Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511398d8-4b16-401f-b4eb-862b98bc0a55.roa
File: 511398d8-4b16-401f-b4eb-862b98bc0a55.roa (raw, json)
Hash identifier: x7ijVtmhoX+DnNQLOJAmUM3HlGAWytE47abiLMjNtDY=
Subject key identifier: 4D:88:0F:58:1D:09:B5:A8:7F:9B:77:E2:14:55:FC:76:46:30:F3:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6AC6F1CD0D6E107FBE2F532E6F0BF8355486CF83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511398d8-4b16-401f-b4eb-862b98bc0a55.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c6:f1:cd:0d:6e:10:7f:be:2f:53:2e:6f:0b:f8:35:54:86:cf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=85f183198cd53ddf67ec217cf848c56ae3cfb3e47711b7231586280e001af765, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:31:af:a6:2a:de:5c:00:89:5f:08:b1:2b:
f9:eb:0f:88:2c:0d:f7:d2:ab:5d:cf:de:bb:e8:1f:
de:0d:89:79:36:60:86:a7:6d:3c:cc:0b:b9:ed:59:
34:b7:d6:38:e3:c4:d8:52:81:c2:a4:27:14:16:b2:
e9:fa:f3:ea:c4:aa:0d:69:0f:b0:a4:84:08:05:21:
c1:02:5c:28:55:66:44:98:67:12:5c:87:05:33:47:
b5:e3:b8:fd:a1:b0:73:d1:42:2d:59:b3:fe:d6:8a:
77:20:ec:c7:1f:e7:6e:90:68:47:63:da:dd:5c:0c:
8d:4d:8a:2c:63:9b:6e:78:6c:74:d5:7b:54:7d:4d:
2f:8b:f5:42:e5:47:7c:c5:14:95:5f:bf:9c:a9:55:
9a:44:95:2e:4f:be:94:7a:dc:4e:28:b4:8e:f4:ba:
9f:4e:bd:6d:2a:89:be:21:55:1e:3e:8c:d3:5d:7e:
b1:86:c6:90:8d:b7:90:76:5c:3f:41:99:81:b8:66:
a1:a4:d9:0a:de:44:7c:d6:a0:d2:83:6c:fc:97:fe:
5b:84:bc:8f:4c:ef:a9:c2:6b:3a:96:52:3b:0f:06:
de:f2:1e:22:4d:60:35:c1:c7:f6:a8:fd:a0:32:25:
9f:ef:cb:25:75:a5:02:ed:d8:18:2c:48:ff:ce:a1:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:0F:58:1D:09:B5:A8:7F:9B:77:E2:14:55:FC:76:46:30:F3:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511398d8-4b16-401f-b4eb-862b98bc0a55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:58:42:04:95:57:58:b5:1e:f3:89:6e:c1:8c:9e:c2:f8:94:
bc:07:24:2f:ce:a9:c4:af:95:5a:44:ee:19:dd:e7:4a:fa:dc:
7f:f4:08:24:47:1b:a6:2b:84:d9:7f:d3:00:cd:21:57:9d:76:
d3:49:d1:cd:01:df:0c:76:13:4a:d8:ad:4a:91:62:e5:20:cd:
7a:ef:dd:c5:5d:47:bb:b5:c6:35:95:ec:7d:84:b1:2f:2e:41:
05:1a:84:b8:11:e3:36:52:2a:c2:ae:27:4d:0c:ef:96:9e:db:
31:0c:dd:ee:27:c1:c1:39:cf:24:7a:51:d8:a0:86:ab:bb:15:
df:12:79:26:ef:be:01:95:59:c5:a8:06:74:c7:d9:92:34:9e:
60:41:66:a1:39:5e:dc:9c:95:48:83:c4:a5:56:90:fd:8a:b8:
9e:f4:8b:d6:21:75:c7:f5:df:7e:86:58:3a:73:01:d8:af:70:
f0:c6:ea:c2:39:65:be:8e:98:cc:24:6f:f7:9e:e5:bc:c5:3e:
62:b9:8f:ea:1a:a4:50:8d:cb:f1:0d:a3:f8:27:05:36:44:d4:
62:68:4d:b0:a2:a8:d7:4b:fc:eb:ee:af:ce:9b:c6:51:97:ef:
32:6c:32:f1:bc:9b:35:a2:05:03:f6:1d:13:0c:a0:ad:8d:78:
f2:cd:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:19 2025 by rpki-client