Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa
File: 7aec645b-f991-4a6c-97ff-47cd491428c4.roa (raw, json)
Hash identifier: XTy0PUOMC9uR7OA0ldzYlmHycdGWNW6QWMrYYWswjTs=
Subject key identifier: 2B:CA:21:FE:67:C6:30:7E:CC:D2:E1:A8:8B:09:84:AD:66:1F:80:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 243265D8D5A7CD2E0E725A1A1D48246C0EDCC43D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa
Signing time: Fri 21 Mar 2025 00:41:43 +0000
ROA not before: Fri 21 Mar 2025 00:41:43 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:32:65:d8:d5:a7:cd:2e:0e:72:5a:1a:1d:48:24:6c:0e:dc:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:41:43 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:ef:88:08:bd:10:2f:f7:62:fc:2d:1d:77:
9d:55:f0:a2:a9:3a:b0:0a:a5:84:f7:93:5c:4c:22:
0d:65:14:84:14:e9:61:60:16:68:11:b2:ce:6a:18:
c7:0c:be:2c:b1:db:df:d0:08:b9:c3:62:33:b0:67:
0a:b1:0a:eb:33:1a:54:76:cd:18:c4:7e:27:41:d1:
1e:b9:bd:72:3f:00:69:30:2f:6c:4e:cc:07:f4:ca:
9a:45:e8:0d:10:50:7b:18:e1:a8:dd:f1:c3:c4:98:
06:6f:a2:fe:8c:17:15:2a:e8:a3:3d:d7:85:bc:ab:
bd:ff:f1:1d:c4:e7:75:c2:b6:2b:28:5c:20:a0:a9:
5b:ab:ef:8b:9f:43:c9:c8:c9:15:53:11:c9:5a:09:
b9:84:d3:ab:bb:86:ac:89:a9:c4:32:e3:cf:24:e9:
5e:ef:49:c5:82:14:5b:83:24:7b:82:9e:c1:81:24:
51:7d:fa:c5:6d:97:c4:7a:44:7b:20:c2:0f:22:78:
ed:55:72:7f:c4:3e:11:28:bd:5d:4e:81:1e:aa:75:
63:8e:eb:39:57:74:6b:2e:dd:46:8e:7e:86:de:83:
36:a2:78:c8:06:f1:14:fd:6f:c1:d0:b4:d6:47:7d:
47:f1:25:06:75:8b:13:37:b4:03:bd:4b:e1:b5:f6:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CA:21:FE:67:C6:30:7E:CC:D2:E1:A8:8B:09:84:AD:66:1F:80:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.112.0/21
Signature Algorithm: sha256WithRSAEncryption
70:59:68:5c:78:c4:ea:2a:3c:28:94:83:87:1c:b4:83:a9:be:
0a:31:8e:b4:ca:9b:a7:71:f9:07:2e:7f:e0:83:26:b9:58:67:
a7:69:2c:c4:57:35:9e:56:c7:5c:60:17:18:f5:62:99:c0:73:
ce:16:c6:10:4a:6a:61:a5:8f:bd:7b:b2:18:3b:fb:ef:6b:72:
b2:db:f0:f9:c3:89:69:44:bf:29:ed:f2:79:ab:a5:cd:db:ea:
be:1c:5a:8a:87:75:97:37:1f:0d:b4:a1:05:7b:31:5d:5d:3d:
b6:b3:fe:3e:6e:25:fc:f9:52:43:45:63:12:8e:c6:aa:67:38:
e3:43:70:04:85:33:36:61:75:29:a0:59:92:88:40:b0:36:d6:
0d:26:75:44:9a:fb:ec:c9:e0:d0:2e:6b:50:24:9b:57:1e:38:
cb:df:d5:1e:11:5e:e9:52:76:75:04:b7:d5:8d:38:a0:b5:c1:
ec:e1:e3:2c:21:9b:23:13:67:3a:0b:ea:f4:7f:62:bf:75:9b:
e4:86:36:0d:21:ee:d9:82:35:53:32:4e:a8:b4:11:71:c7:9e:
ef:2f:1d:5e:a1:c2:19:3f:23:ff:52:c9:c8:ca:d1:9f:d2:64:
49:dd:9b:6b:1f:76:95:18:39:9d:3d:f1:5e:52:15:96:68:f0:
b8:84:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:39 2025 by rpki-client