Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa
File: cd521a01-1b09-4583-84c9-7dba7c86b768.roa (raw, json)
Hash identifier: FNgSAPjTSC6XVmVk0oezOoOKjGP1tp+xneMa1xwJHIc=
Subject key identifier: 0D:30:93:5B:83:3F:D4:F4:BF:FE:39:69:C5:AF:88:8D:97:94:4B:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26D1475EFC32EF1AB7F53034426CCCD0FAB590D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa
Signing time: Wed 19 Mar 2025 00:11:06 +0000
ROA not before: Wed 19 Mar 2025 00:11:06 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 184.72.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d1:47:5e:fc:32:ef:1a:b7:f5:30:34:42:6c:cc:d0:fa:b5:90:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:11:06 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:da:51:87:3c:9a:20:84:1f:c7:a0:ef:47:
57:f6:fa:bd:e6:31:a3:1e:89:7d:28:2e:d8:8e:ea:
34:de:e2:08:7e:bf:25:5b:32:6d:04:d0:30:46:2e:
20:19:84:84:50:68:b6:aa:8a:c5:fb:41:ba:c8:0c:
81:62:bf:d8:e6:87:7a:31:b2:24:00:97:d0:bb:74:
8d:81:d6:d1:81:a7:96:b6:d5:6a:94:7b:94:c4:1e:
34:b4:40:e5:47:f3:a5:85:70:23:73:e6:bc:da:43:
df:7e:d1:79:03:cc:ea:7e:74:10:29:88:00:b2:de:
c1:72:a6:0d:74:c8:d9:48:cc:40:6a:56:91:59:1d:
ba:92:ef:87:ab:5a:40:c0:c6:fc:b7:e3:3e:10:5f:
a3:18:96:f5:c6:4c:26:69:1d:bc:a6:bd:ad:3b:fc:
6d:1b:85:4c:27:5d:95:74:95:19:be:1d:ef:57:02:
b7:a5:cc:20:76:cc:99:73:75:b9:08:7d:de:a4:1d:
83:bc:4c:74:2c:0d:50:57:9a:c4:ec:96:f4:d5:9f:
91:49:4a:dc:03:6a:ee:d1:8d:c6:48:b7:7d:7a:2b:
6a:20:8f:95:6e:75:50:41:9c:c2:15:09:bf:7f:37:
1d:1d:5c:9b:18:3a:42:f7:8c:33:83:24:90:73:2b:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:93:5B:83:3F:D4:F4:BF:FE:39:69:C5:AF:88:8D:97:94:4B:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.94.0/24
Signature Algorithm: sha256WithRSAEncryption
66:82:71:ee:b4:a2:72:ad:25:b9:fc:6d:e5:9d:9d:a3:47:98:
2a:34:ff:45:65:12:8a:3b:ba:d1:43:07:ce:ab:c6:68:d9:4f:
23:e4:89:14:e1:75:a8:bf:50:f1:fd:36:f3:51:c8:7a:14:c0:
50:0d:9e:dd:d9:36:a1:57:04:1e:87:25:ec:ff:f3:c7:76:9d:
6e:66:8f:a4:29:98:1a:ae:e9:fc:30:e9:32:0a:5b:e2:c9:c0:
d3:56:60:20:c1:61:8d:44:92:67:28:25:43:3d:dd:44:56:50:
5d:da:06:c7:41:7c:97:b1:cb:52:48:d8:f9:0d:5e:03:c5:1a:
90:dd:06:ab:db:fa:5d:dc:aa:70:48:44:e9:b0:f7:c0:d3:e5:
a0:9c:50:0c:32:42:e2:da:06:98:6e:3c:40:50:5b:42:eb:8e:
69:e8:0c:2b:f9:83:6a:df:b4:3d:a8:9b:34:d9:75:f0:57:44:
14:7f:4c:42:80:51:c7:f4:10:2b:97:25:1c:77:a2:76:86:de:
62:72:fa:bd:78:b4:63:a5:1e:56:26:0b:3a:e4:b3:db:73:fd:
ba:1c:82:72:50:a4:84:47:de:6d:8b:96:06:24:ed:1d:59:7b:
66:b0:92:1a:c2:f5:0f:52:a8:94:f5:7d:de:2b:52:64:d8:af:
a3:bb:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:55 2025 by rpki-client