Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa7ca3cb-7a9b-46bf-85d7-befa60cde930.roa
File: fa7ca3cb-7a9b-46bf-85d7-befa60cde930.roa (raw, json)
Hash identifier: UYw8mfY0lef0n1BCOaJiv7w7mZH0ttedpkA4IwGavSQ=
Subject key identifier: FE:34:C2:C6:8A:F2:63:F9:37:A0:5B:36:F8:D2:E5:40:36:01:B5:16
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 298EFC621391DB05DB562D01C5CA2B9246818275
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa7ca3cb-7a9b-46bf-85d7-befa60cde930.roa
Signing time: Sat 15 Mar 2025 00:30:53 +0000
ROA not before: Sat 15 Mar 2025 00:30:53 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 64.252.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8e:fc:62:13:91:db:05:db:56:2d:01:c5:ca:2b:92:46:81:82:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:30:53 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:28:09:06:b1:c4:05:2e:e8:f2:c9:04:30:
9d:db:a4:15:f4:f3:2b:76:de:ad:a6:ea:39:34:1d:
c6:bd:31:6b:23:7d:b6:76:ce:47:cf:d5:b7:41:de:
f9:79:85:a0:24:ab:97:25:6c:9d:b5:c5:fc:92:fe:
32:fe:2f:59:af:3a:af:c6:1a:d3:5d:24:b6:bc:00:
ee:73:14:4f:a4:47:eb:99:7c:9f:40:f7:aa:d4:ea:
82:a6:b2:1f:e2:b1:8e:10:90:b1:9e:3d:f0:8f:ba:
2c:2d:4c:85:3f:8d:f6:5e:c4:aa:de:ec:a4:fc:6a:
55:44:f9:c2:06:4b:f2:ea:f2:3c:b7:c2:6f:a8:b7:
9b:65:f2:45:44:f3:8c:6e:da:16:66:dd:73:4d:fb:
b6:0a:74:b7:81:0b:c0:19:18:7a:00:79:54:4b:cd:
a2:bd:94:6b:b5:ea:7e:44:94:12:51:9f:95:18:a0:
90:db:2e:89:9e:1d:d6:b3:8b:00:a3:7f:a3:79:af:
9a:ac:a4:df:8d:ca:a9:06:b1:5a:e0:84:93:38:1c:
dc:11:b8:f3:34:9c:14:12:57:6a:cc:42:8b:5a:20:
27:03:1a:76:fa:12:14:24:07:c8:5f:c3:dd:e6:61:
2c:27:9b:62:8d:f6:bd:63:d9:ee:a4:ae:48:a2:0c:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:34:C2:C6:8A:F2:63:F9:37:A0:5B:36:F8:D2:E5:40:36:01:B5:16
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa7ca3cb-7a9b-46bf-85d7-befa60cde930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.67.0/24
Signature Algorithm: sha256WithRSAEncryption
16:87:25:28:be:3f:b0:39:1b:be:04:7d:4e:1c:c5:93:51:3c:
33:a4:ad:d9:95:68:e5:ce:7c:c4:00:cb:69:e8:43:1f:bc:8a:
81:3d:fb:5d:b2:78:65:4c:55:1f:be:0b:eb:4f:69:70:62:48:
65:d1:cf:cc:e5:a0:d0:f4:be:b0:f1:18:c3:14:cb:ac:3b:84:
72:df:81:30:30:78:fe:74:17:35:55:2e:e1:26:20:7c:0e:16:
4b:c3:12:90:e0:f1:fe:72:4e:95:27:ee:82:d5:ad:91:cb:5f:
6c:a9:8d:92:e9:a4:21:46:5a:b3:71:91:db:b1:ad:52:98:4c:
e8:12:01:8a:ba:43:c0:cd:ff:f1:e1:1d:b4:6c:ab:18:6c:2b:
5a:cd:d9:13:ad:2a:e4:24:0b:09:5a:47:9c:06:e0:6d:92:8d:
40:bf:8c:b2:e6:b8:c8:f7:62:9a:c6:5b:06:7e:6e:6e:d7:03:
65:21:e0:f1:d7:2b:b4:8d:45:03:79:32:73:26:54:73:da:74:
aa:ae:48:d0:f4:b4:c9:d6:ae:bd:83:a6:d7:92:68:d0:9d:59:
19:25:60:0c:6c:72:63:6d:5e:01:2b:ec:25:b0:96:6e:0d:ff:
4b:72:b9:a5:16:6d:fc:be:0c:45:84:b2:0e:1a:ac:09:94:ec:
ce:8e:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:13 2025 by rpki-client