Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa
File: 27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa (raw, json)
Hash identifier: +C5eBr/1ld/MXkSlXB0aVxTTMRrhZq/jZZDnD/NY4Bo=
Subject key identifier: CD:E3:83:8D:E5:4C:D1:F4:CC:66:42:B0:D7:1E:07:3D:E4:69:C1:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 36D393B63F253FD601C9068395B447AAA4899CCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d3:93:b6:3f:25:3f:d6:01:c9:06:83:95:b4:47:aa:a4:89:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=dd34cc08c93904d2b0979ad90d662fb3f6e0c3b892e7fbcc635b6552066489e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:27:a0:4a:6f:86:8a:8d:72:e5:3e:94:4a:
8d:2a:44:95:68:67:5d:9d:0d:88:f1:4b:15:8b:9d:
62:88:2d:3f:9f:cc:a9:80:8a:b5:3a:fa:4c:54:3a:
e9:0b:16:af:67:30:5c:e9:70:19:f8:39:6f:e0:3c:
5c:20:aa:bc:32:cb:fa:26:ee:f3:e6:73:b3:ad:9e:
36:d8:ce:40:a9:73:fe:51:ec:e2:2a:80:66:ed:10:
a6:ab:48:b9:b6:c1:45:7b:22:bc:82:6b:ad:f0:12:
f6:c2:87:16:f2:44:dd:45:20:6e:d5:b3:93:3e:a5:
b9:83:de:af:e8:ea:6e:1b:fd:90:9b:d1:a0:b0:20:
be:3f:8f:4e:f3:45:a0:67:38:30:8e:3c:3b:3f:a8:
fe:f9:ef:5b:a5:35:ae:e5:48:11:5b:c0:d8:db:d1:
e5:fc:d2:18:7a:55:97:35:fc:a5:be:e7:1f:21:6d:
e2:34:20:0d:c2:eb:b7:54:84:d2:20:cc:95:ae:9f:
43:62:c4:64:ff:81:92:db:98:8b:d6:69:bb:b1:47:
95:a3:9a:5f:7c:07:e8:5e:54:9f:c2:b6:07:b1:94:
b6:bf:b3:b6:b9:b5:ff:b7:56:b9:f8:f9:8a:4b:54:
96:d6:4b:11:9b:e1:4e:93:c4:e2:1e:e5:aa:10:a4:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E3:83:8D:E5:4C:D1:F4:CC:66:42:B0:D7:1E:07:3D:E4:69:C1:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5d:1a:8c:e2:ec:a4:a0:5d:8b:52:cc:81:1f:a2:21:93:4c:
05:06:cc:d4:3b:7f:29:74:fb:8b:a3:e6:3c:7b:e2:4b:82:fc:
65:91:84:1c:47:13:0d:ae:ca:bf:21:e9:a4:d9:75:98:6a:91:
4c:02:56:21:b2:28:e9:41:89:a9:9a:a8:26:70:c6:70:79:c5:
99:33:99:2e:b3:d7:c0:4f:82:4d:db:57:42:1e:f8:71:28:40:
ef:fc:c8:22:d0:f4:da:5a:e4:d0:58:e7:b4:60:3b:b9:6a:2e:
e6:29:49:45:01:92:72:95:f7:86:26:33:18:9f:0e:fe:79:80:
14:9d:5a:6b:47:53:38:91:d6:56:c1:a3:05:c0:d5:f4:b1:24:
23:31:65:1a:31:98:e8:ce:57:b7:8b:3f:f7:0b:25:b4:4e:24:
84:68:cd:1f:c0:28:16:9c:da:96:db:69:36:ff:ca:6f:7f:73:
22:9e:b3:c4:03:39:32:df:fc:dc:7f:08:b9:95:1b:a6:7e:f7:
30:e4:b3:88:d6:5d:f8:51:bb:18:f7:ea:c2:6d:00:59:63:4f:
17:91:86:79:6d:74:3c:b8:a6:3f:97:cd:94:9c:24:41:f4:ed:
f5:a7:dc:9b:89:0a:5b:55:f9:03:75:46:9b:27:a2:f5:ec:c1:
66:64:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:18 2025 by rpki-client