Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa
File: 9ada0f91-4f35-4189-b9db-6208680650ff.roa (raw, json)
Hash identifier: gUW5xyJqEwPZM+LzOWJ4arI/jR3JQpSOMYttZ4sIqBg=
Subject key identifier: 99:03:51:2A:A1:DE:F2:32:19:E6:55:9B:8C:64:FE:C4:C0:6E:4D:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12306985086E9C1FF02197D770BCEEDE2EAEAB60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa
Signing time: Sat 15 Mar 2025 00:01:45 +0000
ROA not before: Sat 15 Mar 2025 00:01:45 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:30:69:85:08:6e:9c:1f:f0:21:97:d7:70:bc:ee:de:2e:ae:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:01:45 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:2c:0e:7d:c9:4f:4e:74:73:12:d6:42:ff:
45:88:16:fd:23:55:c3:88:cc:bf:46:94:4b:c5:eb:
3d:8f:15:b4:4d:d0:08:2a:ce:89:fe:c5:2e:25:3f:
6c:fb:1f:cb:70:55:7d:44:06:72:e3:32:ad:17:58:
fe:3b:ae:7a:89:77:99:40:0c:63:ad:62:bc:ad:05:
a9:99:bb:30:50:96:25:08:46:45:4a:9b:f8:59:d1:
16:69:5f:e2:10:38:c2:0a:3d:16:7d:72:90:d2:43:
59:12:ce:47:29:ba:71:af:53:77:03:90:a8:b0:07:
e7:a6:82:de:c1:f2:4d:e5:1d:b5:06:9b:2a:91:b7:
dc:08:d4:80:c1:2e:82:1f:21:1c:01:b6:94:13:11:
1c:39:2f:17:40:7b:dd:47:a7:93:14:3a:a1:d3:41:
64:95:d8:bc:a4:70:c0:2b:bd:2b:24:c9:4c:86:93:
b8:77:06:49:8f:0b:61:ae:70:72:8d:4c:bb:ec:a4:
80:fc:18:9a:a4:cd:ac:ea:84:90:e4:ae:df:26:23:
f8:70:88:31:3b:7c:54:9e:49:5e:4e:03:4b:97:5f:
53:2c:a7:ee:dc:62:13:a5:46:8b:5a:3d:ed:bd:56:
0b:58:f5:a5:cc:1b:90:26:76:2a:3d:29:11:07:db:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:51:2A:A1:DE:F2:32:19:E6:55:9B:8C:64:FE:C4:C0:6E:4D:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.2.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c2:4c:03:33:ed:e1:d6:bb:40:40:6d:13:b2:4a:bc:10:9d:
a2:13:18:2d:f6:fd:f6:43:68:80:d2:d6:23:ac:95:3b:0f:e5:
63:e5:b7:16:f9:f9:c5:19:43:98:90:b3:fa:af:d4:c9:f8:56:
e5:7f:ba:96:f9:81:24:b2:53:fd:71:e7:87:12:2e:03:bb:df:
96:db:31:72:07:8d:af:77:10:f6:00:a1:8c:8c:dc:9d:72:d8:
5e:47:77:db:1c:9e:22:87:06:6e:11:69:da:98:d3:01:84:b7:
7c:d8:04:96:a8:08:4e:c9:26:a0:bf:d3:d6:55:56:b2:1b:95:
f7:87:4c:3f:ef:2a:e4:58:17:b5:8a:ce:75:24:6e:89:36:34:
4c:fd:97:7b:4c:3c:e4:dd:5c:9d:c6:db:3c:2e:0d:89:d3:57:
7b:5d:5b:33:ac:cb:4a:dd:06:62:41:0f:85:7a:46:21:48:43:
5b:37:a9:85:f2:04:5b:ba:62:c7:8d:2b:47:21:37:3b:cb:10:
99:63:13:4e:9f:11:bc:08:b4:57:3c:93:f2:0e:9b:68:04:c3:
bf:d1:65:b6:8f:d3:95:d7:43:40:fc:be:44:80:46:bb:93:fa:
f4:90:4b:09:ce:c5:aa:07:46:a4:95:5f:4f:c4:f5:49:99:52:
42:ae:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:39 2025 by rpki-client