Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
File: 565bd2b5-79dd-4341-a5bc-d68981cd9648.roa (raw, json)
Hash identifier: OUZdvDmNW0VvdWvpKs0IPGcyzfWhTZgwEn6DzIrn4sY=
Subject key identifier: 72:96:50:C0:03:9A:9A:E8:28:31:98:8C:51:F4:B0:22:1E:09:A7:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 168F2D8B5E8AECD0ADDD11D05B6FFB73C370E774
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8f:2d:8b:5e:8a:ec:d0:ad:dd:11:d0:5b:6f:fb:73:c3:70:e7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=764c003d0528565530f5629c3e820d82babc74ea2b00fc27253b4bec8a1cd548, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:0f:c8:d5:37:87:4f:de:4f:4a:e5:bb:6c:
8d:89:b9:8a:b5:40:fc:87:41:65:98:37:d7:0f:3f:
f1:35:ab:54:28:97:7d:1e:6f:44:1b:57:5d:19:96:
d3:d1:4e:cf:03:0c:ea:d1:08:f4:7d:08:90:65:02:
e6:2d:dc:72:a6:58:e6:9c:67:c8:5b:2a:b2:6f:a8:
6f:33:ab:89:16:5c:a4:1f:0f:c6:65:af:7b:40:e6:
05:81:39:da:bc:27:d5:29:a9:80:0f:a3:83:8f:94:
f4:aa:61:21:ba:45:d1:f6:cc:e3:73:9d:41:79:29:
f3:60:ad:55:74:58:bd:97:29:2e:32:a7:80:34:6a:
66:b3:0a:91:08:da:0f:27:f4:93:52:47:2e:3d:95:
85:7e:a7:93:4d:10:28:ce:b5:77:82:72:d1:7b:6f:
9b:aa:dc:ae:74:7e:c5:10:d2:f6:d7:65:e6:9e:5a:
61:fa:f3:25:18:1d:c7:7e:d2:dd:7a:92:b5:1b:85:
73:2a:fd:ec:09:50:37:58:bf:10:17:b8:68:d7:d2:
85:0c:74:d0:8d:da:7d:17:47:8a:76:a8:d0:b1:c1:
4f:e1:cc:db:6c:f2:69:25:d8:be:0b:a0:f5:21:3a:
37:b8:39:41:52:b8:ec:21:3a:5d:9c:b1:22:ad:99:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:96:50:C0:03:9A:9A:E8:28:31:98:8C:51:F4:B0:22:1E:09:A7:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:e1:61:b5:5f:93:99:cf:5c:a5:0d:3a:f4:a9:13:16:62:6a:
68:e3:10:67:d6:f6:31:c2:46:09:2a:5c:01:82:54:43:04:1f:
e3:5e:25:ab:a1:7a:b0:b4:f3:a2:d6:59:3c:08:de:ce:b1:b7:
33:50:5e:0f:bf:64:6e:d7:b1:7a:e0:21:c0:d7:b0:53:38:76:
75:8f:a5:6f:bb:27:50:c0:7a:29:d2:4f:2a:0a:f7:97:a1:1e:
93:3f:4e:75:ca:82:90:2b:76:30:20:09:df:15:22:c8:9c:f3:
c9:22:51:c2:b4:19:b3:67:e3:7c:b1:a3:06:3f:b0:8a:3b:d1:
51:42:34:f1:05:0e:47:48:94:a3:e5:68:1a:d5:7f:5a:1c:14:
a0:38:26:77:b1:55:fc:a9:fe:d4:94:14:f7:89:1f:53:7d:d4:
f5:0e:c9:ae:b0:ef:b9:6c:34:b1:7b:03:ed:7d:d9:21:f9:fc:
50:66:db:c8:8e:68:0b:b1:34:81:71:ef:18:08:02:be:b2:f2:
08:e5:25:03:35:18:20:7e:78:bb:52:b8:51:4b:03:c7:34:b2:
ca:ad:1e:f1:e8:45:e1:ee:43:8d:f2:87:3c:24:82:65:56:8a:
62:5b:79:70:e1:0f:61:48:a5:97:0b:b2:a2:35:aa:a0:a7:19:
e4:c7:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:21 2025 by rpki-client