Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
File: 461512e0-a72b-4e95-b675-27ac531c5460.roa (raw, json)
Hash identifier: dRR/GTKSMMpgHpM/eSUEZAUOcB30rHG3LJJt4pUSe44=
Subject key identifier: 5B:58:13:0F:FB:45:57:B5:1F:B7:B1:DC:8A:0E:F3:FD:08:1C:9F:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CA09FA3C64FD500625DC716E2D100C1099F6C2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.115.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a0:9f:a3:c6:4f:d5:00:62:5d:c7:16:e2:d1:00:c1:09:9f:6c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=bdae89df6b8e6f4a862752487be15e02a948594a57cbdd8c374db438ec63ec0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:71:94:61:7b:e2:34:a3:13:8f:34:ef:86:
7c:37:d1:ce:4f:a8:ce:65:a3:21:b3:68:61:a0:2c:
be:8f:81:4b:17:f8:76:f1:3a:9f:5d:2c:58:30:fd:
77:0c:bb:14:1d:0c:d8:14:80:b5:40:f0:d0:b1:b7:
1a:70:53:4e:85:86:b2:db:a4:32:5f:4b:f7:cd:9a:
cc:ab:aa:ce:ae:15:4e:3b:18:79:44:7f:2e:29:b5:
4e:65:fd:c6:89:97:5e:3d:5e:b7:b6:fd:1b:e6:b1:
41:dd:2d:ec:37:44:4b:9f:27:54:d0:b1:78:bb:0e:
70:43:77:9d:a5:1e:54:77:a0:41:ec:11:3d:5c:71:
b0:26:6d:79:fc:6c:a9:60:00:2a:ff:91:f4:88:1e:
af:f9:e6:f1:5e:2d:27:db:02:be:c9:55:b0:cd:96:
f0:75:dd:88:84:ec:50:2f:2f:ad:ca:ed:53:ae:93:
4d:67:7e:27:1c:0b:87:c2:a4:2d:16:29:66:cf:36:
3a:b3:c7:b6:4e:27:08:fb:28:5b:2a:9c:31:d5:92:
80:c4:c9:fc:d7:f0:49:a5:9e:fe:b7:d9:27:f8:1f:
a6:f4:11:b1:05:b6:db:dc:c4:bc:56:d5:d8:8f:f8:
0d:04:79:4f:18:e0:38:41:fa:67:4f:5d:86:6a:d9:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:13:0F:FB:45:57:B5:1F:B7:B1:DC:8A:0E:F3:FD:08:1C:9F:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.115.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:d3:76:6c:a6:74:86:17:59:0e:40:08:44:56:b0:56:9b:ac:
7d:85:5c:0d:68:b7:aa:1d:e7:71:77:d9:12:79:91:89:1f:19:
45:03:4d:70:d7:46:17:e6:6d:39:08:68:00:ba:41:f7:db:ca:
7b:55:76:fa:28:f0:7b:6c:ae:c2:a9:60:8f:18:fd:ff:c1:43:
db:95:6e:00:5c:07:a1:f1:f2:8a:7a:65:b5:c6:51:74:e2:7a:
8b:41:d8:fe:58:b7:88:66:ab:fc:b8:91:34:a6:3e:e2:94:6d:
65:14:31:22:ab:13:2d:ee:12:65:e0:b4:49:5e:10:d5:89:a8:
5a:49:2a:10:a1:a4:a2:b9:85:50:53:b5:b4:c9:54:a1:81:ea:
6c:a7:b2:bb:39:d2:61:3b:a2:21:9e:0d:16:0d:d8:15:ae:49:
a7:45:4b:8d:d5:62:d6:5a:16:35:fc:2f:3c:12:08:be:b6:e1:
9c:36:1d:59:50:6a:15:e2:7e:a3:1a:e0:4b:7c:99:46:0e:d4:
74:59:03:6f:5c:16:f1:6f:2e:1d:cc:b0:8f:ac:5f:a1:1b:4b:
39:31:a5:8e:3c:bd:0f:98:fb:eb:75:38:39:58:93:37:b9:0a:
a9:5a:2e:9b:1d:94:10:56:98:72:ea:c9:a4:2b:65:42:b4:dd:
00:0c:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:36 2025 by rpki-client