Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8fb86d-7839-4e6e-a522-2a3aa127735b.roa
File: 4a8fb86d-7839-4e6e-a522-2a3aa127735b.roa (raw, json)
Hash identifier: TTfkwI+hTEH4F6Kr9X8XwF/YQOABfC46W4bqZm02/EE=
Subject key identifier: 44:1B:45:CB:F5:48:89:75:1F:B0:8B:F8:E3:1F:E9:C0:3F:13:9D:1F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 748AECA8C2E81F7177857A1E0F4ED6105DD03BCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8fb86d-7839-4e6e-a522-2a3aa127735b.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.165.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:8a:ec:a8:c2:e8:1f:71:77:85:7a:1e:0f:4e:d6:10:5d:d0:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=9561f60aac6904061bc70b725ca1339c53fbf701375ad09c8c021c76f4170055, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:53:04:7b:39:91:87:ea:20:96:4e:08:42:
ce:65:66:db:b6:7c:80:f8:fc:ea:98:3d:8b:b3:01:
fb:d9:61:21:f8:49:8a:6e:2f:3e:eb:3d:9c:3d:0d:
f3:f5:6d:8a:48:37:51:f9:60:cc:1c:bb:81:f1:98:
8f:52:ee:90:36:f1:6d:3d:66:d3:12:a7:0d:eb:bc:
6c:1e:6f:1d:80:3b:4f:24:ad:d2:0d:37:a0:e0:f5:
08:b8:7e:8b:45:10:d7:35:81:16:7f:6e:9a:4b:4b:
5a:d1:7e:25:bb:8f:9f:e2:61:ab:25:02:56:1c:7f:
6d:33:72:59:eb:37:2a:a6:51:4f:44:98:e1:f0:6c:
bf:35:80:ef:b7:9d:b1:7a:52:0a:7b:0c:b3:8c:61:
18:ae:26:86:75:61:b7:5c:fd:ce:ea:c4:b1:be:1a:
4d:57:bf:1c:46:be:e8:c4:f5:c8:bb:bc:24:b0:dd:
9d:00:5c:0b:2c:9b:3c:00:2c:d6:b5:3e:22:02:ca:
54:cf:8b:5a:05:99:6f:8c:fb:3d:51:4a:45:5b:de:
ff:10:bc:2c:75:4f:66:24:5c:fd:58:e1:61:a7:a2:
57:d8:c0:69:88:80:a3:6e:de:71:13:67:1b:14:7d:
b5:94:19:4c:c9:01:52:73:bd:83:95:be:10:a3:2e:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1B:45:CB:F5:48:89:75:1F:B0:8B:F8:E3:1F:E9:C0:3F:13:9D:1F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8fb86d-7839-4e6e-a522-2a3aa127735b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.165.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:de:47:a0:3d:55:f1:85:16:52:26:f1:05:a4:43:1f:09:c3:
43:59:53:0d:b2:c2:01:1c:a9:2e:b3:8b:c7:97:a0:48:63:ff:
ab:20:fb:2d:26:e0:c1:52:bb:95:45:fb:96:0e:96:2b:71:99:
e2:60:aa:ad:ca:1f:18:69:5b:75:20:45:21:5d:61:9a:30:5a:
d6:8d:88:d6:cd:e9:23:c2:4c:be:2c:40:8e:a0:c0:2d:ae:8b:
6e:c1:3b:20:2a:9a:21:c8:2e:c9:16:34:53:f3:c0:13:8f:34:
f6:25:12:84:59:77:d1:42:91:5d:30:3e:c0:ea:09:89:ee:92:
1f:f5:9e:41:eb:a5:c3:22:51:74:3d:5f:fa:1b:c3:c9:6e:6a:
0e:87:10:a9:e0:b4:dd:4f:07:6c:a3:00:23:a0:d1:56:6f:55:
2c:07:20:3f:4a:3b:bf:50:db:62:c8:65:a4:22:4b:41:2c:95:
70:95:30:df:7e:b3:8e:62:28:52:99:83:c6:a9:5d:17:a0:71:
e0:6f:3e:9a:33:4e:ae:fe:3b:79:29:f2:80:3a:2e:e0:0c:1e:
b0:3a:85:9a:fa:9d:c3:e5:13:b5:fa:72:19:93:7c:7b:a9:55:
15:43:a6:3b:93:ff:a3:1b:03:3a:61:ee:cd:7b:8c:57:88:03:
85:11:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:40 2025 by rpki-client