Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ebef51e-47ae-436f-9739-68c19a9c1707.roa
File: 2ebef51e-47ae-436f-9739-68c19a9c1707.roa (raw, json)
Hash identifier: Q+8x5R8S7mQnNB+JtSh7X0SSqQvysrOl4HFW/BeQ5Kg=
Subject key identifier: 1C:A7:F0:D3:19:39:E0:4E:D2:A1:33:BE:08:53:AA:73:E1:81:3A:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18C025F3D49E101ADC4F0DD771F83394F10C7F89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ebef51e-47ae-436f-9739-68c19a9c1707.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.213.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c0:25:f3:d4:9e:10:1a:dc:4f:0d:d7:71:f8:33:94:f1:0c:7f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=ad5800d197158fb50164c74612d733618bce6203586ababd32ac5b8d60025cb5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:05:96:ba:73:46:60:6c:a5:68:65:e6:2b:
cb:43:8b:2e:ab:2f:7b:34:9c:f1:74:51:2c:66:9e:
d8:f2:fc:2b:18:f3:1b:5d:b9:36:c5:d9:40:6f:69:
d9:a2:df:9c:46:31:af:fd:8d:32:40:91:34:4d:45:
e7:8b:90:fe:46:c9:66:d4:ad:4c:3c:dd:1d:35:cf:
fb:6d:28:d8:ba:e1:90:c5:47:a5:64:be:d7:84:50:
d3:92:e6:e5:7d:c4:70:28:bf:76:94:8f:3c:f8:f9:
36:c7:2b:71:07:92:65:1e:1d:3a:92:d3:c6:bd:5e:
61:e3:08:4e:c6:53:16:90:10:15:c1:31:67:eb:5e:
59:6e:5a:01:7c:d6:eb:2d:be:e3:34:d2:40:37:49:
da:93:53:13:18:e3:2d:a8:a5:71:5c:73:4c:3a:a4:
4c:19:c3:89:28:ae:e0:a8:9a:7f:55:f1:23:63:6b:
ba:29:e9:18:35:69:74:6b:26:51:66:54:4b:fc:91:
0e:ae:c9:40:73:e5:37:36:93:6e:51:09:06:fa:9f:
0d:9d:40:b5:5d:45:da:3c:18:87:54:5e:49:db:9d:
8a:37:fa:bc:24:6d:5d:90:e7:dc:38:ca:85:a0:22:
a1:be:a6:6c:30:9e:a4:58:58:e3:9e:fd:da:4d:c4:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:F0:D3:19:39:E0:4E:D2:A1:33:BE:08:53:AA:73:E1:81:3A:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ebef51e-47ae-436f-9739-68c19a9c1707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.213.78.0/23
Signature Algorithm: sha256WithRSAEncryption
49:3c:c3:7f:a2:49:12:7d:3d:e1:a5:a1:e1:c0:96:35:8c:d7:
56:fd:6f:a0:4f:f0:68:03:12:56:29:9f:8e:03:e8:9c:8e:9a:
df:3e:f1:16:89:f6:e1:94:e9:4a:17:eb:c3:b7:69:bb:6c:53:
a3:a1:57:c4:80:be:b3:30:e4:1e:65:87:22:e5:01:b0:0a:b7:
a4:2f:aa:1d:77:d7:a3:77:02:d0:ca:6d:cd:1d:b7:93:e7:eb:
9b:97:99:fd:df:af:69:cc:80:c2:2e:dd:8e:d9:8d:06:e5:b2:
d1:01:56:fe:7e:63:3f:b5:fa:f9:25:cc:d3:64:4d:f5:c9:a2:
a5:c6:45:39:9e:01:37:36:37:1a:0f:29:2a:c6:3c:4d:1a:29:
eb:56:d5:77:7a:06:b5:f4:02:ae:2f:95:1e:bb:44:7b:74:6d:
09:b0:86:54:a9:23:3a:b4:9c:0d:4d:90:81:22:16:e5:99:aa:
87:34:2a:cf:f8:0c:cf:13:2b:57:a8:8d:f8:98:23:29:2a:72:
91:bd:f0:d5:04:cf:91:1c:f7:ad:45:5c:b0:a0:50:6f:35:cc:
08:16:f5:c2:d1:29:7f:51:52:18:d6:e7:b0:1f:89:2b:f5:e9:
d3:f9:00:89:90:34:3b:97:8a:ad:54:14:ec:2c:bf:63:79:51:
9e:58:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:05 2025 by rpki-client