Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3550ed23-56cb-4039-b3db-d2d82f35e363.roa
File: 3550ed23-56cb-4039-b3db-d2d82f35e363.roa (raw, json)
Hash identifier: JPJEDQTNJT4dB0Sh4EQUIwRJAuiwtboF41CTViFrXBQ=
Subject key identifier: 2F:AE:60:AD:66:20:0E:7E:BC:FE:EF:52:8B:92:7B:1F:60:95:95:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 60A27752F92F138A878D462FCF12ED1132A89CAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3550ed23-56cb-4039-b3db-d2d82f35e363.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.225.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a2:77:52:f9:2f:13:8a:87:8d:46:2f:cf:12:ed:11:32:a8:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=422479a479de9ed4ce8f7c66900d561856e508d16c9ff272b38bc6f2314dd2cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:45:72:d5:d8:37:7b:78:b4:1e:6e:93:ab:
6c:ea:58:31:b9:30:b3:df:6e:bc:23:14:a1:b8:ed:
93:81:b7:88:52:0a:8f:2f:49:0b:65:28:49:5d:96:
9c:93:58:d3:4e:9d:8f:4a:4a:c8:f6:19:61:57:26:
a8:5c:98:39:78:e4:21:15:f9:19:ad:8c:1d:49:19:
29:f0:72:ad:22:eb:c5:e7:0d:dd:b5:3f:51:c5:43:
42:6b:5d:c3:38:3d:93:59:28:a7:12:22:ca:f6:b8:
46:f4:a1:66:04:d5:d4:02:59:75:03:7b:e3:1d:14:
55:3b:59:29:59:d0:73:d6:2d:f1:c7:49:2b:22:a7:
81:dc:00:20:4c:8f:06:a4:cc:cf:d6:55:a2:f1:28:
db:58:e5:1c:8b:53:ee:3f:f0:8d:6d:67:d6:cc:96:
95:ca:ec:05:07:c7:67:70:e4:7a:89:46:db:ec:8a:
0b:e1:b2:27:9c:3a:b2:f3:8e:69:92:a3:78:61:83:
a9:94:d8:dd:ec:d3:54:c8:b5:ba:00:1d:8e:c2:be:
60:76:83:e4:d1:39:e5:f7:23:16:db:7d:49:cc:08:
fe:7f:57:42:4b:e8:78:f2:e4:51:40:1d:ff:01:8f:
33:45:39:1d:38:90:dc:cd:b6:23:14:52:28:17:3d:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:60:AD:66:20:0E:7E:BC:FE:EF:52:8B:92:7B:1F:60:95:95:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3550ed23-56cb-4039-b3db-d2d82f35e363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.225.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:54:b4:93:5e:33:d8:b4:79:17:60:ee:76:8b:ba:da:08:a2:
a5:ae:82:f6:46:86:3a:6f:79:3e:7e:86:8c:a0:d0:59:7a:84:
29:3e:97:92:1e:0d:c1:66:af:b4:1e:db:c4:15:7b:7f:f8:24:
dc:7b:54:84:4a:71:38:11:a5:1c:34:91:92:ba:a3:db:1d:6e:
a9:c2:17:9f:a6:60:4b:b6:d9:4b:7e:2e:de:48:ed:0c:a0:a9:
46:5f:fc:8f:98:17:55:bf:92:ae:b4:da:15:24:39:7b:8d:0d:
4f:fd:b1:28:2b:06:24:71:74:1b:36:98:e0:c9:40:bf:af:89:
a4:e5:fa:76:0c:37:c1:63:e7:1c:0d:bd:c9:b1:40:0b:80:f7:
69:a2:7a:30:09:64:fc:6d:78:10:39:82:9d:24:66:24:74:53:
f8:00:74:de:33:93:ac:fc:f2:c9:47:a2:22:7c:14:d8:cd:fe:
57:49:1a:23:b1:bc:e0:1d:81:c4:e2:5c:74:82:32:8d:ab:b1:
8c:79:48:ef:5e:a3:d1:10:8d:ac:61:50:a5:4f:d6:52:d4:1c:
e0:b2:5c:05:6e:f5:85:6d:fa:53:52:97:bc:ed:ef:af:01:88:
6a:1d:79:d7:07:21:a6:9c:74:91:b0:39:a6:0e:c1:f6:ab:2b:
f2:32:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:21:49 2025 by rpki-client