Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
File: 8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa (raw, json)
Hash identifier: H9fvsBMejKDdLDyznVMSJ1pqQluCjDYKE37EtvsU9eU=
Subject key identifier: DE:39:5D:C6:12:C3:00:15:41:89:4B:CD:85:C5:CE:24:66:0C:49:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32F3E3A441024C3B2682CC18FD2C7A3E0A22A154
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
Signing time: Tue 04 Mar 2025 18:00:14 +0000
ROA not before: Tue 04 Mar 2025 18:00:14 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.80.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f3:e3:a4:41:02:4c:3b:26:82:cc:18:fd:2c:7a:3e:0a:22:a1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 18:00:14 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:a7:cc:e4:1b:9d:b7:07:8d:51:fa:a5:1e:
d9:e0:7a:33:e1:e6:1b:f7:db:8a:e3:8a:86:30:86:
29:23:b9:37:ee:5a:07:01:53:fa:df:c1:08:f4:32:
33:93:cb:c7:68:2e:68:b0:f9:40:0e:53:00:05:2d:
30:4e:4f:32:8f:cd:38:8a:1c:7a:76:2b:4b:af:f3:
79:f0:6e:ab:5d:21:f8:8d:a9:f1:59:ac:22:ed:c1:
0c:a1:bf:e7:8e:6b:c9:3c:8b:a4:75:da:9e:46:f6:
21:bc:b5:79:9f:8f:c8:01:93:5e:96:13:a9:0e:5f:
36:c8:fa:dc:d2:4a:78:a4:5d:d1:d6:85:a6:73:8c:
36:f5:d5:6b:9b:9a:5e:ef:7b:01:8e:a5:46:ed:41:
55:e1:b8:2a:67:fb:bb:d3:c3:03:da:b1:76:d0:38:
56:9d:da:1a:53:59:4b:25:f8:6c:32:b2:f6:38:9d:
f9:52:96:06:fc:56:fc:a1:a4:63:ec:18:b1:03:6d:
b9:6d:44:0d:28:af:76:d7:f7:49:80:fa:dd:bb:1c:
68:ba:ca:98:38:32:3c:5e:d8:89:d5:b2:ca:04:d2:
44:3a:fb:dd:e2:c6:35:e7:75:8c:71:64:7f:83:e3:
f9:45:ff:e2:c1:36:70:a7:ed:aa:6a:58:48:85:6b:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:5D:C6:12:C3:00:15:41:89:4B:CD:85:C5:CE:24:66:0C:49:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.80.0.0/13
Signature Algorithm: sha256WithRSAEncryption
3c:af:5f:37:a6:24:28:ca:93:c7:f8:33:50:09:6d:b6:36:13:
59:88:f1:47:92:39:78:6f:18:00:34:a4:f4:c7:36:51:d3:4b:
4e:e9:c9:98:d1:95:ad:75:e0:e5:f5:32:82:6e:8a:15:6d:65:
c2:9c:14:24:75:49:a4:01:ca:16:11:c0:cd:b8:68:74:3c:62:
3b:b6:a4:f4:a3:c0:55:2f:e7:4c:95:27:12:8a:bc:5e:98:69:
98:5f:dc:1c:a1:32:84:ad:1e:94:c8:10:82:68:19:ec:72:a6:
ba:66:c9:aa:30:f0:76:30:59:5a:35:ab:27:0f:be:ec:ef:db:
15:7d:37:e9:82:c5:41:8c:a6:47:3d:45:31:86:05:df:17:af:
8e:29:20:0c:1d:6c:da:0e:1f:96:8d:0a:21:2a:8c:7e:e3:ec:
7a:e4:29:77:ca:34:5d:7a:b4:74:a3:5f:eb:41:05:7e:fd:63:
bc:d6:d6:1c:1d:43:3d:ae:14:aa:b7:73:fe:06:0a:f7:20:62:
79:1d:d0:de:6c:3c:39:f5:cf:dc:3d:0e:bf:4e:9f:f2:0d:17:
ae:a7:2a:05:2e:89:93:c7:ff:9e:0d:ff:f9:2a:47:41:25:69:
ba:16:5d:d5:58:8c:9c:64:ff:fb:c6:a4:55:bc:cd:9f:8f:fc:
60:3a:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:10 2025 by rpki-client