Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186f147f-35a9-467e-a437-9a8d12bdb732.roa
File: 186f147f-35a9-467e-a437-9a8d12bdb732.roa (raw, json)
Hash identifier: FzF9nI9n93ZcRpQSj9+LKOMZxLm0QXGzDmYs4fVTbck=
Subject key identifier: 50:1A:80:04:48:F2:93:97:63:67:25:B1:AB:6F:03:BA:4D:B7:28:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FC518915ED91DB88FDD37E71A6D111A8FBEDAE0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186f147f-35a9-467e-a437-9a8d12bdb732.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 139.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c5:18:91:5e:d9:1d:b8:8f:dd:37:e7:1a:6d:11:1a:8f:be:da:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=8d693da6b394ca264288b86ef69c7c102a804facf052cb6a8b21e8ffefd82d08, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:88:9d:f1:c4:05:08:1f:8a:2f:c9:1a:b1:
b6:59:6e:32:47:82:b4:9b:f4:34:72:eb:32:7f:d7:
1f:19:42:fe:22:92:97:66:9f:3b:41:24:d0:7a:3d:
44:fe:39:c6:bd:b7:24:37:32:4b:85:04:e5:07:c2:
b4:4c:61:d2:77:cd:53:9e:c8:dd:ea:e8:b1:08:72:
78:95:2e:73:ea:16:d1:57:a1:fe:b3:d1:31:1f:8f:
52:9a:89:7e:5f:3b:d3:f1:10:23:09:9f:57:51:b8:
b3:6a:59:24:26:52:9d:4d:4e:e7:5f:71:b0:1e:85:
18:e0:9f:8e:8f:c3:04:e8:ed:e0:07:1d:64:1f:cb:
d0:7a:85:07:4a:7e:25:b6:7c:b7:5f:88:ae:84:85:
13:7a:9b:06:df:58:22:86:ef:00:b5:ee:23:41:e4:
fc:80:df:8e:55:d2:97:55:31:19:42:4b:2b:17:b0:
11:0c:eb:02:13:1b:11:58:9b:9d:f3:b2:f8:ee:ea:
36:3c:50:80:8c:dd:22:a6:df:7b:b0:b4:68:ff:e3:
e8:c6:cf:ce:1b:ad:88:07:38:ac:44:fc:94:5a:ce:
fd:d8:a6:80:52:cb:a9:60:84:53:f4:a0:98:1d:3f:
f2:39:fb:a8:38:db:4a:58:be:3b:ac:49:47:43:00:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:80:04:48:F2:93:97:63:67:25:B1:AB:6F:03:BA:4D:B7:28:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186f147f-35a9-467e-a437-9a8d12bdb732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:81:6b:96:18:d8:ac:13:3a:2f:8e:9b:e3:8d:cf:35:6c:0d:
91:60:29:d9:e7:37:f5:d0:83:65:ed:d8:f5:16:28:9b:90:50:
88:40:72:9f:2e:b3:39:6f:e2:4e:47:ab:88:fd:e0:ab:8d:b6:
08:9f:25:af:66:54:ae:e3:34:84:c0:96:04:d2:cb:ba:07:c7:
f2:58:c1:8f:d0:d4:62:bd:3d:02:aa:35:78:59:4c:5e:59:38:
2d:85:4d:f9:98:4e:5e:86:4b:1c:e0:a0:27:12:7c:f9:67:ea:
a6:cd:36:09:7a:da:e1:5f:23:a7:b2:5a:4f:45:fd:94:fc:bb:
6e:05:92:bd:18:93:a2:47:af:1a:16:44:b8:e6:1f:a5:f6:a0:
92:c0:11:9f:4f:2c:9a:2d:55:5f:5a:88:da:1a:98:96:18:7b:
8e:99:a7:9b:8b:31:7c:7e:cc:9d:ee:bb:97:ba:45:e0:68:37:
f7:0d:61:88:48:74:6d:21:44:92:5f:ca:19:c9:60:3d:24:09:
1b:5f:78:96:36:1d:12:66:3e:3e:a0:1c:38:ce:9a:bd:b7:ad:
50:b1:e5:ea:71:dc:0b:b5:77:1c:63:7f:20:a1:23:ff:8c:2a:
dc:94:57:87:2c:ac:2e:32:a0:57:1b:22:bf:55:bc:94:89:1c:
db:50:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:05 2025 by rpki-client