Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa
File: 24fc63bc-3295-48be-b7b8-25e6b313cd42.roa (raw, json)
Hash identifier: U4opPSH+iNHy7ya1yk5gP6a110w4tr6Pbbar45AN7+0=
Subject key identifier: 63:18:24:8C:E1:B1:1F:93:C4:38:B7:26:92:2B:BE:25:97:95:68:AB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D379D9A6E61023D4B4F57CF0EE14F8FCB079CC8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:37:9d:9a:6e:61:02:3d:4b:4f:57:cf:0e:e1:4f:8f:cb:07:9c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=5bc68b587284081e36fb61e3f8360502571caaae3dbcd5861ffcd2ceb2767db3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:ed:c9:dc:d6:ea:6d:5d:c7:a2:38:d3:29:
bc:a2:72:a5:4d:ca:62:fb:49:73:1e:cd:0f:d2:9b:
4c:72:89:21:05:39:d3:fb:bd:63:78:3c:85:ca:ee:
84:69:83:cd:14:72:e8:60:60:67:44:bb:8f:ae:e0:
87:d3:a7:c9:cb:5b:f0:47:1d:7c:df:0c:c1:f7:75:
d5:a1:63:5c:0d:79:c4:e5:22:51:a5:6c:65:39:a0:
02:f5:52:1b:84:b5:73:4c:a3:21:ed:1a:34:cf:3d:
05:cd:d3:8f:64:fe:a0:22:05:e0:55:c6:74:52:0a:
9f:80:cc:1a:17:12:c3:21:69:ff:08:ed:e5:ad:6d:
cb:11:f2:01:32:d6:03:1a:17:62:7b:ce:76:1a:66:
c2:c8:28:3e:18:60:8e:d4:64:2f:97:41:cf:27:d1:
a5:5b:62:29:1d:81:5e:53:ae:ea:a0:34:8f:48:29:
ce:c3:e4:52:88:76:9d:a6:70:82:49:1b:63:38:eb:
f4:2c:c8:92:9b:80:a0:ab:e1:ce:48:18:a2:0e:78:
18:1e:c4:95:91:89:a1:eb:70:6a:4b:7e:ab:b6:04:
3a:ca:3b:a0:4b:3f:1b:1c:97:9f:4a:3b:e9:ab:5a:
c1:c0:84:7d:b8:c1:36:78:b7:ee:60:43:0e:d3:10:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:24:8C:E1:B1:1F:93:C4:38:B7:26:92:2B:BE:25:97:95:68:AB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.227.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:5d:56:5d:a7:ae:9b:25:17:cf:a5:4b:1c:d0:6e:a4:08:59:
c5:44:cd:d5:59:8f:10:b4:c7:ae:7e:68:bb:19:38:85:9e:78:
7e:ad:10:05:a3:a9:23:5d:97:0b:25:d6:85:73:07:97:6e:89:
9b:c5:48:be:d4:f6:be:05:eb:bf:7b:7d:6b:72:cb:ac:7a:8d:
19:28:e1:5e:3d:b0:cd:71:22:a2:20:93:2e:24:dc:69:c0:35:
d5:fc:91:85:58:19:5a:92:96:61:34:6d:2b:d4:f2:d8:88:f9:
5d:3a:5e:32:19:96:ff:39:68:ee:c1:d9:f2:18:7d:5e:2b:c9:
cc:12:5d:8b:bb:2f:39:db:e3:f1:af:5e:ad:19:24:5a:ea:1c:
26:40:0e:74:67:95:75:f4:19:d6:9c:c5:d2:b6:20:aa:76:f2:
bd:77:91:1d:3e:62:95:9e:eb:47:dd:34:b4:2c:98:97:59:2b:
e7:f6:88:be:97:2d:cf:dd:dc:6d:cd:05:c3:99:fe:bd:a9:50:
8e:cd:40:d9:0b:1e:f1:bb:21:e8:23:b0:78:2d:b0:61:5a:9c:
10:ac:f0:eb:b5:3b:ac:6a:4e:d7:17:81:8d:ca:1d:33:cb:c6:
37:27:7e:4c:e4:dd:86:12:28:ca:40:f5:d1:91:6f:0a:a5:46:
e2:5e:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:57 2025 by rpki-client