A4:F4:E2:8A:4B:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 336248AA1188F7CF5A4A2002C623C2F74FCDF0F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78dd12dd-970d-4fa6-87a0-5b7eea0423c9.roa
Signing time: Mon 24 Mar 2025 15:50:10 +0000
ROA not before: Mon 24 Mar 2025 15:50:10 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:62:48:aa:11:88:f7:cf:5a:4a:20:02:c6:23:c2:f7:4f:cd:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 24 15:50:10 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:6e:08:dd:dd:1d:21:fa:f0:e4:20:96:a8:
bd:9e:c4:a3:5e:1f:7b:42:f6:17:25:c2:55:8b:8a:
86:0d:bc:ed:e7:90:1d:48:bb:d5:e8:e0:7c:69:5e:
db:01:47:4b:41:87:2a:18:fd:ce:7d:c2:a7:2b:be:
63:f8:1c:38:0e:9c:4e:38:39:2e:15:0c:57:f0:da:
44:ec:67:70:50:ea:b1:95:3a:07:d7:86:6f:08:e1:
5c:9d:4a:75:f3:d3:04:b8:10:51:3b:9b:54:27:33:
5f:20:50:ab:45:4b:7b:7a:bc:5d:7e:b0:23:0f:97:
57:12:e6:d1:f6:ed:f4:26:82:0c:1d:cb:13:37:8c:
84:cd:69:9b:f3:0d:7d:9d:d8:64:4e:c2:a5:a1:41:
5d:b2:86:f2:b5:44:d4:fd:cf:d2:cd:01:f9:1e:2e:
82:00:e3:10:e3:b1:bf:f6:14:68:03:30:4b:13:29:
97:37:5f:78:89:35:8b:56:9e:24:0b:00:20:4f:1d:
c5:dc:c0:82:e8:9a:02:6a:a6:06:68:3b:fa:48:36:
79:c1:d1:f5:cd:9b:59:6c:a4:2d:3a:44:bf:18:d0:
d3:55:f8:31:d1:e0:93:29:42:36:0f:75:fa:f3:e4:
c1:2a:da:da:65:14:86:e1:ce:d2:86:67:16:af:30:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:70:59:B9:B6:66:28:F5:18:05:4A:64:5C:CE:A4:F4:E2:8A:4B:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78dd12dd-970d-4fa6-87a0-5b7eea0423c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a4:34:a4:e4:b7:2e:38:ac:67:45:78:52:fc:c3:9c:96:aa:
63:23:25:35:cd:64:d9:cc:04:5b:65:d5:82:f8:62:be:5f:49:
21:92:c6:ae:e0:bb:b6:3c:5f:1b:17:8d:24:a4:f6:1f:b7:79:
6a:8c:8c:2b:48:5e:7d:4d:8c:5b:b8:cb:f2:87:22:d9:d9:57:
43:a4:7a:60:6d:9c:60:e5:7a:43:e9:9f:77:3d:0a:c4:6e:6b:
ac:28:ff:51:ab:fb:b9:04:3e:78:ae:d9:b6:32:24:05:3a:cc:
ee:08:8a:bb:66:b1:71:62:fd:4f:f3:22:97:45:6b:d4:49:23:
bf:5b:5b:36:5a:17:5a:af:66:ca:d8:2d:da:f9:a2:95:11:9f:
f6:aa:a5:33:97:86:a6:db:49:c0:f6:7f:5f:99:0f:07:55:ea:
ac:bd:fc:4c:8f:83:2e:8b:c9:30:8a:bf:8f:84:d8:02:a6:9f:
9d:d7:0a:c2:f1:ba:b6:b8:82:dc:7a:6e:d8:48:4d:df:6b:be:
c7:86:dd:7c:4a:64:2f:ba:98:7f:86:51:75:ad:cc:22:98:c1:
9e:b9:e2:cd:23:6e:43:9c:9f:05:11:3e:5f:fb:aa:48:bc:2f:
45:45:96:32:d9:b8:b2:17:a1:81:92:2a:da:2b:3f:86:2f:f9:
9a:8a:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:39 2025 by rpki-client