Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab4207a9-6bfe-48f8-9c57-11c598dea35d.roa
File: ab4207a9-6bfe-48f8-9c57-11c598dea35d.roa (raw, json)
Hash identifier: OzloPIL5IxunP27LIP00XdXVlWSP8js2LNdVM0O6oC0=
Subject key identifier: 99:C6:8A:53:EA:5B:E8:D0:EA:14:D0:BB:98:D6:96:3F:76:85:A0:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2AE8C1DF7809E627521A6CA72C6A358073D0907A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab4207a9-6bfe-48f8-9c57-11c598dea35d.roa
Signing time: Sat 29 Mar 2025 00:50:29 +0000
ROA not before: Sat 29 Mar 2025 00:50:29 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.236.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e8:c1:df:78:09:e6:27:52:1a:6c:a7:2c:6a:35:80:73:d0:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:50:29 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:f0:66:37:8a:87:d7:2e:4e:b3:e1:1a:8e:
90:cf:58:e8:d6:9d:8c:bd:43:31:bd:1a:0e:bd:0c:
17:78:bf:11:d7:ac:28:14:ac:12:49:95:69:4f:06:
21:42:86:19:88:98:29:96:27:90:7f:47:ed:44:a4:
73:8e:cf:11:aa:ce:46:88:0e:37:d7:97:42:a4:06:
d8:09:b4:72:49:91:58:7f:56:fe:65:0f:dc:84:ab:
55:21:40:67:3e:2c:41:4d:e5:9b:98:ef:2e:2c:e2:
04:f1:28:97:7c:56:1e:85:fe:b9:31:0d:35:fb:79:
63:da:f2:10:37:88:a4:3e:11:06:2d:0c:17:12:66:
19:ab:d2:c5:c0:3e:1d:85:ed:0a:e5:2f:32:85:49:
fe:22:94:72:1e:ce:79:9b:33:a4:49:38:0c:ef:f7:
c4:11:b5:9b:2b:60:e9:83:72:a3:d6:af:06:dd:78:
7a:72:53:44:8e:5a:49:4a:f0:d5:a8:3a:75:1a:59:
2f:31:44:07:18:99:54:d0:d5:b0:80:5b:5e:31:4b:
37:51:71:2a:39:02:d9:9c:8f:b5:c8:bd:0e:84:cc:
87:37:03:24:e7:54:1f:c4:96:dd:97:24:6a:ff:4d:
70:c5:a3:84:27:72:e0:4b:e1:9c:51:f6:65:09:7f:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:8A:53:EA:5B:E8:D0:EA:14:D0:BB:98:D6:96:3F:76:85:A0:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab4207a9-6bfe-48f8-9c57-11c598dea35d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.236.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:a7:1e:13:34:82:58:16:44:fd:fb:ef:8d:43:f5:14:5d:be:
eb:41:02:66:ca:99:a2:ec:92:d6:d7:8c:0b:23:34:b1:f2:d7:
18:af:8f:c0:ea:37:df:78:34:85:03:bc:e0:11:a3:bb:77:51:
b7:10:9c:f4:51:2e:a9:93:20:ab:79:b5:a7:e3:cf:8c:87:16:
81:1a:f3:0b:d6:d5:52:da:c7:cb:56:ff:f2:7c:4f:b9:8c:a4:
f1:c3:6e:9e:16:4a:b2:44:07:fa:b4:3b:17:91:64:18:72:b2:
de:1e:d2:96:99:03:1d:f6:10:53:97:ae:a4:39:be:88:75:a6:
8a:bf:0b:01:a1:ae:2b:8e:b3:c8:13:c5:3c:36:a4:d3:c7:29:
12:60:06:3e:02:1e:73:a5:38:34:be:5d:23:eb:31:b2:83:72:
f7:08:4e:b2:30:82:73:16:b6:9f:4a:37:3e:6d:6c:6e:da:d9:
cb:26:f2:ff:ad:2c:ca:19:cb:a5:d0:2a:9a:7f:fb:0c:d9:f2:
80:a4:91:46:f7:5f:53:07:c4:62:3e:09:eb:4b:c4:8a:2e:02:
cf:1a:98:d6:f8:ec:c9:d4:07:59:9c:65:03:e7:85:6b:41:40:
af:3b:ac:1c:a7:2b:9d:aa:bb:c5:2a:b1:ca:6d:d4:88:ce:47:
27:8a:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:48 2025 by rpki-client