Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a458e6c6-7bc7-4807-a074-51b2c4289147.roa
File: a458e6c6-7bc7-4807-a074-51b2c4289147.roa (raw, json)
Hash identifier: WnwnryaQq9MSv7oau2odEMvm9kbQ7Bbl3MSx+LZ4O0w=
Subject key identifier: 32:D4:F5:C7:6A:5E:16:11:77:70:53:07:45:3A:77:F2:6A:9C:45:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73C560A1F55D430698C1AB802CD07D504E525B9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a458e6c6-7bc7-4807-a074-51b2c4289147.roa
Signing time: Mon 24 Mar 2025 15:31:00 +0000
ROA not before: Mon 24 Mar 2025 15:31:00 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.21.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c5:60:a1:f5:5d:43:06:98:c1:ab:80:2c:d0:7d:50:4e:52:5b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 24 15:31:00 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:b6:a2:34:1f:7a:44:7c:24:90:2a:08:a4:
61:b5:05:a8:ea:7b:76:c1:b5:4a:8d:ab:47:16:81:
a5:ff:6a:79:79:82:86:51:c0:94:14:85:87:27:5c:
6a:fb:ac:da:d7:7b:a3:65:1f:18:2c:89:a9:a2:70:
c3:e6:ac:5d:8d:20:7c:eb:37:21:78:bc:1d:5c:f7:
07:bf:4e:c8:a5:a2:cf:0f:02:fc:88:a9:bf:6e:2e:
d2:66:dd:95:5d:15:6d:b7:8f:52:d6:fb:f7:45:9e:
92:9d:9f:e1:9e:1a:2c:4d:51:24:7b:99:e1:cb:dc:
b2:25:10:cb:cd:8b:ba:b7:48:bd:98:57:ff:94:61:
46:94:11:4b:fb:0f:f9:33:2a:99:4c:fa:31:07:d9:
db:34:30:46:81:3a:1e:67:cb:c6:a0:bb:f0:7e:62:
f7:3b:11:a4:22:36:31:be:51:91:fd:6b:b7:30:c5:
42:e4:6c:83:0f:fe:0b:66:e1:36:92:15:bc:b6:b5:
52:b0:b0:2e:e5:25:00:74:7e:d9:04:88:62:f9:29:
b3:f5:28:d5:05:a9:b5:62:17:9e:d6:c5:37:fd:c1:
f8:a4:86:4f:9f:d7:ff:74:c8:d5:bf:3d:ce:76:87:
e3:7d:d7:c9:01:fb:ae:ef:37:46:c3:ec:38:81:d3:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:F5:C7:6A:5E:16:11:77:70:53:07:45:3A:77:F2:6A:9C:45:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a458e6c6-7bc7-4807-a074-51b2c4289147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.21.246.0/23
Signature Algorithm: sha256WithRSAEncryption
82:ee:d3:40:e5:f4:8e:dc:65:98:59:39:7c:87:c4:70:97:b5:
01:b7:fb:fc:da:d3:e9:cb:47:43:54:84:9c:93:17:99:3b:13:
8a:a2:93:f8:d3:ad:6c:ef:1e:21:3d:62:c0:42:b7:85:49:e8:
07:28:77:18:a1:ee:94:e5:81:b6:45:69:5b:c6:4f:dc:f7:8e:
3b:8b:49:14:ad:60:35:6d:77:c6:9c:3a:08:97:ff:e3:f2:39:
24:58:5d:f1:8a:51:c4:0a:90:c3:78:30:c5:46:50:40:be:fb:
32:ac:74:41:f2:32:78:dc:bd:72:9b:c4:75:50:4f:f3:64:0d:
7f:b2:e4:53:2a:ae:2c:65:da:fe:f8:09:69:c1:bf:59:10:ad:
27:e8:f4:7b:78:ca:16:55:52:a1:b3:59:7a:d9:cb:9f:d9:d9:
9a:c8:56:32:6a:d3:96:44:32:c6:81:b3:70:f1:31:98:80:08:
cd:04:d9:68:cd:6a:0c:f2:98:d9:60:7f:59:af:3f:2d:ab:39:
c1:ab:62:40:20:fe:68:67:5d:76:a5:f5:1b:f5:9a:4a:20:e7:
ab:a1:aa:7f:d0:e7:9b:42:cb:ee:c6:47:1b:59:65:ca:03:5a:
ec:80:22:be:32:bd:c7:5b:84:f3:52:72:13:f6:06:22:0a:bf:
f3:be:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:26 2025 by rpki-client