Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa
File: d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa (raw, json)
Hash identifier: g+JnskFam8PkF/zYO2Y5TZOPUB1vJHEk7KKtCXyr3VI=
Subject key identifier: 8F:2E:FF:D6:28:61:D6:2F:99:6D:79:F2:BB:90:44:A5:9A:DC:6F:02
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F80E4EFE011C792E3CC0674FF426E77A0C214B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa
Signing time: Wed 05 Mar 2025 00:21:22 +0000
ROA not before: Wed 05 Mar 2025 00:21:22 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.228.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:80:e4:ef:e0:11:c7:92:e3:cc:06:74:ff:42:6e:77:a0:c2:14:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 5 00:21:22 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:d2:c7:dd:c1:03:3a:a9:1b:f6:5e:07:53:
f5:ee:82:ed:11:b4:0d:76:06:16:64:d7:51:a9:70:
2e:7d:5c:10:61:d4:8d:03:f1:c4:75:cb:a7:0d:20:
b0:c0:1b:6a:28:62:9e:cc:6d:fe:b5:5c:04:bb:21:
30:d0:c4:23:ff:49:9e:86:72:bf:2a:37:b7:ae:69:
fd:f0:fd:9b:0a:0c:66:50:59:93:c6:6f:e6:9f:8f:
d0:2a:b4:f9:bc:ac:d3:4d:76:5b:4f:2b:37:94:2c:
43:60:05:21:e7:12:21:4a:db:0a:a7:b8:62:85:b8:
0d:5e:b9:54:c1:f5:69:4a:e5:95:6e:00:a4:fc:5c:
ce:29:c3:d7:c2:33:10:5a:7d:8f:a9:8f:d1:ee:1e:
96:5a:ba:e5:e9:ff:9a:fd:f2:7f:8a:15:c3:db:9b:
04:52:4d:45:85:95:ed:b2:6d:5c:9f:cb:af:3c:01:
7a:03:55:56:a0:ef:c0:6e:9d:83:b0:e2:5b:dc:7b:
7e:71:ee:6b:5a:7a:93:ec:8c:f7:2c:77:fa:2b:36:
7f:db:a8:a7:96:f3:97:41:18:1e:75:2e:a1:75:cb:
72:52:60:c5:d8:02:e6:4a:7b:5c:4d:28:0a:cf:49:
f9:cd:d7:e0:6e:3f:1d:77:96:49:bf:32:d8:8e:57:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:FF:D6:28:61:D6:2F:99:6D:79:F2:BB:90:44:A5:9A:DC:6F:02
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.228.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:a6:c3:b0:ac:2a:19:8f:79:0e:1f:f9:fc:df:45:10:40:dc:
48:23:f2:61:14:23:4c:1a:80:34:86:4a:08:92:ed:7f:1f:c2:
fa:e3:80:80:d7:f6:f9:21:85:f3:0d:3b:00:0c:3d:f8:2d:db:
45:cd:0c:df:f5:8d:36:dd:af:85:8f:9d:5a:e7:60:e3:51:48:
d4:80:fd:45:92:ab:57:48:4f:ad:b1:6a:a9:c8:78:0b:59:7b:
cd:6a:fc:f9:34:6d:fa:75:ba:08:a4:da:eb:b9:d5:5f:94:3f:
ff:d9:3b:13:e8:4f:a0:13:a1:64:f4:09:34:5e:08:48:f7:da:
cd:30:41:57:34:1e:75:79:9d:19:6f:73:a0:4b:e0:d4:75:6b:
bf:c6:04:53:a3:02:1e:bc:bf:36:a3:2a:50:ef:1a:5e:ea:d5:
81:7f:75:c4:11:ed:16:cc:8e:cd:22:c7:9d:3c:78:49:ba:79:
07:b6:37:e9:e5:a1:75:f7:9c:b2:b5:c2:e3:8e:ad:08:c1:39:
bc:bd:18:9d:20:6d:31:b1:99:2d:f9:bd:d0:3b:86:ac:6c:6d:
d6:53:f1:7b:9e:fd:93:20:a4:ad:a5:9d:68:26:5f:ac:f3:8d:
8f:09:67:92:83:78:4c:9b:d2:14:b7:7b:f3:e7:d3:1c:2c:f8:
5e:4e:c9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:11 2025 by rpki-client