Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
File: 9016d464-470c-4275-ad72-fec6b76b99c4.roa (raw, json)
Hash identifier: Mf4BHBkvf2Msy0WNc99JHLwgitCo5cfVBYyFKSrthmo=
Subject key identifier: CC:4D:C2:2F:65:E8:93:36:F2:E5:4D:F3:EA:C0:A0:E8:D9:A2:17:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FB166495B5F2DF10F5BB49F977F83CFA7FB3D9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
Signing time: Fri 07 Mar 2025 00:02:05 +0000
ROA not before: Fri 07 Mar 2025 00:02:05 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 143.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b1:66:49:5b:5f:2d:f1:0f:5b:b4:9f:97:7f:83:cf:a7:fb:3d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 7 00:02:05 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:05:44:77:82:1a:3f:64:f2:4c:68:29:57:
62:75:b4:27:43:db:0c:0d:3e:2c:37:f6:92:bb:f7:
8d:39:74:39:58:40:90:87:f5:ef:45:fc:72:1e:e2:
3a:ca:ca:d5:a4:ca:6c:72:03:52:78:ab:78:e7:55:
9d:67:ab:a5:40:7f:de:14:db:55:1f:64:93:a7:a8:
f2:22:1a:6d:73:32:f5:6b:b3:e2:41:c8:56:c8:23:
0c:29:09:35:e2:ef:31:05:d0:24:e1:f5:39:4e:48:
82:81:75:81:e5:6f:d1:0b:03:ad:85:0b:b6:ab:8f:
ad:65:c9:87:37:c0:5f:ad:be:6b:1f:02:74:6f:ac:
d8:a5:fe:2a:cd:b2:1e:ad:ef:d0:90:8f:6c:f5:d0:
03:c3:65:73:a3:64:1a:5a:41:9c:5f:02:1d:41:ab:
92:1a:11:f6:0c:31:38:30:89:fb:9f:40:8a:b0:89:
6a:a8:e2:e9:c1:45:98:7c:89:42:a4:95:06:e4:59:
a8:46:b1:0f:31:87:51:6e:0a:da:19:2c:b5:5d:18:
73:70:9b:85:e7:17:32:c5:b2:c8:4a:3a:5b:ff:6f:
f8:7c:12:b1:59:70:8a:eb:4b:fd:cc:32:89:0a:a5:
94:ae:a9:4b:6f:53:e9:04:f7:f1:bd:c9:68:54:88:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:C2:2F:65:E8:93:36:F2:E5:4D:F3:EA:C0:A0:E8:D9:A2:17:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.227.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:b6:92:a7:f8:02:48:71:39:5c:d3:77:77:3b:86:ea:2d:92:
8e:a2:7f:7e:cb:b7:b8:6f:56:b6:b5:8c:db:46:78:c7:36:6f:
5c:28:1e:48:06:b0:b7:37:b0:cd:a8:ba:cb:aa:a4:62:e2:c2:
0b:cf:47:aa:5a:6b:70:10:ae:30:60:f8:15:47:e9:a6:d2:ac:
64:3c:f5:d8:61:13:35:77:78:ad:51:32:7d:66:28:f2:cd:16:
f5:33:04:0b:72:a3:31:b1:f7:38:28:ba:e3:f2:8b:95:72:9b:
71:1d:26:3a:fd:40:05:33:9a:db:33:01:32:de:d7:f5:12:72:
19:06:82:a5:75:8d:74:7f:18:f3:d1:1d:e4:ce:20:0a:5d:7f:
de:3a:90:94:a2:49:1e:62:6c:28:80:9b:aa:18:dc:c2:ca:11:
30:fc:07:a8:b6:a3:13:9f:3d:79:27:64:b1:59:78:7a:09:b1:
46:3b:02:88:cf:11:9c:53:83:50:c6:0c:fb:41:94:00:73:64:
c7:ac:84:c5:1d:4a:a2:e1:53:0e:54:1e:b7:18:6c:94:57:86:
c6:3a:52:10:0d:d4:70:34:79:47:95:c1:cc:49:0f:ff:3a:37:
d1:ff:d2:6f:61:c9:d1:e5:e4:1c:c0:ed:e2:d5:17:f1:4c:f5:
3b:f6:6f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:24 2025 by rpki-client