Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6be303f-6b48-4c2b-a9e6-b4a5db34818d.roa
File: f6be303f-6b48-4c2b-a9e6-b4a5db34818d.roa (raw, json)
Hash identifier: xqb5XGLuFzFGf6QL4d5zDIB3EaOc5ZfekioUYXNJixU=
Subject key identifier: DA:38:FF:C4:5E:2E:01:C6:56:7A:E9:DC:18:8E:F8:86:B8:DF:14:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B4933A1FF2F8E26A42152E2800EF53A3D9F71CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6be303f-6b48-4c2b-a9e6-b4a5db34818d.roa
Signing time: Fri 21 Mar 2025 00:21:30 +0000
ROA not before: Fri 21 Mar 2025 00:21:30 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.53.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:49:33:a1:ff:2f:8e:26:a4:21:52:e2:80:0e:f5:3a:3d:9f:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:21:30 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:e7:f7:4d:96:75:7f:6c:a3:24:8b:e6:9b:
24:df:63:10:eb:b1:f3:66:b5:e5:f4:f1:0d:02:7b:
a2:ed:44:d2:bd:34:d5:f7:8f:66:97:aa:f8:c1:6d:
6e:a9:be:79:20:42:fd:f7:41:93:63:1f:63:33:52:
47:07:74:ba:21:be:2c:7c:06:84:92:8b:23:88:f6:
b0:d9:a7:4f:06:ba:c1:d8:64:9d:35:e3:9a:27:da:
e6:5c:92:b0:2a:48:83:12:bc:69:65:bb:66:d5:e5:
11:44:e2:e7:21:9e:c3:4e:57:f6:a6:01:97:e8:9c:
ba:2a:99:34:07:2c:01:51:06:01:28:bb:e2:84:12:
71:20:81:b4:db:63:89:47:44:cc:92:d9:5b:9f:10:
03:9f:28:05:e9:a1:a6:0e:de:22:5c:9f:08:28:42:
78:e3:6e:18:39:3a:46:0a:05:a6:db:36:76:1e:b7:
a1:37:1c:b8:e7:78:e6:43:f6:a2:02:c8:88:d8:20:
d0:02:39:3c:f4:c8:36:79:10:21:16:4b:a3:c9:95:
0b:9c:90:a8:0f:35:f3:a2:a8:fe:d4:80:1c:98:8b:
de:d8:56:f6:cc:37:ff:46:2c:48:b8:cd:f6:6a:f4:
97:df:22:56:8b:c6:73:1c:82:9d:f8:62:b5:eb:12:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:FF:C4:5E:2E:01:C6:56:7A:E9:DC:18:8E:F8:86:B8:DF:14:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6be303f-6b48-4c2b-a9e6-b4a5db34818d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.53.128.0/18
Signature Algorithm: sha256WithRSAEncryption
af:05:aa:c0:3b:62:59:6f:83:62:32:ec:c0:40:bc:5b:e7:22:
bb:3c:1b:85:ae:b8:d8:5e:47:20:ac:f3:1e:c5:02:b0:d1:99:
5b:13:e1:fd:8c:c8:ee:1b:92:2b:83:59:89:92:e0:bc:45:99:
8c:60:41:63:56:a7:fa:fd:57:57:dd:54:ee:45:d5:a9:4c:e5:
06:68:14:1a:c3:e9:6d:89:3e:41:79:bb:76:7b:39:02:cd:09:
8c:af:b3:99:f3:24:4a:aa:8a:46:41:fe:4e:a7:0d:15:d0:b7:
d4:7e:8d:8a:4e:47:7d:09:1e:21:8d:66:bf:32:8f:a2:40:88:
45:58:f2:4a:56:2c:30:3c:b0:97:5f:6f:c4:83:85:21:68:cc:
02:8d:1d:ff:3a:9e:2d:32:a8:b1:da:ff:bb:ca:b5:85:73:5d:
ca:b0:33:86:d5:61:2f:66:2d:4f:42:7f:44:2d:9e:e4:4a:dc:
40:3d:d7:31:4e:8b:4a:b7:85:f7:07:28:42:a8:87:cb:cd:63:
dc:30:ae:4c:18:82:8e:13:18:64:f5:a2:79:81:fa:28:ce:28:
42:9a:cf:2d:ac:4d:e4:5e:72:da:03:d6:e7:7e:ea:9f:f0:0a:
59:24:c9:78:5d:ad:e4:2d:e8:f8:63:61:74:c4:c2:8a:0e:c5:
24:bd:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:57 2025 by rpki-client