Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa
File: b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa (raw, json)
Hash identifier: vhgLG0lXs/lUUnH0fTncsfitye1hTQZEgXa/h+rebFg=
Subject key identifier: 87:72:54:77:16:30:C7:A4:E5:02:7A:6F:DF:56:30:ED:A6:83:9E:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 660DA2D8B684CE58BD4F53050526BBF87BE12244
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa
Signing time: Mon 24 Mar 2025 15:50:12 +0000
ROA not before: Mon 24 Mar 2025 15:50:12 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0d:a2:d8:b6:84:ce:58:bd:4f:53:05:05:26:bb:f8:7b:e1:22:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 24 15:50:12 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:1f:9a:96:7a:24:2a:2b:f8:68:a7:74:96:
f6:5f:7c:ee:3a:de:15:d1:8c:65:7a:2c:e4:57:26:
59:4a:89:94:e6:52:d6:d2:f0:19:e6:17:13:11:f3:
61:e7:63:4d:79:a7:3e:98:c8:14:e4:64:f2:6b:f4:
d1:79:ae:7f:a8:48:c3:d2:4b:f7:30:be:a6:87:d9:
6d:a0:53:6a:b4:4d:d1:31:38:98:6c:cc:71:90:f9:
9f:da:58:bb:6e:30:b5:d1:98:bc:cf:22:2c:a5:0f:
89:ac:2a:97:46:b7:cc:8c:26:bf:30:6b:53:89:ec:
63:7f:67:6b:90:46:2a:d5:27:3f:b2:ff:66:e1:61:
fa:69:4a:4e:56:0d:8d:58:a7:d4:d2:b9:97:73:3b:
3b:71:56:31:0e:ca:b1:56:18:54:fa:2a:11:2c:94:
81:0f:14:aa:ec:9d:03:90:d1:45:3a:c5:f9:ce:b6:
6e:97:6c:24:4b:3d:55:92:73:57:a7:4b:0c:16:0b:
95:ee:20:b6:37:5d:69:7a:45:7a:a8:42:8e:7a:58:
e0:d4:76:e8:d8:7e:35:c8:ba:95:55:c6:36:e0:e3:
9d:70:b4:67:9c:99:0c:68:88:75:66:82:94:ce:1d:
b2:29:b8:9f:0f:db:04:d9:7e:99:ad:77:65:23:a3:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:72:54:77:16:30:C7:A4:E5:02:7A:6F:DF:56:30:ED:A6:83:9E:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.176.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:de:af:7f:f2:71:11:da:92:00:30:dd:32:62:79:f1:35:87:
1f:dc:cc:05:a1:39:fa:34:16:31:2c:c4:5e:eb:70:db:0a:de:
ba:52:ef:be:3d:d5:d2:3e:d0:cf:f4:ce:90:4f:db:66:f3:97:
e4:b3:a8:41:75:22:9f:58:04:74:c9:41:96:46:fa:3a:35:ca:
05:28:18:b2:94:9d:d4:39:7b:ce:af:fc:b3:33:fc:bd:23:ee:
34:ad:e5:4a:ef:f9:9a:cf:f0:d6:f2:91:95:41:07:77:90:7f:
34:60:3a:07:a4:03:a7:aa:4c:4e:73:64:1f:13:d3:6d:84:eb:
f5:6a:e9:15:70:3a:fb:d1:60:9f:b7:3e:40:99:b4:1e:1c:47:
36:b0:39:ed:1c:71:40:5d:46:3b:c6:7f:da:1a:15:de:6d:de:
3b:64:39:20:38:3b:4a:bc:5e:79:e5:4c:d0:f2:69:91:6d:65:
07:0d:08:e4:f3:44:34:d4:3b:c9:73:76:7b:d1:16:cc:c0:e5:
88:b4:3c:44:83:f2:1e:f6:b0:10:77:31:58:80:e5:84:18:eb:
ce:2c:d1:a4:e5:a1:a0:6a:83:ac:af:b2:7b:5b:c8:49:03:cf:
92:08:f4:31:4a:aa:cd:e6:b6:ce:89:85:88:42:13:c5:74:f1:
ec:d7:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:49 2025 by rpki-client