Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e1ce927-4846-4763-9630-73ef23568705.roa
File: 0e1ce927-4846-4763-9630-73ef23568705.roa (raw, json)
Hash identifier: I/gPE7+/co6d0yQ7BmfjclSAmEPwfcwh8lDEk1fvdVY=
Subject key identifier: C0:B7:AE:5F:1D:8A:35:9B:59:65:B6:0A:09:6D:33:A8:38:91:58:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7AE9ED01A013D45B0679ECEB5D3D59292A8ADA87
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e1ce927-4846-4763-9630-73ef23568705.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 139.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e9:ed:01:a0:13:d4:5b:06:79:ec:eb:5d:3d:59:29:2a:8a:da:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=71e7bfd2e73522f8803825ba1104e7284a3a5e68a4c0363dcdd85204a5a93f04, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:07:c8:3b:ab:49:cc:b6:1e:84:47:8b:52:42:
e2:e1:7e:57:22:57:7b:90:1f:4d:29:07:94:ea:df:
03:eb:8e:49:b9:86:ce:a7:50:83:ce:88:57:b4:2d:
89:ac:90:51:d9:94:f5:d0:4a:26:9c:04:ea:07:b5:
b0:fc:18:f7:cc:26:5e:74:2a:52:11:de:84:01:43:
d2:50:bb:05:bd:40:d1:d1:4b:52:a0:8c:9d:1b:32:
e9:8b:df:6e:1f:cb:e6:82:f9:c3:7e:af:99:d8:ba:
19:4c:7e:04:46:c0:ec:6c:ca:d5:0e:e3:48:dc:0b:
fe:c2:1c:27:4c:8d:93:35:0c:2f:54:28:c2:f3:51:
3c:98:64:d9:e1:ed:24:dc:6a:1f:d0:58:fe:94:a0:
38:fc:0a:12:f7:55:aa:67:88:32:52:60:6f:e8:20:
23:e7:91:2e:9a:2a:52:4e:ce:fa:c5:c4:15:3d:e7:
16:a3:96:4d:e4:f7:f1:6f:a6:87:e9:d4:86:03:37:
76:b6:f3:f6:7f:00:66:d2:12:0e:e8:d1:cb:98:18:
68:1e:dc:62:7d:8a:f6:7d:34:29:ec:f4:cb:0c:48:
b0:d7:21:b7:32:e3:31:9b:f8:93:83:b4:f0:ee:43:
f2:13:b2:76:9c:74:1c:3d:6c:98:8e:89:aa:52:a9:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:AE:5F:1D:8A:35:9B:59:65:B6:0A:09:6D:33:A8:38:91:58:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e1ce927-4846-4763-9630-73ef23568705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:e2:8b:41:ed:63:33:b5:9c:33:ba:62:39:4b:dd:ca:ac:fb:
6c:96:84:29:d0:a9:7e:81:c0:9c:77:98:92:5d:0d:c8:9e:0a:
e2:97:cb:4d:22:dd:71:5f:f7:95:68:60:2c:d9:d7:6e:23:54:
ac:05:a6:7b:20:71:79:d6:e7:38:74:50:9e:af:29:0a:cd:af:
ea:eb:ba:91:8d:8b:2e:68:68:e7:33:f1:aa:bf:95:36:18:72:
52:ea:36:3b:32:d8:4e:8e:49:5a:fb:35:31:88:c4:48:40:22:
d3:ed:19:5e:25:e2:44:76:6a:03:c0:2a:4a:53:a6:49:a2:74:
1c:f0:44:48:af:e0:66:a6:ea:92:63:d4:7a:ac:5f:6a:85:38:
bc:4d:c4:a1:6d:12:5d:e6:f5:b9:68:f3:30:58:33:fa:3a:aa:
23:3d:99:20:a4:ee:4b:dc:8e:f3:1f:9f:9b:47:f4:5b:90:7a:
a6:66:49:3d:3e:bc:80:f3:90:a0:7c:16:5f:ba:8a:c7:6f:a7:
8e:34:f9:c3:20:6f:84:a1:de:23:6d:fa:28:bc:41:3a:30:63:
c9:92:20:27:21:a0:78:db:1a:5f:d3:e1:5e:42:b3:17:91:c7:
83:3d:8e:f4:c9:f0:32:59:33:b9:2e:6f:bd:58:3c:98:ea:10:
11:bb:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:40 2025 by rpki-client