Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa
File: a22c470d-8074-414a-ac14-cdafb7379aed.roa (raw, json)
Hash identifier: 2aLg8X2UWb+8EJxmgUJdVsCX4vf2o4h8+s4NcNOCxSM=
Subject key identifier: CB:F7:36:0E:1B:56:C1:C2:28:C7:4A:D5:F8:DC:EF:A6:5F:81:96:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C87CF6A860F61C74D4377BABA37B9E949331A2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa
Signing time: Sat 15 Mar 2025 00:01:56 +0000
ROA not before: Sat 15 Mar 2025 00:01:56 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 162.250.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:87:cf:6a:86:0f:61:c7:4d:43:77:ba:ba:37:b9:e9:49:33:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:01:56 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:b3:df:2c:1d:02:6d:e9:93:cf:81:38:fd:
46:52:ca:c6:d5:72:b7:6c:45:3c:33:0a:27:ef:99:
26:5c:2c:18:bb:53:53:e5:15:61:71:ae:38:d8:51:
4e:25:14:bd:e0:1b:90:06:2b:35:e3:b5:a8:c6:2c:
fb:ff:6b:77:47:21:83:89:27:2b:a5:d8:b0:8f:0d:
6b:f9:6d:71:1e:a5:50:cd:54:3d:77:36:13:8b:67:
b1:f6:80:3a:d7:3f:43:79:dc:c2:52:23:08:88:b9:
00:9e:8e:2f:e7:61:f9:e1:18:c1:9a:a6:78:71:b4:
1c:50:dd:e0:e0:ce:18:08:8e:4e:37:96:ee:fb:35:
01:ce:4e:1e:21:62:95:0e:e8:b0:4f:b2:8e:ac:62:
37:03:15:2b:80:cd:0d:16:80:7e:99:a9:a4:2b:a0:
c9:d0:93:08:f6:40:16:0e:75:65:13:7e:68:af:b5:
a5:ab:a5:1d:d6:8f:4b:85:7c:24:87:60:0b:9c:42:
f4:66:4e:93:38:b5:fe:3f:0e:ab:25:fe:b4:c6:96:
8f:9c:87:10:90:26:30:f5:10:8c:29:b1:69:0a:76:
ba:f6:c8:1c:c8:1e:d0:11:d6:81:d3:8c:f3:66:3a:
9a:25:cf:56:2f:01:85:e6:90:33:5b:18:39:4e:f8:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:36:0E:1B:56:C1:C2:28:C7:4A:D5:F8:DC:EF:A6:5F:81:96:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.250.236.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f7:5a:38:0d:ca:21:d5:eb:90:1d:1a:61:29:66:00:3e:53:
80:27:60:8b:ef:2e:95:ab:ba:c3:04:36:e5:ea:c6:9d:58:a6:
9c:90:eb:13:8f:59:3e:41:d6:e9:fb:db:58:8b:33:37:fb:61:
df:7e:35:3a:42:62:3a:33:a1:41:70:9c:cc:6c:04:e4:9f:5e:
5c:78:87:6a:4c:ab:25:c1:6e:fb:06:13:f1:fd:a5:8b:62:ef:
8b:22:ea:a8:fe:73:70:d2:b9:08:3b:84:3c:7a:83:0a:47:31:
0d:33:92:cb:59:7e:bb:ef:45:5e:61:bd:20:cd:d8:3c:47:bd:
51:71:a0:79:2e:88:09:fe:fd:98:fe:e7:c1:29:4a:3a:7f:94:
02:83:70:4e:1b:ce:3c:76:92:86:c3:13:1d:f2:49:55:a1:77:
ec:e2:af:df:2c:5a:a7:db:79:f4:20:04:1b:b0:8e:74:aa:75:
2b:36:a8:f2:c1:1b:58:67:29:37:80:5d:28:a5:1f:4d:a1:33:
90:d0:07:03:68:22:56:b6:0c:e4:67:aa:56:99:31:77:1b:cd:
f4:1c:f8:ff:eb:96:57:d2:fe:ea:a1:14:9c:9b:a6:d7:91:c8:
72:bb:fc:63:63:c8:01:61:43:b0:d4:47:e3:d5:f0:13:0f:d7:
1d:fc:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:32 2025 by rpki-client