Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618ee729-4829-454b-98f1-745ddc00a543.roa
File: 618ee729-4829-454b-98f1-745ddc00a543.roa (raw, json)
Hash identifier: ESDpKmB+FTwuYhtCm1kOMPx6kFCK0dGXUK0cvdCow4U=
Subject key identifier: 0C:51:23:86:2E:4B:6B:D0:2C:FA:8D:49:3A:F5:C4:06:DF:96:A3:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7385567C8DBF67764A70DC04529DADEE60F97BAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618ee729-4829-454b-98f1-745ddc00a543.roa
Signing time: Wed 22 Jan 2025 00:00:00 +0000
ROA not before: Wed 22 Jan 2025 00:00:00 +0000
ROA not after: Wed 26 Feb 2025 23:59:59 +0000
asID: 22394
IP address blocks: 139.56.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:85:56:7c:8d:bf:67:76:4a:70:dc:04:52:9d:ad:ee:60:f9:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 22 00:00:00 2025 GMT
Not After : Feb 26 23:59:59 2025 GMT
Subject: serialNumber=a7c8f788aafc2dd89f5aa31bc9edacabb6ad80a62fe5901ef2ed99976eea1316, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:dc:77:16:99:ad:af:ce:78:ae:2b:9e:56:
a5:00:8b:1e:b8:cb:f5:50:1d:36:00:88:fd:df:03:
3a:5e:cb:b0:5e:08:3d:dc:27:7a:19:79:01:8a:78:
67:05:05:96:95:98:30:58:36:bb:bf:5c:0c:c2:8a:
4f:f4:5a:24:c4:07:6e:09:db:f5:c7:f7:3c:42:58:
90:f8:f0:dc:ba:52:c3:de:a9:eb:e5:35:f9:33:19:
78:72:f9:c8:8e:aa:ac:0a:c5:85:61:87:a3:50:23:
ec:38:7f:43:33:13:a2:f0:5d:7e:8d:a8:df:75:6a:
88:3c:40:9b:49:fb:29:8e:7f:0b:3a:da:9c:01:27:
61:17:d4:86:76:22:b4:3b:7b:84:31:2c:c9:b6:a5:
25:7e:3e:2f:75:d9:52:bc:f3:b2:41:95:a8:df:b2:
99:ce:3f:9f:5b:ab:01:3b:d7:ec:fc:7b:7e:a5:24:
3c:36:2d:b0:b9:9a:58:93:ce:e2:a8:fa:96:50:36:
08:49:e2:e0:4c:cc:8c:e7:6b:a9:70:3e:22:4c:f8:
d4:37:25:e6:2b:d3:4b:4a:31:a3:e0:00:7d:72:93:
23:51:78:31:04:d6:e9:f6:ef:4b:3d:ea:6c:8e:90:
57:bd:3e:6a:76:86:1a:14:53:8a:01:59:41:99:b2:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:23:86:2E:4B:6B:D0:2C:FA:8D:49:3A:F5:C4:06:DF:96:A3:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618ee729-4829-454b-98f1-745ddc00a543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.12.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:69:68:86:55:f6:03:b7:98:04:77:57:48:6d:a0:16:79:5c:
4e:9a:f1:2c:3a:f2:8b:02:de:89:21:09:a4:9e:a2:d0:aa:ed:
f7:8d:87:e3:8a:9b:58:63:7d:52:34:62:3b:bb:f7:95:31:58:
90:08:83:d4:8f:b5:d5:fd:31:87:c8:a9:91:95:c3:98:f1:a2:
62:1d:4a:53:64:22:9e:83:8c:e5:56:62:2d:7b:34:7d:4c:83:
fb:b8:fe:44:79:68:f4:44:70:db:ad:82:7d:23:e3:6d:0e:33:
3b:5a:97:e3:65:ba:3e:d6:8c:d6:e5:92:c7:3f:51:aa:00:4e:
40:4e:57:b8:03:ad:e5:d1:19:c2:ec:fd:aa:03:28:2f:03:61:
53:81:20:62:f5:b3:26:27:b7:be:e8:8a:4c:75:8a:aa:0d:83:
71:ce:5b:b6:1a:8e:ae:e7:22:f0:cd:ad:62:27:ad:72:5a:38:
54:9d:5d:51:8c:10:37:ca:4a:cd:f3:11:6a:e7:20:84:4d:83:
e8:ab:d9:6a:d6:be:ba:6e:67:a1:42:00:25:15:f7:ea:da:ee:
c2:7f:29:7c:44:96:1f:1b:c4:57:22:40:30:66:38:3e:57:8a:
12:3c:70:89:f5:c1:53:48:84:e7:3b:e2:b3:64:bf:30:33:bb:
5a:45:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:59:07 2025 by rpki-client