Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa
File: 659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa (raw, json)
Hash identifier: D4v3uVGXzSURFHCcYErR/tv4BtaTOvZrKPe8lDThy2I=
Subject key identifier: D4:89:6F:AE:F3:77:06:E7:1E:7D:5E:02:69:17:A7:70:C9:26:BD:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70539EAEE0C8A107C644F9C42D81B4C969207AE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa
Signing time: Wed 29 Jan 2025 00:00:00 +0000
ROA not before: Wed 29 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:53:9e:ae:e0:c8:a1:07:c6:44:f9:c4:2d:81:b4:c9:69:20:7a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 29 00:00:00 2025 GMT
Not After : Mar 5 23:59:59 2025 GMT
Subject: serialNumber=3a33d669eb4bedec82440d41442a9624ffe336f9baf543ed6a699698c1007eb6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:16:5b:42:50:60:6b:04:48:a5:d8:39:10:
11:a9:c5:18:6c:11:39:73:7d:c8:ae:51:1d:66:4d:
89:1e:78:db:34:c5:33:92:86:d8:4b:ee:ad:c6:32:
37:2d:ad:cc:1f:7b:d4:ba:06:e6:05:f0:bc:b2:06:
92:02:df:ee:84:17:96:b5:bf:a8:c9:69:25:84:89:
59:5a:c0:0f:99:84:15:5d:da:86:a2:07:99:30:bf:
b6:0d:63:d6:fa:44:c3:7c:25:3f:a0:56:df:6b:60:
ea:12:44:8b:dc:75:37:09:e9:02:8b:be:96:1a:c4:
6e:27:f7:97:ea:a3:b6:ca:11:5e:5b:3d:f9:d8:bb:
cc:e0:80:75:96:1f:45:e3:62:f8:11:84:f0:6a:7c:
b8:54:00:cd:c1:fa:7e:14:7a:65:dc:d9:e2:62:80:
47:73:c3:18:b2:ba:6f:bd:19:ff:35:3b:51:72:68:
4d:d2:30:ea:89:14:80:f6:90:6b:fd:17:41:56:7a:
cc:51:54:54:08:a9:8d:aa:13:b9:2a:cd:86:01:6d:
df:fd:be:b6:cf:14:72:e9:a7:40:d8:6d:7f:b5:2e:
54:1e:92:07:c5:6f:06:3f:ce:2c:c2:5a:19:7b:fa:
18:43:92:da:42:6b:01:69:71:45:13:4a:d4:39:27:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:89:6F:AE:F3:77:06:E7:1E:7D:5E:02:69:17:A7:70:C9:26:BD:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bf:9e:34:0d:0c:9b:bd:16:14:4a:b6:cb:c5:2a:63:9e:44:aa:
e9:83:fd:9e:1f:50:aa:db:f7:ff:ad:90:e1:c8:dc:93:88:84:
d9:fc:3a:bd:ec:70:09:7c:b8:06:91:14:47:50:40:d7:a8:e5:
1e:0c:57:2c:bb:42:ad:39:87:c9:aa:4b:7b:73:03:af:f8:6e:
32:4e:33:90:af:43:9d:50:e1:f2:b8:fc:bf:8b:bc:4a:c7:ef:
66:aa:8d:3b:b5:4e:f5:09:92:c5:cb:5c:37:7d:ab:0e:94:cb:
2d:a0:30:89:1a:80:af:98:a5:cd:2e:17:f3:8f:3c:6c:d1:75:
77:29:64:b2:65:02:be:4f:24:df:26:db:cd:6f:08:e9:48:ca:
e4:a2:50:f1:a4:0c:e1:20:dc:f5:c8:47:3f:2e:19:ef:9a:43:
9a:8f:43:99:67:c3:7e:ee:2c:e0:eb:82:64:6a:f8:9b:02:3d:
03:62:fe:33:b8:f0:d2:fa:6a:49:1b:75:25:02:21:dd:c7:43:
aa:66:bb:fb:88:16:a2:8d:44:30:5c:e4:e3:a1:f2:f5:d7:ef:
43:90:15:62:26:f7:60:d6:29:bb:47:94:9d:d5:00:45:6c:e2:
96:eb:fd:e7:bd:68:1a:6e:de:c7:f7:56:27:ea:3e:2b:2c:5f:
b8:28:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:13 2025 by rpki-client