Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f330c67-8854-4561-908b-2fff27d687ff.roa
File: 5f330c67-8854-4561-908b-2fff27d687ff.roa (raw, json)
Hash identifier: QD52NToryxnrKtgYrIWg7DKvQUiWiweSO8ge7uLeEys=
Subject key identifier: 99:94:1C:09:4E:F4:41:06:8B:48:66:44:50:BE:BC:0B:3A:74:6A:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 44F53E7DA5653BCE41604D3F2116E558A8F87FE2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f330c67-8854-4561-908b-2fff27d687ff.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 139.56.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f5:3e:7d:a5:65:3b:ce:41:60:4d:3f:21:16:e5:58:a8:f8:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=516ed2a1463058f26766cf2b4590ffee3a1964825df527a5c59f3b99c3bf2edc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:2d:88:38:a2:e7:8c:5e:65:e1:31:86:dc:
45:3b:d3:3e:16:7f:f6:5c:30:02:0b:73:88:70:bf:
40:09:05:fd:41:94:c6:a9:ff:a4:6f:0c:be:75:14:
7d:15:b1:48:17:52:ca:d7:88:be:20:74:a2:c3:a7:
be:ec:08:1c:5d:4c:66:59:16:9c:01:74:b9:ae:27:
46:b0:15:9d:aa:d4:47:e7:7c:69:d2:60:4d:61:7b:
c4:8d:b3:a7:60:7d:7b:fe:a3:16:b1:10:b2:e6:3b:
f2:6e:cd:4e:16:60:f4:2a:54:e5:3b:f5:30:b0:a1:
85:4f:4b:6b:6b:92:b9:77:c9:3e:ed:3b:bf:97:a6:
6a:dc:b9:9c:46:71:71:30:96:3e:81:27:8b:ee:da:
04:08:10:82:d5:c9:d3:8d:7c:4a:2b:64:2b:bd:a1:
0a:be:e0:58:ab:ea:32:99:42:a1:d3:99:88:1f:cb:
7d:94:ed:6a:d0:28:58:bf:c6:8f:ee:28:c0:a3:0b:
98:9c:c2:79:62:b3:6f:20:9e:5c:03:fe:44:c4:46:
fd:fd:f5:db:88:79:72:51:d1:61:90:a2:fe:0d:a3:
fd:b5:a5:1d:d0:c5:e5:54:20:6d:8a:09:7b:06:b3:
8c:2c:bb:1a:bd:76:74:98:8d:0b:e8:99:1e:44:a9:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:94:1C:09:4E:F4:41:06:8B:48:66:44:50:BE:BC:0B:3A:74:6A:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f330c67-8854-4561-908b-2fff27d687ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.1.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:41:10:1a:09:27:b1:ed:8a:3f:43:d1:43:8a:5f:25:38:85:
0b:93:69:6f:04:b6:65:ff:b1:5c:02:6d:4f:df:f3:8f:2c:05:
a1:6b:7e:52:47:09:1b:61:86:d2:9d:33:cf:4c:b7:82:74:2f:
52:5c:8f:17:56:98:03:a0:de:31:e5:dd:80:6b:75:70:fa:d2:
73:7a:7c:0f:c8:eb:b0:0a:11:2e:ee:16:bc:db:63:45:e3:21:
4c:57:61:c4:b6:f0:ef:67:49:dd:7b:7b:2f:99:06:30:b3:8f:
d5:ea:d2:e3:db:b0:13:f3:a6:83:42:09:b7:e1:7b:ae:ad:ad:
b0:dc:8f:3c:57:8a:44:e7:d5:44:a4:54:8d:5e:d4:df:04:48:
a3:51:2a:f8:e4:d0:a9:67:22:42:50:e7:32:a6:d0:3f:0f:c5:
2a:1b:a6:8d:11:5c:af:af:82:62:ab:fa:7c:f5:4e:ab:c9:62:
ac:56:8c:2f:91:2d:e2:70:68:5f:c9:cc:95:e3:b2:2c:59:cd:
75:85:8d:54:ea:64:b1:15:90:27:4c:c3:c0:e8:82:9f:b6:b8:
94:3f:77:10:7f:6d:0e:bc:78:b9:6a:22:9f:da:e1:ec:c2:ce:
8e:c7:af:39:71:5f:8a:ef:60:5c:51:1f:5e:b8:ef:9d:6b:8c:
b2:6e:c1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:41 2025 by rpki-client