Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa
File: 0f893b02-709b-4a20-ab74-f859a710b1be.roa (raw, json)
Hash identifier: UIUd8znt8RvOi4cwok4aZSPGEimcVo1X4AYvjcFaokc=
Subject key identifier: 64:B0:51:D4:63:D7:EF:1D:76:27:07:EB:6C:FA:0C:23:25:95:6D:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55D841D969FBF885FD507E2458EAD9692D0D8AAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.128.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d8:41:d9:69:fb:f8:85:fd:50:7e:24:58:ea:d9:69:2d:0d:8a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=06434649e6b132f28ed9b95198cbb7ab6ff51d7d58cbe023b58f279618783df0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:72:4b:5a:7a:80:ee:c8:f5:a8:89:99:d8:
a2:6f:ff:b9:a6:2c:25:68:d4:ce:03:fb:30:2d:92:
5f:54:ec:c7:44:e7:92:dd:ec:74:71:62:57:bf:50:
45:03:40:0f:85:40:e5:3b:45:cd:47:f3:ca:8b:a4:
9a:06:7b:dc:7e:3c:6b:12:79:89:70:cd:26:a0:19:
98:0f:24:dd:21:7c:1e:15:e5:8a:ae:cd:b4:86:3f:
55:49:2e:22:5c:b4:6a:0e:e9:e3:92:86:b1:5e:13:
6c:b6:2b:75:b4:3f:58:b7:58:6c:8f:4b:2a:cf:07:
b8:c3:28:a9:eb:02:44:f9:38:5e:5f:22:2c:ef:f4:
bc:0c:f2:09:0d:91:b0:3a:c3:1a:26:14:32:43:bf:
c0:09:f8:e8:7e:d1:d4:c7:5f:94:ed:2c:0b:b4:af:
ad:d0:4d:d5:ef:07:0f:e7:af:76:7a:32:07:d9:eb:
98:55:e4:2c:e2:e2:de:8d:a3:65:26:d7:16:e9:99:
e9:ff:c3:d5:a6:35:0a:40:10:18:04:0b:0a:8d:6f:
83:3d:51:0e:5c:d7:96:33:fc:4f:31:7f:42:98:b7:
dd:bd:ee:f6:bd:8a:3d:b2:e6:39:0f:b5:a3:32:2a:
0e:12:a0:d8:54:05:82:52:57:7b:5a:45:0e:6b:10:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:51:D4:63:D7:EF:1D:76:27:07:EB:6C:FA:0C:23:25:95:6D:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.128.64.0/18
Signature Algorithm: sha256WithRSAEncryption
cf:2c:c1:94:a1:79:01:2a:b6:a9:63:5b:4a:c8:06:de:37:c4:
71:ed:41:bf:b0:45:95:99:5f:6a:12:e0:db:55:38:5b:c6:4e:
4d:be:6c:d4:19:b1:19:63:9c:c7:3b:51:dc:7c:55:e4:e0:29:
79:9a:98:17:89:e9:c9:07:0e:70:26:00:f1:7f:79:c8:c6:b0:
1f:0a:69:17:f0:33:3e:9b:24:e6:ea:d1:0d:8d:4c:28:19:2d:
38:9b:63:32:0d:9a:72:c9:e4:4e:66:b6:a5:19:44:60:3c:57:
7d:65:b8:a2:ad:15:e0:bb:1f:86:df:4c:4f:1e:ee:4f:93:68:
00:4a:1d:17:4e:e7:c4:73:84:a4:d5:84:16:88:4b:66:8f:fc:
4e:79:be:aa:03:ef:e6:36:3d:2d:69:6a:d6:62:b4:22:24:67:
f2:37:06:e9:2b:f2:f7:8c:0a:a6:1d:91:0f:98:d7:c7:64:71:
04:a6:32:10:50:22:99:86:03:b7:9d:58:e7:52:ea:70:7e:71:
1d:69:15:2a:2e:80:36:6c:74:fa:c5:51:b7:f5:26:75:57:30:
84:56:e9:40:b4:b5:88:dc:4d:9a:61:a7:89:72:ca:39:36:a1:
55:9d:b1:9c:be:0a:9c:ec:ae:12:a9:58:76:0b:b7:2a:35:9c:
50:ba:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:11 2025 by rpki-client