Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa
File: faa6075c-9e02-411e-8e1f-b81753289412.roa (raw, json)
Hash identifier: QDLmL27QCOkc9Jzqh49PFQ1tINTqrnB67lTSQR6IdNo=
Subject key identifier: 6E:24:15:DF:CE:C7:56:69:88:5F:38:79:92:04:88:B1:A3:36:F1:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06B17BEF85DDE58FE852186B6B0AFB943C70371E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa
Signing time: Fri 21 Mar 2025 00:20:13 +0000
ROA not before: Fri 21 Mar 2025 00:20:13 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b1:7b:ef:85:dd:e5:8f:e8:52:18:6b:6b:0a:fb:94:3c:70:37:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:20:13 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:57:ab:9d:ec:a8:e4:ca:c4:69:bc:8a:a1:
0d:d6:43:51:ce:e3:13:bd:97:7c:8a:ad:05:d2:79:
07:b1:b1:d0:4e:0a:4c:bb:81:fa:6e:5a:2e:0d:f6:
68:22:29:85:24:d6:14:e7:ac:4a:e4:ca:2f:9c:64:
65:b4:ff:12:63:6f:bf:4f:74:f8:d4:3e:73:96:77:
ba:97:51:12:50:11:61:26:aa:73:b5:5a:7d:c3:6a:
aa:dd:5e:93:db:dd:2c:04:2c:f9:f9:68:3e:17:9b:
fd:d7:b0:01:75:80:29:26:b4:db:e4:93:5b:94:ec:
16:03:14:f3:fc:ce:00:59:60:50:a9:c5:7f:0b:f0:
01:f6:73:e6:02:39:67:85:8c:e1:ca:c8:f5:5e:6f:
cc:6f:31:a6:6b:1b:ff:8f:68:62:91:6b:e1:30:95:
b9:dc:ca:c2:19:e9:d9:54:6d:b5:41:26:29:0b:3e:
f9:ec:6a:8c:a5:bb:b5:29:5d:6d:42:99:e6:f8:de:
37:25:d9:cb:b4:ae:e5:b1:8a:5c:6e:88:c1:26:91:
e8:91:0e:7b:37:29:7d:01:72:7d:fe:eb:05:65:15:
90:ae:5e:62:ff:b5:e4:7a:3d:92:05:3f:66:4b:58:
06:45:03:2a:c8:f2:03:44:7a:e3:9e:f4:b0:22:2c:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:15:DF:CE:C7:56:69:88:5F:38:79:92:04:88:B1:A3:36:F1:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.228.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:5a:61:6d:7c:6a:fd:7f:bd:27:47:22:41:7f:f6:5f:ae:8d:
d0:3f:ea:b9:c4:e6:90:44:02:74:b1:46:df:a1:1d:31:58:4c:
5e:e7:db:f8:28:3b:17:bb:a9:5b:fe:17:89:57:47:98:0e:7c:
9f:bd:3c:67:92:07:d3:98:99:df:79:07:92:0c:68:29:04:41:
5f:f3:bd:8d:c2:ed:ab:ae:61:16:39:11:23:ec:f5:1d:ac:42:
56:4e:24:eb:c7:8c:b0:e3:11:a2:b3:cc:11:53:97:3e:b4:c8:
3d:5d:cb:e3:22:fd:d9:c2:4f:37:0a:ee:7e:29:9a:33:be:f7:
33:92:0e:40:10:5d:af:06:30:19:0e:09:61:d6:ca:b6:9f:e9:
ee:fb:dd:cd:b8:d3:12:42:d1:98:eb:f6:0a:17:65:fa:65:f8:
bd:a5:27:17:ce:ac:c6:d0:fc:cd:6a:79:23:d1:36:60:29:80:
c9:47:a1:b2:8f:59:82:47:dc:20:14:af:6e:9e:02:7a:55:8c:
a8:f3:96:ef:7f:bc:e0:34:28:67:ff:cf:09:3f:7f:cf:72:ff:
49:5e:16:60:b0:f2:0b:3d:13:94:24:0d:5b:bf:27:dd:9c:d3:
b3:ed:c1:b7:11:1a:ff:1f:db:88:b8:3a:b1:32:19:9b:d1:0e:
d6:da:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:41 2025 by rpki-client