Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36bd616e-29a6-4e36-8ec5-5fa954c5fb9e.roa
File: 36bd616e-29a6-4e36-8ec5-5fa954c5fb9e.roa (raw, json)
Hash identifier: jpiHPI8RQike3JP85cjd67nOuuVbmdWZdYsO3DTH5HY=
Subject key identifier: 02:4B:B4:49:4F:5D:8F:6B:D2:3C:26:94:C0:FE:51:95:4F:DC:1E:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 10C609535A6B5F40447F15A4F78D75111FA2EE6E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36bd616e-29a6-4e36-8ec5-5fa954c5fb9e.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c6:09:53:5a:6b:5f:40:44:7f:15:a4:f7:8d:75:11:1f:a2:ee:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=b26f491fd21dd26f717ee3a542998c330aa603068545d7c4f13d00f4331a8652, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:19:0c:ca:e6:dc:bd:00:23:1f:18:a5:42:
a9:73:80:58:c8:ce:c0:51:4c:64:cb:0e:71:9c:0c:
51:f3:6a:bf:c5:1d:2b:60:8d:de:1d:75:b6:64:3e:
d6:d3:45:74:e6:ad:3b:ef:af:b0:70:4b:2a:a0:71:
80:21:15:77:ca:74:75:e5:76:72:86:9c:45:23:07:
ce:8e:a7:07:a1:1c:64:99:20:b1:f5:a1:7c:eb:65:
6b:0a:4b:28:68:4b:1b:1d:8c:42:91:d0:fa:46:3e:
d2:fc:c2:c0:cb:e8:13:b2:88:f4:0d:37:6e:64:56:
69:58:bd:5a:a3:8b:3e:94:ac:35:ef:0a:19:bf:7e:
ca:8a:c1:25:7d:77:c0:2d:f7:71:a3:35:2e:03:fa:
29:0b:05:2a:49:23:a5:0a:ef:6b:3d:69:42:14:f1:
a6:5d:3d:ac:4c:5f:f0:22:3e:74:a9:ef:ad:ce:ee:
f1:49:da:96:f7:10:2c:c5:db:14:66:9d:cc:4c:61:
13:21:68:c6:eb:ed:58:d3:b4:12:a6:cf:89:2c:9e:
47:93:62:3e:cf:3c:ec:94:d7:83:67:db:b7:e0:d5:
65:62:0f:18:34:52:d0:a5:1f:e8:5d:5e:77:46:d5:
98:cd:bc:d9:1b:40:62:f7:ae:29:c9:50:d8:86:44:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:B4:49:4F:5D:8F:6B:D2:3C:26:94:C0:FE:51:95:4F:DC:1E:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36bd616e-29a6-4e36-8ec5-5fa954c5fb9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:8d:58:a2:5a:90:a4:a4:6d:4e:28:fc:2d:b7:1d:36:10:f6:
f5:05:f0:2c:45:9c:b3:7b:ff:7b:57:d1:75:fb:02:85:f5:f2:
4a:96:e0:d4:7e:3e:73:7c:d1:2f:15:37:61:df:b5:a9:fb:af:
59:f6:c0:dc:08:a7:0b:5b:3d:a3:40:e5:24:67:2f:4d:e2:a9:
09:28:2b:cd:89:f7:76:f8:c4:05:e9:cb:f0:65:82:9c:67:da:
d4:29:75:93:17:a8:0a:9f:41:ff:d9:7f:07:96:11:2a:07:43:
52:87:2f:e4:0d:d0:12:7c:82:64:2c:14:e6:90:98:38:64:5e:
c0:3c:0f:e0:05:fd:b7:9e:de:f8:4f:35:90:e4:5c:48:71:db:
1e:e4:7a:c3:7a:82:65:78:40:86:fb:9d:61:e3:d7:1c:d9:24:
b9:b8:46:28:01:e4:e3:b7:5f:5c:ab:88:70:4a:e5:c2:a2:15:
7e:e0:62:ed:86:fa:15:4e:82:9f:14:d8:dc:49:08:33:65:63:
64:be:f6:65:52:f7:0e:11:49:51:77:c4:eb:3a:40:d0:f2:1e:
66:c9:c9:69:cf:a6:a4:af:37:97:ba:b8:40:8c:04:6e:38:d6:
04:84:1b:44:b1:52:68:78:38:ad:b0:47:b3:61:93:45:9f:91:
63:1c:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:17 2025 by rpki-client