Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa
File: 2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa (raw, json)
Hash identifier: A9PXHcRN/tMZacXkR2yAebbbG72VBTzBxEJtyJfPjMI=
Subject key identifier: F5:6C:59:D7:D8:DD:4D:C3:C0:79:20:47:80:1F:2E:A7:FB:9B:16:40
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 582404020234EE5BE0620ACE058752D1A8AFE26B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa
Signing time: Wed 22 Jan 2025 00:00:00 +0000
ROA not before: Wed 22 Jan 2025 00:00:00 +0000
ROA not after: Wed 26 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 146.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:24:04:02:02:34:ee:5b:e0:62:0a:ce:05:87:52:d1:a8:af:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 22 00:00:00 2025 GMT
Not After : Feb 26 23:59:59 2025 GMT
Subject: serialNumber=32d89b776e70a9c6f928498fd44cc9e6e8260b5a95da00e6d609c2338a886be5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:68:8e:7a:f3:7a:82:f5:8c:34:07:44:a6:
cb:13:47:d7:0e:9c:26:de:d7:ad:0e:03:26:07:e5:
ac:5d:d2:31:49:96:5d:af:ce:cb:98:ab:08:e1:c2:
eb:fa:12:e1:01:98:07:ee:8e:21:ae:b1:41:01:54:
b3:6c:a8:29:60:6b:02:8d:fb:90:03:e0:25:8e:96:
90:72:a8:60:c3:2a:c2:ab:c3:aa:a0:8a:d2:c0:24:
e1:bc:e7:07:c3:71:02:7e:23:f6:3e:1e:f5:73:14:
5d:5d:df:0c:63:a6:99:e7:84:c6:f0:61:d7:6c:32:
2d:52:a4:6f:65:ae:df:f6:1f:d2:89:b3:76:68:4d:
80:44:ed:86:e0:08:1c:30:78:35:b6:1c:5a:1c:74:
a8:ec:49:26:c4:91:34:0f:9a:a0:43:d2:d8:ec:d5:
ea:20:12:90:6d:ba:70:41:41:be:83:75:ef:b6:93:
6a:b9:c7:56:cb:70:56:d5:ca:89:cc:39:a3:f6:72:
06:9d:42:bb:32:6a:73:e9:be:9a:50:81:19:bd:f1:
e3:0a:f5:b6:3f:31:cd:6f:9e:5b:f3:f8:b5:0b:cc:
67:1d:55:1a:c7:4f:7a:fa:a4:76:ca:b3:c0:fa:91:
42:38:5f:84:27:1c:5d:f5:c9:59:e5:66:11:8b:89:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:59:D7:D8:DD:4D:C3:C0:79:20:47:80:1F:2E:A7:FB:9B:16:40
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:05:d3:a7:83:1b:0d:27:57:2f:8d:1e:6f:da:c8:25:e6:26:
99:b1:38:b4:6e:cd:5e:55:2a:23:65:15:0f:ab:f6:5d:5b:a1:
26:ad:87:b0:4e:6a:9a:8f:02:8b:44:db:de:1c:06:4f:ea:d6:
05:2d:8c:90:ea:9e:d4:21:4b:af:14:69:94:ea:d1:e0:c9:4f:
ab:ad:ed:33:10:80:5e:c4:8e:4f:dd:c4:15:62:2b:fb:ba:75:
f1:35:0b:22:64:a8:9f:85:b9:98:16:a4:36:49:fd:fb:33:eb:
15:e3:de:85:f5:f9:04:34:3c:29:7e:ed:62:3e:59:7f:25:ee:
d6:6f:11:4f:d5:06:15:9f:38:18:d5:44:cc:c6:c7:36:b1:62:
01:b9:af:4b:c6:b9:f1:8c:34:f7:60:76:55:0a:cf:ee:bc:b6:
fd:40:7e:9c:d1:81:19:5d:b9:52:30:59:a4:e3:5c:94:a4:9c:
87:da:f2:44:38:12:41:b8:fb:41:99:9f:10:2f:4a:12:cf:46:
5e:5f:cb:53:2a:ab:f4:3a:e7:87:b6:d9:3c:51:9f:31:90:b2:
90:72:50:ef:4a:da:62:bf:3c:ac:40:e4:d2:c4:40:8d:78:60:
fa:c6:09:8a:fb:06:a7:a5:ef:29:c1:4c:04:d2:11:b5:fa:65:
d7:4d:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:21:46 2025 by rpki-client