Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa
File: f74ead99-6790-4721-955a-632492193a35.roa (raw, json)
Hash identifier: xv35PHtYwSOMeSe+AWBnQMq8KxgsedOw7PCYoIfWBM4=
Subject key identifier: C3:85:E5:99:EA:B0:37:9D:3D:2E:BF:07:7D:CD:09:BC:CD:A2:6B:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FC34AE9F76B15099E3599C570643C250801BCE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa
Signing time: Sat 15 Mar 2025 00:00:15 +0000
ROA not before: Sat 15 Mar 2025 00:00:15 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.131.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c3:4a:e9:f7:6b:15:09:9e:35:99:c5:70:64:3c:25:08:01:bc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:00:15 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:7f:a7:00:91:26:2c:90:4e:61:99:8d:4f:
de:28:67:f2:42:a9:67:02:ed:9d:53:cc:31:df:3e:
94:c7:0d:db:4c:fd:dc:b9:dc:86:e6:e1:60:90:55:
f7:26:59:75:9a:c1:2b:f7:7c:91:11:90:10:d3:9a:
d0:69:72:fc:10:55:d3:85:fe:dd:94:07:84:1a:56:
f3:bb:e8:e6:89:83:3f:80:73:68:44:37:a2:91:26:
b4:b4:2c:6b:0b:e5:b4:d0:41:bf:03:80:43:94:08:
c0:dd:db:8e:4e:72:67:17:18:39:2f:a9:8a:00:15:
28:9a:ff:eb:10:b3:14:11:07:eb:6c:e2:18:74:a6:
01:aa:fd:e9:07:ba:ae:e4:f6:76:0e:ec:f1:85:b6:
a2:a6:c6:a0:5f:af:32:45:fb:ba:54:ae:90:46:7d:
d5:b4:e6:86:4f:93:bb:78:78:6b:af:08:b1:44:f7:
ad:ba:9b:86:c6:8e:1f:57:bb:dd:10:bc:bf:c2:a2:
ef:cc:63:33:92:3f:1e:bf:24:fc:e1:91:9c:0c:76:
c7:4c:80:67:15:b2:98:2d:63:3a:28:75:15:0a:8d:
f7:2c:dd:92:ed:2d:3b:0b:14:1f:bc:52:2d:c8:12:
b8:84:e2:97:26:c4:0e:2b:77:22:60:3f:14:d6:ee:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:85:E5:99:EA:B0:37:9D:3D:2E:BF:07:7D:CD:09:BC:CD:A2:6B:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.131.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6c:df:d1:8f:57:9e:e0:b4:cd:aa:8e:e7:05:f4:08:ba:e1:bd:
0e:df:0b:f4:bd:7e:39:e9:5f:f2:2e:fe:37:88:4f:47:94:91:
cd:d8:03:9e:e4:d5:6f:8d:7b:a1:08:17:a4:e0:7e:88:5a:81:
77:1e:83:8d:66:aa:fc:b4:2c:56:76:41:07:1b:fe:9c:fa:7e:
aa:25:ab:17:60:48:4e:f0:c5:f2:11:55:9f:fb:7a:e0:55:b5:
c9:b7:fe:d1:73:b1:70:06:2f:17:27:c1:47:40:fa:b5:6b:4d:
78:c8:3a:39:ec:eb:04:3d:f8:ea:77:5f:e9:20:c3:23:39:a7:
59:fa:8e:40:82:25:40:0f:95:a2:d5:3e:db:ad:08:bb:b7:9e:
6c:b7:76:40:33:8d:a2:26:5f:f0:77:ef:80:22:01:91:51:25:
db:a7:67:06:fa:96:a4:7e:9e:f5:06:db:a5:46:3e:dc:79:d5:
b0:4d:a5:07:35:3a:b0:2f:2d:2b:22:27:d0:16:f3:94:7b:9e:
c3:e8:b4:f8:72:2a:3d:30:48:b0:b6:35:8a:6c:aa:53:43:cb:
d2:f1:50:d8:c2:bb:0f:ce:d8:50:c9:eb:67:96:ef:77:e8:e6:
a9:4b:7a:fc:55:14:5c:16:cd:00:2c:d3:09:1c:70:81:a7:bf:
49:a1:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:25 2025 by rpki-client