Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dd4e656-3389-40db-84f3-1cef10dd3ca1.roa
File: 5dd4e656-3389-40db-84f3-1cef10dd3ca1.roa (raw, json)
Hash identifier: 1lULGLpBk0vkj8feQr4r5aRbuQo8G4rkW41e0j9xvbk=
Subject key identifier: DA:EE:C1:2F:D4:55:64:F5:DF:62:C1:B7:08:BA:DA:2E:4A:60:38:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AD56BB4A9FACA8578B62216D427D986C58DFC00
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dd4e656-3389-40db-84f3-1cef10dd3ca1.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d5:6b:b4:a9:fa:ca:85:78:b6:22:16:d4:27:d9:86:c5:8d:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=9588ef8a755ca3f6ee3ef7fe21b0adc825b3607abae2832373dc5042a04f068f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:14:62:75:35:4c:59:7c:7b:aa:e5:cc:c9:
22:42:f3:5e:b1:4b:70:2d:62:70:a7:b1:88:7e:be:
ed:28:db:59:34:05:17:bd:a7:f6:d9:42:4d:a1:05:
36:bc:af:48:f1:02:a4:5f:f5:53:c5:0d:41:14:fa:
a2:d7:7e:e4:11:18:6c:e5:3f:1c:a4:a6:b5:ec:da:
2d:19:e8:25:99:66:4f:52:f4:08:1b:32:a0:8d:f7:
da:61:33:ea:00:72:2e:95:cc:55:35:ea:9f:de:97:
b1:15:46:b2:a8:89:52:03:80:86:6d:78:2f:d7:d3:
94:dd:ea:1b:c3:5f:ca:f7:a4:c2:b6:6f:00:e0:ef:
e3:8e:b5:8d:31:28:40:08:9e:f1:d9:9f:f3:5f:94:
df:3f:11:54:38:46:e8:54:b9:36:cc:40:39:6c:e4:
0b:ec:cc:92:92:c1:c6:93:06:6c:a4:4f:f6:c8:29:
e5:08:83:5d:aa:89:f3:58:51:60:b3:bf:d9:8f:34:
a7:22:09:8b:a8:0a:56:2f:32:51:0e:38:11:16:7b:
24:70:49:84:8c:62:97:5d:c0:fd:0f:d4:bb:f0:5e:
2e:39:2b:62:11:10:41:e9:a7:b4:ae:24:c2:d3:27:
7c:d5:bc:f9:6b:09:ca:b1:38:76:c1:93:9a:8f:42:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EE:C1:2F:D4:55:64:F5:DF:62:C1:B7:08:BA:DA:2E:4A:60:38:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dd4e656-3389-40db-84f3-1cef10dd3ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.144.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:c0:94:4f:f2:7a:1d:2f:a3:56:52:be:5d:49:44:35:6a:b5:
8e:7b:f2:7c:2e:cd:b0:56:3e:c0:da:dd:61:ad:25:60:95:12:
14:45:13:68:a6:98:75:43:c9:2c:4c:85:84:3a:64:4b:66:ae:
03:eb:da:9e:84:6b:13:28:bb:ac:09:ff:46:78:cf:c4:39:ef:
28:62:95:15:9a:51:05:ab:02:04:eb:eb:c6:a6:4d:bc:c7:cc:
21:74:8b:7a:f0:a2:23:86:42:8e:53:b2:b2:65:39:ff:64:b5:
b8:cc:84:02:ab:37:4c:e5:d0:ba:5d:ca:4c:e2:eb:0d:0c:d7:
aa:cf:f7:d5:ad:59:c3:a2:bb:d5:40:86:de:5b:a5:0d:ad:52:
e3:48:6e:fe:e5:7e:6e:2f:d9:6a:53:5a:ed:fb:a0:62:b5:d5:
85:5b:c6:39:f1:ac:0e:4f:82:ef:44:c1:48:df:bc:0b:89:68:
30:fa:a2:54:5a:85:01:0a:51:38:a1:3b:10:c0:b4:ee:27:04:
f9:c9:82:ec:c0:94:5f:0b:2b:93:0b:e9:c3:2d:75:f0:d2:8b:
bf:05:f6:a0:4e:00:96:36:a6:a0:6e:be:cd:5d:8f:e6:c0:9d:
eb:d6:bd:df:1c:db:19:56:6f:ad:d3:fa:8f:4f:ad:2d:16:b0:
1c:d2:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:39 2025 by rpki-client