Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa
File: ef59c634-b428-4d89-99f2-8f22503d93d7.roa (raw, json)
Hash identifier: Kw/GzFIHVz6ydoM1da93zJXqGc0R1PEJEh4uSuvB4CI=
Subject key identifier: E9:8B:DF:C1:7A:AE:2A:B1:4E:04:6E:27:2F:7A:54:6A:45:EF:9E:8D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A2FE36F832315AE2B122B3C6A36DE787E4D71F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa
Signing time: Sat 29 Mar 2025 00:40:22 +0000
ROA not before: Sat 29 Mar 2025 00:40:22 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 161.193.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2f:e3:6f:83:23:15:ae:2b:12:2b:3c:6a:36:de:78:7e:4d:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:40:22 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:39:00:de:68:b3:55:55:aa:fb:a9:73:13:
9e:ac:ea:c4:73:89:9d:2d:72:49:14:e2:0c:ac:57:
b5:84:a0:9d:ff:11:aa:69:97:79:25:9c:ec:7f:bf:
7d:a7:4c:b1:ba:98:9b:77:7a:f3:80:34:bc:ba:bd:
7d:58:d7:58:09:c1:39:e3:cf:d5:4c:dc:10:43:bf:
c9:92:d9:53:86:a8:5d:a2:a1:7c:18:19:2a:09:77:
16:74:68:36:c2:6c:02:36:85:f0:b3:52:97:fd:ef:
3a:ac:34:4f:dd:7d:7d:9a:fb:ac:6b:3a:11:d3:76:
7a:ae:b0:0f:37:c7:07:5b:7b:83:49:b2:2f:99:f8:
75:de:37:8b:99:3b:e8:fb:c5:c4:3c:80:4d:72:53:
50:9b:2e:ce:1a:30:49:9c:4b:db:e6:63:c2:fc:04:
2c:d9:df:51:f8:2c:d4:6a:71:db:43:9c:d5:5d:c5:
36:6b:99:27:37:74:e8:bf:08:fa:75:98:e4:05:fb:
1c:bf:d7:d8:e4:c0:2f:8d:e9:9e:b5:ea:e1:7e:ae:
41:97:f5:89:fc:25:74:43:a3:58:d9:77:d9:ff:60:
55:9d:d2:a9:b4:23:f3:a4:9e:06:05:a9:7c:e0:66:
e8:29:42:fc:46:65:bd:1a:39:e1:72:74:94:a5:53:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:DF:C1:7A:AE:2A:B1:4E:04:6E:27:2F:7A:54:6A:45:EF:9E:8D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.193.128.0/19
Signature Algorithm: sha256WithRSAEncryption
08:da:e5:74:a7:ef:28:69:1f:63:29:bc:e4:80:54:a5:7e:6f:
eb:25:89:a8:c2:c3:53:f0:90:d2:60:50:81:8b:c4:7e:c5:5e:
ae:33:dc:97:f5:9a:01:f2:15:92:45:e7:bc:20:b2:ac:4c:46:
d3:d1:82:8a:9c:80:cd:eb:59:df:60:f8:6a:8c:30:3e:85:c9:
fd:8a:3b:7b:e9:18:29:2d:9f:0b:0e:e7:47:10:fa:6a:48:60:
bf:b1:cc:02:e8:86:af:eb:91:b0:37:d5:df:ff:f2:42:08:c6:
6c:25:56:eb:2b:be:17:b6:97:d2:dd:02:68:3f:21:02:4b:2c:
90:30:a9:5f:ab:51:30:b3:2f:5c:b4:b8:29:cd:b2:89:9f:42:
4c:99:07:27:26:bd:c7:91:c0:b9:0e:a3:92:b7:2f:6f:67:89:
07:e9:50:a4:1b:a2:89:17:a1:c9:14:4c:87:74:63:4a:b8:6e:
82:0b:ea:bb:6c:b1:18:69:2f:f8:1e:e0:f6:e8:ee:de:42:fd:
2c:74:13:31:02:9b:5d:10:b0:78:42:32:75:1b:d5:83:ae:db:
84:f8:36:c9:f5:eb:9e:4a:8a:64:52:3d:52:54:1a:53:a9:3c:
c4:f0:26:8a:19:05:fb:9f:ff:f1:d3:7f:b0:23:c6:7b:75:70:
1f:92:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:38:22 2025 by rpki-client