
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5f0c1cf-2889-4c7c-96c7-06ec497306e4.roa
File: f5f0c1cf-2889-4c7c-96c7-06ec497306e4.roa (raw, json)
Hash identifier: sHeeQnES1iyrz0Y+6cdOAc6D9l2nXRLNYORs3KZY2o0=
Subject key identifier: 4A:DB:0F:15:57:3A:23:07:A5:09:C7:E7:E8:21:46:7B:73:08:19:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35BB3A23FB69CABCBFED1E46BC882C3726E5A207
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5f0c1cf-2889-4c7c-96c7-06ec497306e4.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 66.201.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bb:3a:23:fb:69:ca:bc:bf:ed:1e:46:bc:88:2c:37:26:e5:a2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:56:ca:fc:06:cd:74:7f:c6:10:bd:7b:87:
61:c8:fd:7d:ed:28:43:c1:22:a7:ae:06:06:dd:15:
2b:3e:40:9e:02:23:f6:e6:06:53:3c:33:1a:3e:75:
54:d1:25:0a:d8:d3:c4:9a:e6:83:94:61:49:e6:dc:
f2:4f:19:fa:74:6f:2b:3a:8b:cb:9b:25:aa:22:c3:
0b:a4:54:da:88:79:7f:97:ca:79:a2:10:a9:05:a6:
d4:3b:a0:24:0a:1b:71:bc:48:2c:29:a8:e0:63:ca:
6d:66:e4:12:27:de:64:d8:a5:34:a8:8c:de:c8:e8:
a4:b4:40:ac:fb:02:62:9c:ab:9a:42:57:c1:24:22:
5b:53:76:c1:bc:d6:a2:7c:d6:35:d2:ad:91:58:7d:
df:15:c7:46:44:4e:43:9b:fb:f5:20:23:8e:24:82:
cd:a0:d0:27:3c:d8:eb:ef:c2:0e:17:f5:eb:f5:d3:
a8:81:d6:56:5b:e8:eb:67:3d:64:01:1a:6f:78:1c:
f3:71:4b:15:16:77:8a:16:a4:c3:ed:6c:49:84:97:
0f:95:78:3c:fa:67:b9:eb:a4:9d:af:f1:17:9e:27:
f0:85:33:12:21:78:f3:5d:d8:2d:f8:d0:7d:e4:dd:
3d:d0:65:2f:70:03:8c:17:1b:3c:2e:cd:19:b8:42:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:0F:15:57:3A:23:07:A5:09:C7:E7:E8:21:46:7B:73:08:19:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5f0c1cf-2889-4c7c-96c7-06ec497306e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.201.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:39:e9:c2:9e:73:a5:0f:20:ea:e7:d1:08:6a:98:9c:41:51:
19:bc:37:c0:f0:45:12:cd:90:51:2e:62:be:2d:c1:26:fa:5a:
23:3a:b9:0c:69:ef:03:74:84:60:4c:b0:8c:f0:d9:07:5b:2a:
cb:b1:89:89:13:a6:95:68:95:b6:49:a9:f6:36:97:a0:55:a1:
e3:81:19:8d:43:43:5d:e7:08:bf:67:6f:23:1b:a4:71:05:72:
06:a8:7d:70:ac:39:72:ee:2d:2d:ed:9a:f0:4a:0a:40:5f:fb:
86:94:e8:29:06:67:a6:6a:92:75:26:a8:75:63:56:92:aa:42:
37:79:95:6b:dd:40:de:16:41:0e:87:d8:13:37:a4:48:cd:fb:
08:12:00:3e:8f:ee:80:c6:65:7a:92:41:ea:14:cb:57:05:cc:
19:26:5f:4b:b7:cb:75:ed:0e:45:fe:79:c1:43:29:ff:e4:a3:
5d:43:be:d4:3c:d5:b2:d7:6b:2e:fe:9f:95:41:9d:f1:17:1b:
2a:d9:08:3d:13:eb:dd:7c:d4:6d:3a:b1:e3:6f:58:85:9f:d5:
86:69:f8:35:d4:d2:f2:9b:f9:c4:6b:b3:9a:92:b2:cd:d4:d8:
d8:a2:1d:c5:cb:06:2a:9a:a4:37:f1:85:1f:f8:59:81:7e:ce:
62:d3:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 10 15:54:00 2025 by rpki-client