Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa
File: 985b59c8-a923-4d73-afff-2650138ef0c2.roa (raw, json)
Hash identifier: 1/KtRPPrn/VuiBbfKnmenAVJmZkURHwpOSojvQoEUN8=
Subject key identifier: EA:7C:2B:1C:BE:C0:13:9E:8B:BA:4A:88:BA:C8:8B:0D:91:A8:08:77
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13B5C5A56501D8B2046E37F5AC5A806618DD5010
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa
Signing time: Wed 19 Mar 2025 00:00:16 +0000
ROA not before: Wed 19 Mar 2025 00:00:16 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 104.216.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b5:c5:a5:65:01:d8:b2:04:6e:37:f5:ac:5a:80:66:18:dd:50:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:00:16 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:cb:f1:50:81:c2:85:3b:81:40:c4:b0:f7:
d2:f0:a7:7d:f3:a7:b8:ca:4b:94:87:60:f9:84:f5:
39:19:c2:a1:e5:fd:7a:eb:36:95:05:f7:f7:18:cf:
7b:fb:6b:3b:12:27:9c:13:40:0e:43:df:4e:8d:7f:
01:a7:ec:e3:3f:64:56:37:b0:af:5e:a5:3a:91:dc:
7b:c6:d4:68:04:16:dd:b5:cd:b8:1a:eb:89:65:72:
e5:59:4b:f3:1d:33:01:23:b6:dd:96:f9:ba:7f:c1:
49:1d:c0:99:14:66:23:da:fe:39:83:50:a5:a0:e8:
b1:48:6e:b3:7a:d2:1d:80:60:a5:48:25:67:3c:ac:
ab:fb:7e:aa:29:ea:02:b3:ee:08:f3:0f:12:9e:71:
97:2d:c8:29:89:6a:7c:a4:69:ab:7e:23:78:64:67:
38:62:0d:ca:59:2b:4c:f8:50:76:93:a3:3f:bf:78:
03:59:e7:f3:f2:d9:28:37:1c:f3:8a:f9:92:61:f4:
d1:b8:24:7b:9f:eb:45:3a:a0:64:6f:7c:b7:9f:1b:
19:33:d7:fe:83:25:71:7b:d4:c2:6a:96:4f:b1:ac:
07:e7:97:c8:2c:82:12:ef:d5:3a:f5:7d:46:80:8e:
a3:1b:21:ff:34:ec:39:54:3b:33:72:a6:cc:3b:75:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:2B:1C:BE:C0:13:9E:8B:BA:4A:88:BA:C8:8B:0D:91:A8:08:77
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/985b59c8-a923-4d73-afff-2650138ef0c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
90:17:cb:5c:fe:8c:05:ac:ef:aa:17:49:dc:1d:fe:71:24:69:
e0:19:5e:73:f8:f7:98:07:ee:d3:b0:fb:75:cb:d6:66:3d:79:
c0:96:f3:aa:a0:ac:be:17:92:cc:9c:19:91:0d:1d:d2:29:2a:
50:42:7f:5a:03:e1:a4:75:8c:d8:66:20:6d:b6:de:b5:e2:f7:
81:1b:6f:e0:9f:8b:29:bf:39:13:8b:5c:a8:09:9a:b3:d8:ea:
59:5c:55:78:f6:02:64:ac:fe:d7:7c:fb:bb:8a:be:20:3d:54:
00:0c:8f:9c:5c:19:d0:29:e4:0f:9f:30:7f:e5:cf:a6:dd:b9:
22:ed:88:cf:0a:12:05:ba:bc:46:eb:bb:df:33:e6:cf:86:f7:
19:c7:9c:63:10:f2:2c:25:da:71:6c:d7:79:8d:82:a6:59:61:
96:c4:e3:d8:50:d2:22:5a:42:96:98:86:41:b1:89:81:73:fa:
10:88:42:86:2d:94:5f:1c:bc:b8:45:4a:be:93:1a:4a:43:de:
88:1e:26:68:a3:84:b4:a2:82:ca:a2:f9:19:57:52:bf:0d:e1:
9f:ff:4e:c5:4e:f7:5a:fb:a9:46:70:9a:23:c0:45:aa:41:cd:
9c:ae:ac:cb:0f:73:2e:ef:32:da:c4:be:84:05:00:b3:a6:c7:
ac:38:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:44 2025 by rpki-client