Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66e59786-c1f4-4146-bccb-708e47a5469a.roa
File: 66e59786-c1f4-4146-bccb-708e47a5469a.roa (raw, json)
Hash identifier: XqVpa+e7Y1RixnnG3JqNpMn4U2CdWdlN17xUl56JFlk=
Subject key identifier: 8B:D4:4E:AA:24:A0:4D:89:A5:D4:F4:6E:D6:A2:C8:50:0F:E9:38:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E0186E6A08D6227860E70A38C236DEF876632DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66e59786-c1f4-4146-bccb-708e47a5469a.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:01:86:e6:a0:8d:62:27:86:0e:70:a3:8c:23:6d:ef:87:66:32:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=9c747677cedb74b387a8487f419e93ed213ee3c59441bce052993895803661c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:72:80:68:52:90:13:9a:88:28:f2:f3:1a:
29:30:a1:41:1f:63:58:80:43:93:7b:47:79:5c:a2:
11:25:ae:1b:ba:7f:2a:86:5a:22:c3:10:a7:16:08:
55:7b:43:fb:76:48:65:73:26:26:46:98:1b:a9:8a:
c7:e1:1c:3f:ed:b3:f5:3c:4b:d6:d5:43:54:55:1b:
ce:97:dc:8b:a6:07:7b:65:48:86:86:f4:0f:ac:1d:
01:38:e7:97:02:8d:15:9c:56:63:64:99:09:02:d1:
4b:2a:67:88:ac:49:56:23:41:6a:8f:97:d2:22:9c:
4c:92:0a:a5:c9:87:23:ba:07:cc:91:1d:44:c2:b5:
95:d5:6f:3e:a1:f5:ef:3f:61:1e:eb:c5:10:b3:ae:
43:a6:37:b7:56:bc:fb:45:66:55:3b:3c:f2:0a:01:
7d:fb:89:9d:80:83:71:30:eb:72:25:4a:8a:40:80:
0b:7a:09:7f:79:a0:7c:12:bb:fe:11:16:36:6b:ee:
3b:a5:8b:a7:5c:df:ce:6c:87:72:78:af:7f:6d:22:
6a:2f:82:3a:86:41:7b:61:56:3b:28:2f:23:0d:56:
85:ca:78:97:2f:40:2c:ee:7e:e2:6e:5e:d7:63:f2:
3b:58:4a:77:31:b4:85:63:4a:c4:ba:a0:fb:dd:a6:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:4E:AA:24:A0:4D:89:A5:D4:F4:6E:D6:A2:C8:50:0F:E9:38:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66e59786-c1f4-4146-bccb-708e47a5469a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:d0:9e:2d:2e:3e:37:6a:3f:36:e3:54:bf:d6:b6:a7:55:53:
d0:9a:3a:27:68:26:37:ad:8b:9a:cc:c5:41:4d:fd:3f:6e:a8:
7e:32:ee:47:f6:a7:d1:b8:0a:91:5e:58:df:16:86:e0:5f:7b:
e6:fc:e9:06:36:1c:68:8e:2b:5e:62:4f:9b:11:35:bc:ca:76:
9f:96:f3:2b:bb:c3:6b:23:52:61:2a:87:b4:a5:aa:63:91:00:
b7:d0:0c:75:9a:36:0b:2a:ee:c8:33:41:66:13:8d:eb:e9:a3:
1c:fa:c2:47:90:85:d9:e8:ad:0d:08:b1:02:47:04:2d:f7:ee:
99:86:a9:3f:12:16:64:6d:c7:c7:23:08:4a:9b:ac:34:f8:50:
cc:dc:f3:d9:69:20:c0:61:11:00:f6:27:a1:2d:98:dd:fc:08:
cb:12:84:d3:61:68:da:db:d5:4e:36:eb:36:76:74:fd:fb:d5:
b3:9c:33:d1:3a:e1:99:88:e1:23:3c:e8:91:22:6e:5d:61:69:
66:a8:55:2f:89:8f:14:b8:da:70:a7:ad:84:a8:32:70:bf:42:
a7:f2:a5:1b:50:f1:ce:78:65:0d:ca:6e:a5:8e:92:20:82:40:
4b:fe:05:38:f7:7e:a1:7d:d1:f5:e5:d9:d3:a7:dc:81:81:2f:
a1:13:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:13 2025 by rpki-client