Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e83772b-20e7-44cd-b060-03d5950ee025.roa
File: 5e83772b-20e7-44cd-b060-03d5950ee025.roa (raw, json)
Hash identifier: p5zqF+wHfd/XOWBb5f/fIEV2y5xQgxeutetXvQlqCck=
Subject key identifier: 5A:8C:91:3A:2D:45:28:A8:23:EC:DC:A0:9D:B8:1F:31:11:B1:BD:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 640D0AD3EA5EB883DDDB810C97101522E545FEC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e83772b-20e7-44cd-b060-03d5950ee025.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0d:0a:d3:ea:5e:b8:83:dd:db:81:0c:97:10:15:22:e5:45:fe:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=448e4177561eedb7126c0ab016c578ed1f224d5f4802a885d30523d9f03c47d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:98:d6:b2:90:b3:27:03:a2:41:49:c7:d2:
7f:bf:f5:62:35:39:18:62:d8:42:b6:41:86:01:65:
41:76:fd:28:da:96:5e:d0:30:7d:70:32:72:34:0e:
98:ba:d2:a1:d9:df:33:8f:dd:85:95:ce:c7:8e:c2:
33:80:b9:12:53:b9:44:53:95:1f:6d:85:2b:29:15:
7f:08:83:fa:68:51:81:db:7b:a7:62:a8:64:18:f7:
37:28:ae:10:84:9e:b5:8c:00:45:88:60:31:e1:56:
7e:2c:38:d4:61:2e:7b:db:58:ec:86:0b:da:24:a4:
2d:3c:9b:ee:ad:42:8b:70:91:85:1b:66:ba:f8:2f:
97:0c:8a:6b:50:5f:e5:ed:9c:25:f0:aa:e1:3a:61:
06:1d:0d:88:8a:28:76:04:e5:51:d8:9f:8e:5f:88:
a0:e8:f9:0b:5f:cb:1f:80:38:ef:fb:2e:c8:7a:f9:
c5:11:80:fa:bb:0f:e1:e2:3a:9e:34:ac:3c:d6:53:
ca:ba:ca:d1:a8:c3:b0:53:cf:e4:78:17:44:ff:45:
da:0b:d4:2e:80:61:0d:6c:8d:aa:b5:af:43:d2:65:
f7:44:fa:ba:2c:3e:4b:21:d4:cb:d1:54:e2:a2:d1:
14:7d:da:6a:4a:c9:fb:29:6e:0e:85:31:f2:2f:c6:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:91:3A:2D:45:28:A8:23:EC:DC:A0:9D:B8:1F:31:11:B1:BD:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e83772b-20e7-44cd-b060-03d5950ee025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:0b:ae:fb:5d:07:da:b3:e8:38:74:8b:60:fd:8c:2c:30:c9:
03:5b:7c:b1:f2:81:97:09:0e:a7:d5:7c:a2:9b:2c:30:1d:4c:
07:2c:5a:4d:ad:3c:a4:a0:75:90:f9:ba:05:e2:0c:f1:aa:39:
ea:02:a9:96:93:c1:bd:10:72:64:6a:88:19:db:e2:f4:6e:37:
8c:71:f8:c8:ec:75:ba:1d:e1:4a:e2:76:5e:4f:12:f7:7f:32:
22:a7:26:b9:22:94:c8:cd:b9:54:a2:bf:f8:7c:8e:cb:72:ec:
15:d5:97:58:7d:e6:ed:23:08:9e:11:e0:97:d0:81:dd:57:a4:
64:78:4d:46:e3:79:85:c1:b7:c6:30:53:7e:02:38:2b:c8:9d:
85:cd:08:ab:77:26:88:96:8f:c4:d7:1a:19:25:57:01:50:10:
db:3b:f6:a4:7c:67:1b:4f:74:ba:c0:67:44:d5:32:c8:63:7d:
2b:89:7e:dc:40:40:41:91:84:45:ea:13:70:6c:0d:20:b3:4d:
84:b0:3a:fc:f5:b5:37:72:67:ea:7c:9b:cb:16:9f:5f:ee:79:
2f:14:1a:51:95:d5:07:72:ef:f2:65:85:80:62:e7:21:d2:46:
44:b9:7d:63:28:97:5d:65:64:1a:42:a4:f1:ba:4e:0a:a0:9c:
da:0c:c9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:20 2025 by rpki-client