Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa
File: 05ae7013-1fbb-4d48-8f95-be150236ce6c.roa (raw, json)
Hash identifier: MEiIvr3QUxC284b8Jlv1+aEqnUTUEJuWNQ2tb8Ycuqc=
Subject key identifier: 57:94:A7:B0:48:CD:A2:EA:13:F7:E2:C1:FC:B9:80:AA:F6:1A:5E:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 01BCBBEE0E7DD9816CE0E45A85055C591B7F14B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 151.148.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bc:bb:ee:0e:7d:d9:81:6c:e0:e4:5a:85:05:5c:59:1b:7f:14:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=72735fad2b0d8c68db3adbafc47f67dcaa7e8ba0876c985c42ed33995fb76a37, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:e6:bb:6a:60:20:3d:a6:d0:a3:d0:35:40:
d0:4f:7b:7b:89:03:15:1a:fc:9e:fe:d6:46:ba:0b:
9f:21:b9:db:89:45:f6:29:03:bd:99:41:b4:2e:a6:
4c:20:e1:c2:94:37:25:90:f8:50:d9:bc:57:9d:52:
88:1a:45:62:44:ab:f1:6d:a4:f8:04:ea:67:c9:65:
e3:3d:cf:59:23:ce:0f:bf:61:f1:27:a3:15:77:1d:
89:aa:bc:fe:84:87:d9:33:a3:30:3a:e4:95:df:03:
7f:6f:16:f9:a8:15:bb:71:51:5a:e4:65:63:cb:7b:
f7:fc:15:36:4a:95:39:c5:f3:43:10:3c:21:a2:00:
5b:97:45:98:d4:2d:5f:a4:bd:37:2e:5b:1f:6e:1a:
04:13:43:b6:ca:37:bb:2f:13:f4:82:17:55:bf:ae:
23:97:a3:9d:a7:9b:d6:0a:aa:88:f9:e5:3e:75:d6:
bc:3e:23:49:bf:a2:45:fe:f3:b8:68:d4:0c:ce:91:
37:1a:c8:1f:a1:eb:b1:b4:75:2c:bf:30:ef:b8:05:
94:55:19:4c:7c:19:93:46:55:b6:45:53:8f:0d:00:
a9:7a:6d:b2:84:a8:6b:08:b9:09:59:ef:00:da:df:
d6:10:82:38:2b:4f:6a:a4:5e:61:f1:84:f5:5c:43:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:A7:B0:48:CD:A2:EA:13:F7:E2:C1:FC:B9:80:AA:F6:1A:5E:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.148.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:85:62:d1:2b:42:2c:c3:a8:28:2e:ac:4a:80:cd:da:0f:99:
25:22:c3:6a:2e:23:e7:f8:08:76:60:f6:71:be:bc:e0:b2:14:
f4:2a:c5:3d:b8:36:f8:e8:a0:a6:48:7f:c6:2f:80:82:14:40:
8e:32:0a:aa:e6:36:8f:ee:29:ac:4f:65:1b:34:eb:ef:96:24:
d2:aa:d2:c6:b6:20:1c:45:bc:d1:89:aa:1c:2d:d3:67:b7:4c:
87:be:ca:49:49:5a:34:c5:68:a0:5b:06:10:09:e0:1e:4c:6e:
37:e2:3d:38:5a:e5:09:be:27:39:04:a3:6f:95:ed:b1:5b:9b:
d7:d6:4c:84:72:6b:87:d1:9a:e3:a6:91:ae:d3:1a:3d:cc:44:
44:a4:e2:d4:0d:10:22:69:3a:be:bc:af:7e:54:54:7b:75:78:
8c:52:9b:d1:4c:6c:b4:f4:94:03:a6:ad:b4:27:4c:cf:b1:ff:
8a:08:d7:8b:9c:27:d3:8f:80:2e:5f:ec:04:cc:ba:fc:60:6d:
c8:f7:b0:5f:ea:0d:c9:14:6f:4b:f7:f9:7b:29:60:4c:96:47:
5c:76:9f:26:eb:77:3a:20:1d:fb:b9:7f:b7:06:49:b5:10:c3:
d6:5b:d1:91:46:ce:87:d7:b4:a2:af:cc:b4:3b:90:5f:39:18:
7d:2d:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:37 2025 by rpki-client