Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acb4231e-95b7-4d93-8789-ea5e5ac04cad.roa
File: acb4231e-95b7-4d93-8789-ea5e5ac04cad.roa (raw, json)
Hash identifier: 0xFbp/qUjngoPePX0026Umz5sazNsJzDp/OaPZI/3Xs=
Subject key identifier: 17:4F:25:68:85:A7:9C:4F:73:1D:64:15:2E:5A:3C:ED:2F:78:D7:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 37728F1570006F7A0DE3F2E1FC470AFF54B75CE6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acb4231e-95b7-4d93-8789-ea5e5ac04cad.roa
Signing time: Wed 05 Mar 2025 00:20:16 +0000
ROA not before: Wed 05 Mar 2025 00:20:16 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 140.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:72:8f:15:70:00:6f:7a:0d:e3:f2:e1:fc:47:0a:ff:54:b7:5c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 5 00:20:16 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:00:16:af:60:2d:cf:50:15:79:0a:4d:bb:
77:f4:d6:aa:e3:eb:d2:56:34:e7:b8:fa:fe:6d:2e:
2f:45:f1:20:ea:99:69:08:68:08:b2:9b:8b:25:c8:
12:9e:2a:0e:5b:53:ff:85:71:8b:e7:0e:87:22:f9:
a0:1a:8c:54:b3:8c:df:27:2b:a9:1f:2c:53:32:f0:
40:3b:e2:0e:57:c4:49:77:cb:a2:fe:73:0b:28:b7:
80:d9:a0:56:2e:05:8b:0e:8a:f4:5e:93:b8:50:9e:
3c:9c:c9:59:38:b6:b3:70:77:0d:7a:7b:98:a8:af:
31:b0:84:2f:35:cb:1e:7a:cd:70:61:49:06:30:88:
ef:ea:5e:6f:a4:21:9f:71:5c:6f:06:cb:2a:9a:39:
6e:a8:04:69:ab:db:9d:eb:11:f2:2c:f6:37:68:a4:
9f:6b:c7:69:4f:bd:28:e1:ef:05:22:46:b9:63:8d:
bd:2b:c2:02:b0:c9:16:44:7e:29:aa:2b:e2:7e:ac:
cb:aa:93:27:ca:52:f6:80:0e:d1:8c:ac:b1:f6:03:
97:83:d3:b7:63:1a:b9:7e:2d:f4:96:a2:40:1a:53:
f9:54:b4:4e:e7:84:20:99:ff:0d:80:e2:80:f3:2a:
53:4c:a8:0d:ba:9f:5e:1e:21:4c:e1:20:9d:04:37:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:25:68:85:A7:9C:4F:73:1D:64:15:2E:5A:3C:ED:2F:78:D7:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acb4231e-95b7-4d93-8789-ea5e5ac04cad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:7f:1c:5a:49:4e:48:e8:b7:30:4f:b9:d6:7f:c2:31:76:d5:
b6:f7:90:50:08:fe:56:7e:b6:a1:c6:24:41:3d:4b:1c:4a:aa:
84:72:55:ae:0d:af:59:56:a7:2e:8b:d3:76:e4:a7:72:ec:c7:
b2:ba:63:16:17:6c:08:bc:34:ab:b8:b7:1b:cb:5b:d3:01:b0:
84:e8:ed:9b:0e:ca:cb:ab:a0:9c:98:d1:d3:32:ea:78:cf:b5:
eb:c4:85:fe:88:ab:a6:1c:3b:1b:f0:b6:b7:99:67:9e:46:e9:
63:28:f7:92:a2:24:15:e0:95:34:cc:4f:25:b4:95:3d:d7:6f:
da:a2:6c:bb:e5:38:1d:fa:71:71:04:f2:63:c2:7e:fb:4c:19:
8a:85:ac:b9:84:75:d2:de:a4:51:63:0f:d8:cd:d1:b7:21:9a:
c3:44:0a:27:09:75:fc:85:40:62:1d:3a:8d:5c:40:0a:ba:f9:
3a:59:cb:84:be:e8:21:7b:ad:44:e0:15:4b:c3:93:b3:5b:08:
a9:94:ea:5b:4f:0e:d3:63:f3:b0:07:5a:8d:d7:fb:97:23:9d:
a0:53:3c:ba:56:cd:6a:7c:25:17:d1:5f:ba:bb:22:09:1c:c8:
cd:9d:a2:a2:93:26:ac:68:f6:80:2c:9f:22:cb:f2:dd:ad:0f:
15:29:71:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:46 2025 by rpki-client