Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa
File: a51c6524-05cd-4515-90ee-87b113d6ce7d.roa (raw, json)
Hash identifier: 9xcSueOz7A/RVOlUd6HD+xfpy/7Jb7yiVukh4ZuP1Z4=
Subject key identifier: C8:CA:B4:5F:82:8B:2F:B1:77:43:D1:E1:2D:05:3C:00:36:19:C4:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 204D4219AAD0F835D14833FEDEA577D89E4FAF0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa
Signing time: Sat 29 Mar 2025 00:41:46 +0000
ROA not before: Sat 29 Mar 2025 00:41:46 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 146.77.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4d:42:19:aa:d0:f8:35:d1:48:33:fe:de:a5:77:d8:9e:4f:af:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:41:46 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:8d:e1:ad:7c:ca:a1:b9:dc:40:e8:b2:96:
a5:5c:23:eb:f1:83:cd:58:28:43:cf:b6:40:e1:69:
cc:b5:e1:c9:a8:bb:cd:e7:5a:6e:71:35:95:c6:20:
2d:df:8f:37:45:2d:c8:7c:0a:7f:c6:eb:07:ef:b8:
d8:c7:18:e2:b9:01:d9:39:64:e3:70:02:f7:79:f4:
5f:6e:4e:1c:1b:64:73:3e:d2:44:ca:c7:84:f4:a6:
e5:4c:ad:cb:61:ad:0e:80:74:28:85:5f:ca:94:d9:
1a:68:a3:c6:4b:d9:2e:69:97:70:43:2d:88:81:75:
0f:7d:a5:94:6b:ed:85:0c:e7:b2:7e:e5:c3:be:21:
d7:6b:3c:d4:45:3b:2e:fc:e5:b9:7a:cb:60:49:9b:
d4:56:76:4a:9f:d6:8c:52:7c:8c:b4:cf:bf:01:85:
43:94:f3:5d:44:ce:a3:99:c2:4d:f0:8d:b5:32:5b:
ac:1f:8c:05:6f:a1:35:7d:c1:60:13:c4:65:59:10:
c2:ce:96:18:72:6e:45:83:09:4d:0a:b7:8d:1e:62:
dd:6b:98:e5:6f:94:ff:a3:ac:8c:04:a6:b2:a6:c9:
43:e5:6f:52:d0:7f:f8:ee:e7:0f:11:31:44:fc:40:
c9:79:f9:89:a7:3d:87:b7:dd:64:b4:32:13:e9:b5:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CA:B4:5F:82:8B:2F:B1:77:43:D1:E1:2D:05:3C:00:36:19:C4:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:60:3d:83:5f:20:33:cc:83:a8:5b:c8:78:7c:80:b7:d3:57:
4d:25:20:9e:78:38:fc:41:77:16:9e:c6:2c:ed:9d:47:48:6d:
5e:aa:d9:74:af:35:0f:de:42:6a:1e:b8:95:6a:7a:45:d4:db:
8b:87:67:fb:53:05:fa:66:61:50:fc:e8:e0:80:85:1c:ef:a5:
ff:92:35:3a:a8:f0:00:6a:1f:10:80:ac:b8:90:ab:ae:f3:cc:
cf:5f:f9:b5:78:dd:9c:da:b5:ec:de:ce:ac:4f:8c:bc:72:87:
1a:61:58:2d:1b:60:50:0a:b0:78:bd:04:80:26:1d:70:10:86:
ec:32:c1:2d:a0:89:1c:bb:8a:43:07:fd:af:5d:e2:23:25:37:
f2:f3:ed:3f:94:56:15:2d:f9:ff:2e:ab:f1:38:62:aa:ec:d7:
3f:b4:4c:05:f6:07:0c:b0:56:de:f3:e8:98:37:3a:24:8e:7d:
77:c9:8c:9a:ce:22:05:c7:da:7d:59:79:df:6e:9d:4a:e5:9d:
24:29:1e:99:74:01:8b:ed:aa:9b:a6:31:fa:6b:73:79:b8:37:
02:50:4d:b8:a8:21:20:9f:9a:a7:7f:e9:b2:a3:17:ed:6c:ef:
b5:1a:b7:e7:11:79:c0:9d:d6:c5:ab:4e:66:48:f8:e5:b7:37:
08:41:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:32:55 2025 by rpki-client