Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e03fe2-c4eb-47de-be5e-1964e6b57749.roa
File: 22e03fe2-c4eb-47de-be5e-1964e6b57749.roa (raw, json)
Hash identifier: Zf+EgcAw3qSo+HibZFFOieDV2PXwOsZ78GpxNfNPL3c=
Subject key identifier: 8A:C5:36:7B:FA:DF:33:BB:40:9E:EE:42:AF:CC:4F:D6:10:46:1C:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D6CEC200B05737CE6CA5914F10ADE9181E80896
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e03fe2-c4eb-47de-be5e-1964e6b57749.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 22394
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6c:ec:20:0b:05:73:7c:e6:ca:59:14:f1:0a:de:91:81:e8:08:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=8bf022adfd3f31781fa092717115ec5eaedfaa0632591728ab768d598cac6ea6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:28:e1:31:68:46:d3:ca:e9:2b:4d:31:0d:
e8:f3:3d:f8:0b:2c:01:12:48:aa:64:0f:dd:14:9c:
f3:96:89:93:92:18:7d:50:e2:a9:ba:41:25:28:e5:
ae:cf:d1:6c:91:41:df:05:a1:d3:c3:e9:ac:5d:81:
a5:f2:04:7d:39:52:01:2e:96:37:65:0f:0a:88:4b:
59:14:8b:de:d5:b4:2c:61:d2:e3:c4:c2:94:c0:12:
d5:7c:54:0b:59:f8:b3:21:19:75:46:9d:3b:81:77:
66:e8:6d:c4:91:12:1d:9d:87:fe:77:54:df:5d:9d:
5b:c1:92:4a:68:53:d7:b9:72:62:26:3f:c4:8c:57:
61:1f:59:16:1f:b7:e6:5a:42:c5:07:da:d6:09:e1:
10:a5:40:ba:03:50:23:d8:b6:75:60:a1:19:1e:51:
4e:0d:79:72:c8:a0:e2:3c:d3:63:1d:f6:87:18:50:
fb:d4:26:e3:cf:2c:f1:f6:4a:84:7e:dd:fe:f5:9b:
8a:f1:81:5c:2b:3e:8b:c2:d9:12:98:7b:1f:91:21:
6f:05:93:80:72:54:93:79:74:de:27:70:14:b4:45:
9c:41:5c:53:de:ec:7b:af:fb:8a:8d:18:b1:89:f7:
b5:a7:98:33:80:cd:65:9b:4d:3b:75:af:77:ba:d2:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:36:7B:FA:DF:33:BB:40:9E:EE:42:AF:CC:4F:D6:10:46:1C:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e03fe2-c4eb-47de-be5e-1964e6b57749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ba:ba:14:79:f2:94:37:f8:47:6a:7a:88:29:26:11:1a:42:
58:04:4f:9e:bf:03:c6:81:f3:29:55:23:d1:bc:68:ba:9e:2e:
12:f2:f4:5c:e1:4d:7f:bb:e5:eb:0c:88:77:b2:a0:b7:31:35:
7d:0f:e6:5d:aa:32:82:0f:f2:d3:b2:66:17:bb:df:7e:2a:f8:
de:e9:3f:a7:55:6e:8b:87:6e:5c:d2:59:f1:25:2f:53:d2:38:
9e:e9:a1:56:4c:57:e1:d6:40:74:23:72:f5:37:8a:41:69:22:
82:e3:20:e2:ef:f2:21:e0:82:92:cd:f8:e4:f3:e5:d4:e6:06:
81:91:03:82:7d:32:39:95:ea:9b:47:e8:89:7a:9a:a9:00:80:
40:2d:33:ca:e5:10:f1:bc:ff:ca:9f:e1:d7:6e:1e:4d:6e:a1:
35:6c:49:73:e0:34:ec:f8:dd:5b:d1:68:79:34:6d:70:08:d2:
bb:96:df:b0:74:f6:d0:a4:ab:c0:1e:06:4a:4e:10:a0:8b:9b:
37:aa:06:6c:03:dc:0b:ec:54:c4:68:49:56:0d:bd:7f:5a:45:
bb:5b:f8:ae:4b:63:03:7c:72:66:0e:dd:4b:6a:37:6f:98:8a:
fa:15:43:d2:15:5b:f2:29:01:72:fe:c5:3e:bc:1f:0f:01:e2:
40:b8:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:44 2025 by rpki-client