Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115ad3a0-6ebe-4da6-b638-fb9cf8137bf0.roa
File: 115ad3a0-6ebe-4da6-b638-fb9cf8137bf0.roa (raw, json)
Hash identifier: MQ7tZVULq663v6Cig1nWC2Soxvs1Ab12ArXSQ+xyUGE=
Subject key identifier: 5C:60:89:2B:0C:91:CF:8E:7C:7F:0A:60:F7:2F:4D:14:F6:D3:2A:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4FE5100F01966CF8CB236F82BA9EB3DB33F1AFC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115ad3a0-6ebe-4da6-b638-fb9cf8137bf0.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.233.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e5:10:0f:01:96:6c:f8:cb:23:6f:82:ba:9e:b3:db:33:f1:af:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=db25c5940c862e973d8383c607863025912535c0fe25ce6956a4b5598f0d5e88, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:cc:d0:4b:26:72:f4:69:f3:7b:48:ab:fb:
5c:43:52:b4:e8:01:71:53:94:f5:33:22:c3:5a:04:
cd:6f:6f:cf:0f:e3:a0:12:11:17:dd:20:4b:b4:b1:
5a:1c:cb:73:aa:01:8c:25:76:8a:d5:0f:d9:ca:be:
df:5e:c9:99:4f:5d:15:96:8b:85:c7:a8:25:0d:f5:
76:2f:b3:e1:55:8c:6f:68:9c:57:d6:6e:48:ee:a5:
cf:b4:b5:42:9e:9e:d2:52:62:7d:77:4e:95:e4:17:
33:fa:f3:20:1d:a7:aa:db:b7:b6:47:6e:0e:20:a7:
54:8f:95:78:75:4e:ec:3b:c8:47:e1:b8:bf:ad:fc:
99:17:64:3b:b2:fb:a4:1a:30:d2:44:d8:f9:f9:b2:
60:9e:21:72:d9:da:41:40:e9:ec:40:f0:35:9f:3f:
3b:4c:f8:d2:c6:c1:6b:79:55:5f:57:66:ce:06:19:
8b:fb:55:27:3c:7a:9d:4d:09:38:28:13:c2:d1:82:
eb:d9:e7:47:e5:5e:83:1f:19:e6:7a:9b:b8:5b:a8:
df:60:ca:24:7b:1d:26:95:c4:56:c3:e8:8d:f8:86:
3c:65:e9:0c:d8:a5:ed:42:1c:d6:52:00:f2:9b:18:
46:55:da:92:cf:fb:59:62:e7:12:fd:0b:1b:ce:45:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:89:2B:0C:91:CF:8E:7C:7F:0A:60:F7:2F:4D:14:F6:D3:2A:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115ad3a0-6ebe-4da6-b638-fb9cf8137bf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.233.117.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5a:ac:c7:59:b8:19:cf:e5:2a:17:3b:45:1b:b8:ff:c4:ad:
b5:89:4f:28:ec:16:c1:44:29:ec:15:b0:76:38:e7:a2:5f:e0:
f8:57:e4:83:55:a9:08:77:30:63:d8:bc:f6:0b:cf:ce:9a:86:
7e:53:db:28:b6:e3:f4:f8:4b:b9:06:ef:d5:fb:94:aa:7c:10:
e6:94:4a:2e:14:60:05:f8:b0:fb:9f:65:50:80:c9:e0:3c:a8:
63:5f:4a:3b:cd:87:5b:d1:b3:30:00:04:72:bc:27:2f:3f:a6:
ba:d7:ef:d2:c4:06:5f:b1:f9:3f:38:fe:5f:c1:83:4f:06:b4:
43:3d:ca:60:e4:2d:ca:2f:5c:cb:c9:98:9f:d6:8a:1f:8e:67:
51:38:19:5d:01:b6:d8:55:f5:3c:44:30:fa:cd:b1:af:bd:dc:
b8:52:8b:5a:f6:39:19:28:88:ef:27:a2:3f:6b:89:8e:c7:c8:
d3:a6:2a:a9:26:a2:f2:f8:37:b1:41:1f:96:1b:93:34:12:4f:
9f:64:2d:2a:d6:43:a0:76:c8:29:74:bc:e9:0a:29:9e:ef:37:
4f:8f:5c:22:ab:22:b9:8c:18:91:16:83:8c:3f:a3:8c:49:6e:
91:b3:9f:b5:a5:3b:13:69:5f:49:77:60:a7:07:1b:35:5e:de:
32:37:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:39 2025 by rpki-client