Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a2426-22bb-4acf-ba82-9cc75ad6512e.roa
File: d52a2426-22bb-4acf-ba82-9cc75ad6512e.roa (raw, json)
Hash identifier: xcSnJkSr93Z4SAB/xHgUV1hhxNp2GuHQ5Wz4KKSxt3Q=
Subject key identifier: 87:DD:69:73:8A:FD:B1:45:24:12:04:D3:F2:32:52:C6:59:55:DE:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11115727F6FA34E2F75F4ABF4974B3DF8006B797
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a2426-22bb-4acf-ba82-9cc75ad6512e.roa
Signing time: Fri 14 Mar 2025 15:00:11 +0000
ROA not before: Fri 14 Mar 2025 15:00:11 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:11:57:27:f6:fa:34:e2:f7:5f:4a:bf:49:74:b3:df:80:06:b7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 14 15:00:11 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:f2:f4:fd:7d:fa:d7:7d:d2:05:ef:17:1e:
96:66:4e:87:e9:4e:d0:3b:22:e3:26:86:22:9e:80:
e5:fa:cd:b2:d8:0f:ad:98:03:7d:91:18:1e:5e:ea:
d3:f4:42:20:74:4e:4b:62:c4:c1:42:a1:8b:47:65:
95:43:e7:1b:43:57:3e:c9:f6:92:fe:64:5c:ec:67:
94:97:73:f1:3a:47:58:0e:00:c6:34:0b:3e:54:4d:
b9:fd:57:7e:a6:b5:d3:89:a9:88:36:6f:7e:ab:a6:
1c:e0:a6:87:cd:d3:6d:06:54:de:3a:51:91:e2:a6:
b8:67:2d:fa:18:cf:e0:61:cb:2f:00:6c:b9:d4:5d:
1b:a1:d3:cd:76:85:97:b3:a1:28:82:b0:98:7a:4e:
55:6e:d5:83:f5:39:8d:58:6b:8e:9a:49:f7:f2:60:
90:4d:32:5c:62:13:9f:d0:d2:ea:24:9b:cd:01:31:
4f:f2:c8:dd:e8:ac:b6:65:99:84:98:69:9f:54:74:
5c:f3:da:6f:af:59:a1:32:e5:4b:df:04:a2:b6:f0:
bd:8f:9b:be:62:60:85:7a:7b:39:a7:7d:91:50:95:
10:d0:ad:88:e9:8b:dd:ee:3d:cf:d1:8b:bb:34:47:
36:08:b5:18:2f:f2:79:c7:e8:52:f5:7e:98:fe:a0:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DD:69:73:8A:FD:B1:45:24:12:04:D3:F2:32:52:C6:59:55:DE:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a2426-22bb-4acf-ba82-9cc75ad6512e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.247.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d2:eb:03:df:af:fa:65:39:db:20:44:dc:d7:01:0d:f2:7f:
b6:18:12:cc:17:0c:43:81:ab:c3:af:78:ad:2c:87:ab:03:c8:
73:88:1e:9c:d3:58:28:f5:d7:e8:39:1e:1b:eb:5b:f7:3d:2d:
c7:44:31:de:97:b4:08:c6:f3:7b:c9:9f:26:f9:80:4c:c5:37:
12:ef:3c:db:82:59:87:f2:ac:57:3d:ed:34:e1:b8:da:bd:84:
bf:78:b8:c1:e3:67:75:70:19:cc:21:ba:21:29:7a:96:df:f9:
3b:83:4c:fc:1c:d8:cf:d4:0e:61:09:65:45:fd:70:1c:1a:5b:
5e:5f:a2:d8:9e:f1:60:10:8e:b3:69:e1:25:d1:04:26:fb:14:
4b:b7:c1:7d:94:d5:de:59:56:74:71:c0:6d:bb:c7:81:ae:4a:
40:e5:8a:f3:5a:4c:db:0b:1e:6e:a2:b7:d8:c3:19:91:05:64:
78:d2:22:cf:03:ee:07:a1:96:7a:ed:e7:7b:d5:f5:a4:c7:50:
bd:df:29:14:70:7f:19:2e:68:1e:e9:c6:43:53:b8:88:11:72:
0e:b8:c3:2e:75:2f:fe:5b:45:09:42:08:63:94:cb:ef:3c:59:
06:b8:71:b4:31:05:89:af:80:72:23:df:8c:16:66:a0:72:dc:
f9:46:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:57 2025 by rpki-client