Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa
File: eac672f7-9965-4a49-bc3b-231aecd7767e.roa (raw, json)
Hash identifier: 72qiiT6YqrJJrIDDapQ/v19ml7cVN8ZCTpM9EbbrHL8=
Subject key identifier: 65:22:97:C2:2E:91:BA:4A:55:73:D3:53:EC:0B:68:E0:92:55:27:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07FB093C31CE0989181F113AC498C09EBC7EF782
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa
Signing time: Wed 12 Mar 2025 00:21:28 +0000
ROA not before: Wed 12 Mar 2025 00:21:28 +0000
ROA not after: Wed 16 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 164.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:fb:09:3c:31:ce:09:89:18:1f:11:3a:c4:98:c0:9e:bc:7e:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 12 00:21:28 2025 GMT
Not After : Apr 16 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:38:62:91:f3:a7:fa:0e:6c:82:90:30:ea:
ef:a4:01:f6:45:1d:d7:54:85:62:90:4f:d2:e0:18:
25:8e:91:59:ca:05:9b:f4:d4:0f:6d:fa:bc:8c:92:
24:59:76:a9:4e:6c:74:ca:2c:9a:52:52:db:95:4e:
95:ea:ae:7b:c4:c7:4a:f3:27:8d:bd:fa:c6:df:8b:
4f:14:80:8a:b7:d1:15:24:bd:fb:cc:53:ae:52:23:
d2:dc:b4:bd:a0:69:7f:56:d8:aa:b9:2f:0f:42:80:
4a:50:49:27:16:95:7f:67:a5:67:65:eb:31:02:c3:
8e:01:bd:72:13:aa:05:a0:7b:ad:a1:a3:6b:ab:d1:
30:98:b4:b9:74:b9:23:b0:c1:5c:23:d6:8e:ef:a1:
40:3a:ff:fc:4f:5e:67:1c:54:de:a9:e0:59:68:03:
54:ab:68:f7:da:28:a3:7d:ce:8d:81:45:1d:c2:5f:
87:cf:20:5c:a8:ac:9c:3d:3a:73:37:89:28:63:cf:
d4:b5:72:f1:fe:cb:69:f9:21:0b:af:81:93:54:07:
60:f1:a9:6f:9c:07:1e:74:8c:b2:2c:c6:a3:1c:12:
29:e7:cb:91:3b:94:0c:80:1a:cd:04:6c:43:46:89:
83:57:68:20:87:57:98:56:4d:25:0e:54:58:e3:4e:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:97:C2:2E:91:BA:4A:55:73:D3:53:EC:0B:68:E0:92:55:27:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:74:bb:91:79:9f:d4:e7:15:dc:42:fb:a8:0b:80:e9:cf:2b:
b6:41:58:87:c7:ed:0a:6b:85:5b:f2:30:30:6b:e6:72:54:6f:
88:58:32:01:9d:ca:e4:6c:f3:c6:a6:14:e5:11:61:ac:af:b4:
36:da:f0:7e:57:91:9b:ec:f2:73:76:2a:21:b1:2f:76:45:0e:
a8:7a:ed:db:da:3f:72:cc:b9:f1:6c:53:31:00:85:28:0d:a1:
c0:33:74:6c:eb:48:49:41:9e:00:49:5a:29:95:72:b8:1d:87:
d4:ef:5f:e6:2a:98:01:93:4c:e8:7a:b6:0b:8c:df:6d:ed:e6:
74:ec:94:0d:e9:1b:55:2c:e8:fd:63:e1:4f:a5:eb:03:ab:5c:
13:08:1f:09:0a:a5:9c:86:5e:4a:12:07:99:88:fb:a1:63:4c:
8c:3d:df:cc:ef:e3:cc:3b:16:43:fe:22:7c:e0:13:30:f9:84:
7e:2f:da:a0:eb:c6:1b:aa:c1:80:a6:9a:48:4d:f5:25:10:0c:
e4:6e:b1:70:f4:02:31:70:2e:07:bc:27:5e:db:51:9c:05:a3:
fb:a7:48:63:89:9d:fe:88:59:cb:ca:ef:ab:ca:6e:ce:12:b9:
6e:89:29:4d:ff:5e:54:08:5c:20:1b:0f:9d:6c:0d:39:8f:da:
d6:ae:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:42 2025 by rpki-client