Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f12d996-de06-4fd5-88c5-5a59d39d9d07.roa
File: 9f12d996-de06-4fd5-88c5-5a59d39d9d07.roa (raw, json)
Hash identifier: BDaE5AkB8M/uSV1Vrlkz/sEMKku8dbM0fUi3txNsK4Y=
Subject key identifier: 76:C3:4D:73:6A:E6:CB:9A:AB:AE:AD:21:98:D6:C3:E4:CF:E4:FD:02
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 700B0ECA200091BD9103B5507F450F7D0509C1B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f12d996-de06-4fd5-88c5-5a59d39d9d07.roa
Signing time: Fri 21 Mar 2025 00:22:12 +0000
ROA not before: Fri 21 Mar 2025 00:22:12 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0b:0e:ca:20:00:91:bd:91:03:b5:50:7f:45:0f:7d:05:09:c1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:22:12 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:89:71:f6:bc:e7:02:5c:1e:4f:df:61:3c:
24:25:0e:22:7c:c6:64:35:b6:3c:e4:d8:d2:cb:7f:
dc:f0:2c:44:b3:78:62:9b:d2:ae:1f:fa:05:4b:95:
c5:5a:e8:c3:3c:be:be:40:d2:71:1a:77:3e:3e:6d:
a7:d2:47:da:f7:bb:8d:21:b4:19:5a:6f:e1:05:cd:
99:a1:71:6d:38:b9:34:51:cb:ec:d5:58:cb:d5:c8:
77:49:bc:f4:50:ec:af:fe:fd:25:d0:c1:7e:15:8a:
77:d1:1b:16:cb:04:4e:e8:12:a8:f0:5a:f2:78:69:
a3:a8:03:93:90:13:67:db:b0:fb:f8:ae:42:e7:8f:
51:32:45:58:67:34:10:8d:ce:b0:bc:8b:ce:91:0c:
12:db:44:31:41:ec:77:4d:80:26:37:74:d1:32:f0:
b4:c0:c5:21:92:40:2a:20:78:6e:bc:17:fa:55:30:
c9:37:5e:90:dc:9b:49:e4:17:cc:c0:fa:99:83:3d:
1e:65:7f:31:d0:24:c6:d1:dd:80:73:5d:8e:6a:77:
00:af:85:3a:9e:0c:9e:85:68:44:06:2c:dc:ee:c7:
61:cf:89:de:c6:29:75:80:09:4d:ec:a9:d3:96:b9:
d6:c6:ec:8f:e6:b3:d8:3a:41:f5:32:d2:80:23:b3:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:4D:73:6A:E6:CB:9A:AB:AE:AD:21:98:D6:C3:E4:CF:E4:FD:02
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f12d996-de06-4fd5-88c5-5a59d39d9d07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.2.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:c4:79:a7:6d:37:da:77:bc:c9:11:33:57:09:12:74:51:3d:
e6:ec:cd:7c:42:92:a5:44:bf:e9:b4:bf:ba:d3:32:3c:41:09:
64:9f:ac:28:77:b5:c8:21:6b:ef:9b:3c:10:e6:ab:1f:cc:bb:
3b:af:5c:9f:06:9b:9f:dc:88:e4:24:34:ae:d8:a5:7b:4d:28:
56:54:18:be:56:72:37:5b:a4:20:d1:dc:ea:fd:9d:e9:90:50:
ef:4c:09:86:85:41:63:f9:c1:8b:f8:6b:88:f1:43:e7:9c:98:
74:4b:5b:72:a9:cb:df:0f:73:17:93:a0:e9:d3:84:72:da:61:
a8:9c:4e:5e:93:0c:1c:5a:5d:4a:52:f8:9a:9f:2a:b9:62:d8:
92:cc:7c:80:48:fd:17:f7:f4:69:8f:52:58:d4:d3:09:ab:c2:
c8:c0:29:da:6f:09:50:cd:0d:e8:7f:f4:7f:09:8d:71:34:77:
aa:e7:40:1e:ef:2e:84:14:6d:fd:84:90:2b:96:cf:15:8c:c4:
48:4b:0a:64:4e:3a:50:b2:91:b2:09:6a:97:cb:da:31:19:21:
0d:a4:be:38:71:91:69:da:4e:42:95:e5:c9:0a:64:ee:76:7b:
44:6e:72:68:97:54:07:d3:1c:40:a3:cf:34:f1:99:c8:ca:0d:
68:e9:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:25:14 2025 by rpki-client