Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa
File: 3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa (raw, json)
Hash identifier: fC2n9fL/1ND6EVGdIw2oEeI8gbUqUMv+BDYltege0vQ=
Subject key identifier: D7:CC:56:29:94:60:6C:6A:EB:30:93:B1:5F:54:4C:AF:B1:96:C5:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B2648C4B2B929943E720E21BA9CA0460C3BF852
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.248.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:26:48:c4:b2:b9:29:94:3e:72:0e:21:ba:9c:a0:46:0c:3b:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=b1e47f98c848cacfe6505c85946041033fb589f0416c56d3f8f4f305054eebec, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:72:f4:66:b2:e6:4e:4d:be:6a:5c:a1:4c:
7f:48:94:b0:49:04:56:ae:49:30:12:97:6d:96:04:
7b:00:87:dc:06:a8:0a:c0:0e:74:9b:4f:15:62:85:
e0:c9:c3:95:2e:a2:4d:a3:49:82:ec:8a:ab:3d:54:
b1:c3:c0:67:39:66:c8:b8:94:99:9d:be:c5:71:92:
c3:f2:b8:78:50:0c:d2:98:20:81:fd:af:34:bd:2a:
bb:a3:77:0a:df:73:b7:d5:16:16:c7:50:7d:4d:16:
a6:3d:8b:a5:e8:6a:b1:a2:f6:7a:10:aa:5e:ce:d5:
f5:be:65:a0:2a:8b:97:ea:b9:86:98:2b:e8:94:87:
89:b7:6a:6b:dc:d8:da:2b:76:1b:ef:d1:5e:e3:25:
a1:b9:15:f7:c0:8d:92:6b:b1:86:ca:75:27:cf:50:
45:3d:68:56:5e:d2:4e:45:ac:96:3a:88:dc:7a:27:
b9:ba:bc:9d:af:0d:ca:3d:c9:7b:59:33:90:f1:bc:
93:49:6b:a8:53:17:25:52:85:a1:99:b7:02:af:b2:
f8:36:c9:0e:7a:ff:c8:2e:85:c2:df:84:78:de:91:
d3:d6:fc:29:16:86:30:52:06:25:31:59:f2:d3:24:
50:ef:ef:ec:97:14:66:41:42:50:f2:85:37:85:10:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:56:29:94:60:6C:6A:EB:30:93:B1:5F:54:4C:AF:B1:96:C5:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:ad:19:c8:2b:55:37:40:75:e2:7d:4e:b7:92:4a:bb:5a:d2:
3f:00:25:56:b8:e2:ec:19:59:d9:d5:16:69:6f:a3:16:1f:ef:
1c:31:8b:55:06:e7:0e:16:f7:ea:8f:6f:e7:83:d5:c6:a4:0f:
76:57:d5:bd:3e:38:a5:1f:15:2e:99:3c:8f:55:c8:6f:3b:fc:
42:9b:ba:c7:85:d0:84:86:3f:ce:0b:79:02:e0:97:40:bf:a3:
45:cf:5f:17:cc:57:25:44:f2:09:38:fc:2f:ee:41:97:bc:e5:
b0:ee:b4:35:91:f3:b2:e7:9d:2f:33:b1:fe:f9:6d:ed:19:03:
36:67:9f:26:eb:6d:1d:5d:a8:c0:db:23:98:33:c3:48:c3:32:
35:d8:24:fa:1c:0b:c8:a8:3e:05:a9:6c:46:f2:e4:9c:4f:85:
3e:8e:52:7f:3e:f4:e7:83:0e:38:96:cd:21:d6:59:a7:7b:39:
f4:7f:4a:cd:61:c4:94:8c:52:81:6a:92:2b:e0:bc:d1:6b:f3:
69:7d:68:e0:0c:d7:bc:d7:2d:72:b7:02:69:5d:f1:d1:e2:45:
7a:93:c2:58:92:58:f3:20:27:e6:fe:f8:0a:0e:55:e7:0a:79:
11:3f:1f:f4:1e:99:ad:60:9a:39:6c:4d:e8:38:97:2a:70:21:
3c:83:76:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:41 2025 by rpki-client