Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e25c82c-c566-43b2-add2-4b2bab8925c8.roa
File: 1e25c82c-c566-43b2-add2-4b2bab8925c8.roa (raw, json)
Hash identifier: 4Of8yC5BSxhfaQukaqKQ57h6BFdTZ2GemlaEF72N/F0=
Subject key identifier: 5D:25:18:59:15:6A:07:2E:FA:C8:2D:91:C3:6C:41:46:D1:81:10:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 59E2D0D05BE95C9C755C6E69EAB2A09AE51469DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e25c82c-c566-43b2-add2-4b2bab8925c8.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 104.153.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e2:d0:d0:5b:e9:5c:9c:75:5c:6e:69:ea:b2:a0:9a:e5:14:69:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=23c3858462e9e0fbac47ed4a7757f816748a51b8c55056156758057ccd4ded6a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:89:38:dd:44:b6:e4:30:37:c3:d7:e5:71:
1b:b5:f3:47:30:f0:d0:51:28:2b:a0:e0:d5:29:9d:
3b:51:f9:89:8e:22:eb:04:b8:50:ae:58:00:c0:62:
65:95:25:cb:e7:1e:26:1b:d9:db:fe:5f:a7:57:fc:
c8:92:af:8c:07:6a:f6:d3:24:0f:19:08:59:ae:5d:
87:9a:7c:2a:e4:b6:d4:f3:7f:31:00:f0:08:0c:6f:
da:51:a3:41:49:79:a2:bc:a3:31:3f:8e:9f:e4:ff:
e5:35:94:b8:39:69:ed:cf:03:ba:db:01:5f:9a:3c:
10:19:eb:34:c5:bc:a6:39:6f:60:59:9f:38:37:4b:
08:a8:17:d4:50:4d:7a:b3:43:db:59:29:21:4e:cc:
dc:60:92:d5:27:0c:ff:6b:13:4d:13:c1:a1:f0:81:
bc:5a:33:c9:61:49:a1:90:62:68:a6:32:cc:34:32:
e0:11:b0:0f:7d:5a:62:e4:c7:9c:f9:18:08:62:71:
af:4e:6d:73:a2:f5:00:7c:0d:2e:de:21:13:af:06:
cf:1a:a7:5b:02:09:00:de:18:ad:2f:3b:4a:49:e7:
b3:2e:d7:a0:e9:95:63:c8:b8:19:b6:f9:db:e5:21:
54:10:3a:26:a2:01:48:45:ed:aa:60:d5:16:c8:d1:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:25:18:59:15:6A:07:2E:FA:C8:2D:91:C3:6C:41:46:D1:81:10:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e25c82c-c566-43b2-add2-4b2bab8925c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.153.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:90:ea:ec:ed:df:1d:e4:c6:27:ca:6c:ed:fd:ab:cc:80:ce:
1e:31:29:58:1b:4e:11:ce:12:f0:68:c3:6b:99:54:4b:a9:2e:
ea:7a:f3:08:a6:93:19:50:f6:85:db:19:e5:11:4a:2c:bf:29:
9e:93:b8:68:97:d1:6e:80:fc:94:3f:99:c2:ef:38:15:a5:b4:
1b:59:c4:3a:2d:a8:67:68:c4:19:04:75:83:b3:ba:33:86:d8:
80:04:ae:c1:99:03:25:ec:fc:66:c9:1d:6c:1b:48:dd:ba:30:
2c:55:a9:4d:a8:c3:6e:a6:ab:cd:ae:3a:68:ea:52:7f:52:bf:
94:65:67:e6:6f:21:8e:44:d0:eb:e6:73:83:5e:3e:59:d6:c3:
4c:5c:1c:80:10:0c:2c:ed:7a:c1:c5:81:2c:18:9d:77:c0:61:
69:02:04:dd:4d:c5:54:d6:81:8a:9c:bc:0f:c4:c3:86:29:ef:
62:9b:fb:56:6b:37:30:90:da:1b:1d:c4:8d:b5:53:e6:ab:c6:
1a:d8:88:26:dd:01:30:1d:6a:c7:cc:07:8d:82:a0:28:8c:cf:
86:21:df:83:27:60:36:6a:ac:6d:0e:44:3a:c0:9f:71:a3:4c:
05:a7:4e:93:b7:d5:f1:13:4d:c5:ce:7e:45:06:78:6d:f6:4f:
55:b7:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:23 2025 by rpki-client