Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39ad442-6343-4bbf-8019-22387be1de5c.roa
File: a39ad442-6343-4bbf-8019-22387be1de5c.roa (raw, json)
Hash identifier: k+C+TgJWw1cTid4OXjW7v39cjrqiRwISrLf4j90xM34=
Subject key identifier: 78:17:C9:16:B9:61:39:AE:A2:99:A3:D9:EA:56:EE:99:BA:AF:E3:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66D164D4B394D9AAC7300CB76100F21C1B42BD4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39ad442-6343-4bbf-8019-22387be1de5c.roa
Signing time: Fri 28 Mar 2025 00:00:55 +0000
ROA not before: Fri 28 Mar 2025 00:00:55 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 157.175.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d1:64:d4:b3:94:d9:aa:c7:30:0c:b7:61:00:f2:1c:1b:42:bd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:00:55 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:c9:fb:28:70:b0:49:e5:f2:f5:d3:8a:2a:
c4:ef:c6:ac:99:a2:e8:87:55:a1:22:57:29:60:13:
bc:2c:4f:eb:90:e5:60:8f:f1:73:e1:d0:f7:f6:f5:
e3:f4:ef:3c:a7:e7:bc:7c:b8:f2:c9:ad:5c:47:8e:
dc:53:70:e6:28:94:ee:9e:36:d0:1d:01:82:ed:34:
d8:a4:e6:65:31:88:3b:ff:67:c1:bf:90:f9:40:e1:
af:a3:77:99:4d:f5:4e:d0:70:0f:f6:ce:20:bf:fa:
3d:48:cf:d6:8d:b0:c7:3d:ba:2a:7d:a7:f1:73:ea:
17:19:48:37:a6:d1:19:88:db:ff:67:80:27:40:67:
42:86:ed:f9:74:64:d9:40:07:a2:71:2c:5f:77:92:
3b:46:f5:1c:99:48:97:39:d6:a8:8b:d7:ef:8a:38:
20:ae:2f:b2:0c:2e:90:8b:48:fa:39:e5:7c:10:ed:
14:c1:bd:8c:21:6f:dc:22:1c:aa:8f:5a:43:db:30:
52:d2:c8:f4:19:c2:cb:ac:6a:00:2b:d1:80:f0:c3:
fb:d9:4c:7c:be:29:3c:13:2e:7d:94:a8:59:f2:57:
c6:cf:51:52:b6:41:7e:5f:bc:fb:93:ae:36:40:ac:
ed:90:2d:fb:fd:c8:39:7f:27:55:e1:b9:12:e1:b1:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:C9:16:B9:61:39:AE:A2:99:A3:D9:EA:56:EE:99:BA:AF:E3:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39ad442-6343-4bbf-8019-22387be1de5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.175.32.0/19
Signature Algorithm: sha256WithRSAEncryption
85:33:e3:eb:6d:83:78:90:12:03:0c:a7:57:f2:26:00:1f:53:
f4:83:66:8e:29:ce:74:55:0d:37:b6:d5:3e:b7:3f:44:1f:09:
18:a6:d5:6b:5d:84:39:1c:7f:46:1f:f7:68:d8:3f:6f:87:df:
e1:08:71:05:85:93:3a:9b:7a:0e:f6:bb:b9:84:49:18:03:a9:
c3:26:76:e0:7e:5e:d2:03:9d:2f:80:2d:5d:37:19:10:69:fd:
0f:f5:fc:25:1e:44:61:42:25:7e:14:44:81:3d:b1:38:f3:c7:
2f:a9:a2:fd:cf:e6:b4:ab:a0:ae:cf:3c:e5:b1:ca:2e:13:a5:
18:06:1b:15:72:fc:48:61:70:57:1a:51:b9:bd:d9:cf:95:1c:
6e:5a:a5:69:4f:dd:71:2c:66:13:22:cb:a6:43:f3:bd:c5:9b:
2c:de:f1:ae:b0:41:2e:a1:58:84:52:56:cc:11:08:bc:20:82:
dc:c0:db:1f:a1:e6:3e:48:5d:82:08:d4:03:d9:60:68:4c:c3:
34:2c:13:65:f5:41:f6:83:35:df:92:5b:f7:f8:85:7f:ba:8d:
c6:55:8b:b4:3f:27:ef:01:42:d6:2b:7d:1e:58:cf:02:3b:ec:
0f:22:54:fb:60:c1:39:f0:4b:d1:e3:f7:a6:f6:d6:11:86:e5:
73:84:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:27 2025 by rpki-client