Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825fa423-a735-4a65-a380-17d1eb42f29a.roa
File: 825fa423-a735-4a65-a380-17d1eb42f29a.roa (raw, json)
Hash identifier: vWZPRCPpsXaALatNmZDcwhX3f3jPcuISwTq0qodcJGw=
Subject key identifier: 4D:27:AA:48:A7:0B:38:0F:F5:DD:88:16:5A:BB:B0:B2:1F:1C:58:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7ED3A7F702CAB2B190FB5CB7CA2F044510994859
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825fa423-a735-4a65-a380-17d1eb42f29a.roa
Signing time: Wed 05 Mar 2025 00:30:46 +0000
ROA not before: Wed 05 Mar 2025 00:30:46 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d3:a7:f7:02:ca:b2:b1:90:fb:5c:b7:ca:2f:04:45:10:99:48:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 5 00:30:46 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:04:2e:53:c8:67:6c:e5:5a:f1:43:21:67:
b8:24:1e:b9:56:94:b2:0d:77:e6:40:65:dd:49:f5:
b7:8b:b0:b1:d7:6e:bc:c6:67:10:09:5c:47:2f:b6:
d2:d3:82:47:c1:9b:66:55:a1:53:28:91:0c:bb:5e:
f5:a8:1c:93:8e:25:b4:59:a5:fc:4d:d9:97:9c:3a:
b7:94:cc:1e:4c:c8:27:7b:97:45:1c:c1:2a:6a:bf:
c7:e8:6d:dd:d3:27:29:e1:e4:dc:53:53:e5:9d:12:
d3:cc:29:64:8b:ad:85:fa:52:b3:9a:87:04:6a:89:
0b:19:1d:81:85:0c:8e:dc:ca:6f:c5:46:c5:7f:ed:
97:f1:5a:5c:10:c4:6c:b1:2f:ad:13:c6:20:f7:e4:
58:ab:52:72:30:18:6f:d0:e2:d5:89:fa:9f:6f:04:
77:a2:f3:66:81:c4:66:d9:17:f5:53:69:55:47:20:
85:9a:be:d9:38:5a:56:6c:a2:ed:6f:aa:69:e4:8a:
2b:f8:01:e8:0d:40:a2:70:cd:69:2e:37:f5:c5:af:
99:74:50:a7:37:8b:fb:8b:be:41:c8:b5:5c:98:d9:
5f:2c:28:43:be:c5:e0:6f:f8:b8:d2:a8:d8:01:53:
a5:56:a2:5a:38:cd:88:75:f9:90:ea:60:a8:14:eb:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:AA:48:A7:0B:38:0F:F5:DD:88:16:5A:BB:B0:B2:1F:1C:58:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825fa423-a735-4a65-a380-17d1eb42f29a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.0.0/17
Signature Algorithm: sha256WithRSAEncryption
00:48:f9:cb:c0:f4:99:6e:4a:fd:4d:7c:da:72:73:c8:59:13:
a0:a6:89:db:64:10:d8:a9:92:39:77:cd:0f:0b:da:02:83:10:
c1:3c:53:db:6a:16:3f:c7:6b:51:22:2f:4e:8f:5e:e1:5d:7d:
4b:58:a1:3f:aa:ce:e8:37:b8:31:25:0b:35:8f:6f:ef:4f:7b:
96:66:7a:f2:a0:53:f2:25:b4:7a:0a:35:e1:7c:26:4e:1b:6a:
61:7d:9b:40:69:de:30:5b:54:3e:c2:92:a7:2f:49:e7:ac:34:
ad:f0:ec:b6:f3:17:e1:27:27:e9:a6:37:0a:30:66:28:58:b8:
9d:8a:0b:8c:96:58:95:a8:91:a6:f5:a6:55:24:0c:52:88:9c:
cb:b3:5b:76:0d:a3:2d:83:a7:e6:67:1f:fd:5a:27:7a:df:45:
ff:b4:ee:09:5f:12:76:cf:d6:b5:88:c9:c6:7e:5b:c3:38:42:
9c:9f:89:72:0c:92:bb:88:8b:b7:c5:2a:69:86:72:b6:b1:28:
bb:0c:44:d0:7c:16:c4:7f:7f:09:22:61:ff:38:4f:49:ba:d3:
ca:ca:26:92:44:ab:14:a1:df:6d:94:39:35:21:75:08:29:93:
e5:c5:44:d7:a7:f2:50:50:fb:d6:da:58:7b:17:78:e0:23:6c:
bd:42:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:51 2025 by rpki-client