Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
File: b624d9cc-a7a2-4009-8cac-c0856276648d.roa (raw, json)
Hash identifier: 4aGbJB+pi9qI7YMQBnpiwy6zc0IO5UYGHzQ8oOGmsbE=
Subject key identifier: B5:8C:32:5C:A9:F0:94:67:C9:9D:A9:43:FF:02:2F:FA:46:58:12:5E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7979C72A427AACECD4AE123A1317B4ED9659E1F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
Signing time: Wed 19 Mar 2025 00:21:10 +0000
ROA not before: Wed 19 Mar 2025 00:21:10 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.114.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:79:c7:2a:42:7a:ac:ec:d4:ae:12:3a:13:17:b4:ed:96:59:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:21:10 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:93:55:54:9b:56:ba:b4:98:51:44:fe:c6:
cd:7f:03:63:55:37:4d:ee:33:19:5f:63:3d:5e:5e:
58:08:dc:c6:66:9c:a2:4d:ce:af:8d:8c:0c:d7:61:
ff:d5:5a:7a:30:6b:d2:56:e8:92:69:99:82:08:c3:
87:11:c2:33:b1:2a:03:ab:b0:fd:be:39:25:15:e6:
db:64:07:cb:23:1c:51:dc:7e:6a:95:cc:04:c0:84:
ca:09:3d:9f:5a:69:e4:b9:1b:84:2d:62:1c:9d:c4:
5d:db:66:1a:ea:26:57:72:55:6a:43:3f:c7:6c:ec:
bb:88:c1:97:d3:7d:a5:79:90:18:c3:73:6e:79:3d:
3d:07:34:9a:11:22:a0:f4:c1:12:a9:98:4f:ca:a8:
be:c8:f2:eb:4c:69:63:b0:49:eb:e9:3e:6a:12:80:
c7:76:3d:af:dd:a7:1c:35:59:fc:21:76:82:99:10:
4b:51:b1:86:63:97:27:5a:e1:bf:db:0b:de:ba:84:
b4:27:c1:1d:06:7a:c5:a9:e4:d8:34:c9:60:ca:7c:
be:60:c8:80:74:3b:6a:a6:b1:09:5f:db:d2:89:12:
b1:76:cd:af:a4:6e:11:b8:c8:45:f7:9f:a9:42:a3:
b5:d0:32:ce:4f:62:11:9c:96:9e:08:ce:5e:82:b9:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:32:5C:A9:F0:94:67:C9:9D:A9:43:FF:02:2F:FA:46:58:12:5E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.114.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:b7:68:37:e6:8c:bd:09:25:d9:e5:42:04:49:68:ed:af:56:
75:22:30:95:fe:6d:82:74:07:2b:c7:2b:c3:43:40:c7:b6:a0:
c0:48:e9:9a:ab:8c:77:df:d8:8e:40:d6:47:cd:b2:46:ab:cf:
45:0d:fa:36:22:95:55:ac:fb:4c:e4:7d:f3:3d:f8:2c:cd:a7:
61:5d:5a:3f:53:d8:c2:0f:1f:4b:a4:31:25:a1:18:10:9b:0b:
f5:6c:69:9b:3b:d0:97:e6:ec:19:a5:81:3b:1d:4f:35:62:1b:
d1:e2:c5:a9:e6:ec:36:0c:64:a6:3d:2d:ee:7d:d3:25:d6:74:
3a:b0:d9:53:8f:89:56:f1:15:89:b6:3a:17:bd:87:c1:e4:79:
c3:37:b3:99:1e:ec:23:38:14:c2:8d:af:fb:4a:db:0f:c0:f0:
dc:38:e6:e2:ed:81:0f:a0:6f:7c:73:e1:86:76:01:96:a7:eb:
a2:ba:64:71:b0:dd:93:b5:c9:95:a6:50:b3:fc:d6:41:ef:58:
f2:65:cb:76:fd:c7:b1:17:4c:f7:fc:bd:2d:fc:9c:b5:44:b7:
29:d4:bf:5a:0c:2a:9a:bb:d3:7b:e8:1f:67:86:83:ef:f4:c0:
67:12:92:5d:e9:ff:67:bd:8c:ec:ee:18:ed:57:d7:f1:a7:2a:
81:5e:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:11 2025 by rpki-client