Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6076b8a5-2430-4e9c-a4fc-13785f08cd67.roa
File: 6076b8a5-2430-4e9c-a4fc-13785f08cd67.roa (raw, json)
Hash identifier: OZlo4NcrmR5Tp6sW0Wze+C8Wf7P/YEZ53W9kw1ggHbU=
Subject key identifier: 4C:26:94:C5:9E:8F:34:BC:3A:42:A3:3E:00:8A:07:FB:F5:B6:31:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 101CCD2B7A02F796A321DD899E3361624E89C53D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6076b8a5-2430-4e9c-a4fc-13785f08cd67.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 151.148.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1c:cd:2b:7a:02:f7:96:a3:21:dd:89:9e:33:61:62:4e:89:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=0a8f9718484b625a79dc2ef7c713fac22295684de52a9549ad89b297c9393310, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:7c:30:98:cf:61:92:fd:b0:69:69:f8:84:
c7:1c:47:9d:a8:db:94:df:b1:6e:63:9e:15:80:cc:
9e:4a:a3:d8:83:7b:63:3e:92:bc:14:2a:24:5f:ba:
ad:fb:98:80:e4:1e:8d:81:be:9c:44:2a:e6:8b:10:
28:f6:5f:4d:ad:cf:40:40:a5:47:18:62:bd:43:ea:
8e:64:1d:1b:ab:00:c0:10:33:cc:df:70:ad:52:5d:
3c:3b:0d:1f:68:83:8e:66:38:0b:3b:00:32:96:cb:
1d:5c:54:f3:ca:80:10:48:f3:9d:e1:60:49:d3:c8:
49:f7:89:78:23:dd:37:e7:bb:b7:a4:2d:0b:3c:fc:
39:3e:ff:14:96:8d:33:24:2a:52:9f:4a:dc:3c:20:
8f:33:27:07:3b:0b:86:2f:b6:24:a4:3e:db:f5:f0:
44:05:24:07:09:e7:f9:61:be:43:77:62:0e:12:e6:
50:74:06:5b:ba:f7:9b:c8:12:a9:6b:d2:bf:59:2c:
8c:6f:27:b8:cd:56:af:c7:b7:95:f6:81:35:cc:e2:
f5:33:15:3b:4d:91:53:55:4c:7a:46:ad:de:0e:44:
bb:4c:56:6f:90:81:8f:f3:b1:e0:33:ae:34:f4:4f:
69:ef:f0:40:40:f8:6f:66:0b:56:2a:f0:4c:1e:b1:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:94:C5:9E:8F:34:BC:3A:42:A3:3E:00:8A:07:FB:F5:B6:31:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6076b8a5-2430-4e9c-a4fc-13785f08cd67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.148.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b3:23:f8:f1:26:e5:b1:62:f2:81:12:f5:0b:47:50:b2:0e:c3:
b6:58:9a:c0:7a:db:cb:bb:fb:57:9a:c4:ee:f0:59:49:c2:b7:
02:54:33:76:67:21:fa:66:0a:cf:f5:1a:9d:6b:56:96:a7:5f:
ab:c0:3e:33:b7:1c:01:e8:93:93:42:ca:d6:a8:19:72:74:44:
85:a9:fc:7e:28:41:c0:4f:81:d0:01:79:79:88:e7:6f:80:29:
d5:aa:e0:f9:75:08:87:6b:57:d2:64:6d:b9:ce:65:1c:1c:60:
ef:17:a0:83:79:1b:cd:d6:d0:08:4d:25:d9:c5:f8:d5:27:0d:
3d:b7:1c:e4:99:ba:e8:3e:d0:21:db:25:cc:51:0b:09:ec:50:
33:02:84:cb:33:01:cb:10:eb:09:7a:75:15:8f:01:76:58:01:
3b:95:2e:7f:17:9d:8a:95:6a:da:36:7b:3a:94:de:8f:b4:da:
e9:83:b6:37:85:d9:4b:b4:2f:c4:df:6c:1b:19:13:25:f4:d4:
84:ba:07:b8:a0:d3:77:1c:9d:1d:01:78:91:b0:95:53:db:f1:
63:0b:ed:cf:a2:2e:9d:74:c4:53:ec:f3:dc:d8:b7:35:52:54:
c1:98:3a:9a:c9:01:7d:7d:63:7e:58:9f:d2:14:2b:f1:3c:6d:
4d:51:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:25 2025 by rpki-client