Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/693ec7f8-77ca-46c8-9d94-1b4c2ddfaa64.roa
File: 693ec7f8-77ca-46c8-9d94-1b4c2ddfaa64.roa (raw, json)
Hash identifier: GUfKJDx/aMA/MopcaRG7RZF4wlVFgsrLDw0vSt5veG0=
Subject key identifier: DA:E9:0A:21:26:47:D4:04:82:2B:76:70:F9:FE:AA:12:DB:00:2B:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55782F5386C4B36E9E9333E6E5CCC7857806A60A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/693ec7f8-77ca-46c8-9d94-1b4c2ddfaa64.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 139.56.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:78:2f:53:86:c4:b3:6e:9e:93:33:e6:e5:cc:c7:85:78:06:a6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=22bdbd7831f3b4d36eb350c34540ba087e984f7e221974bb4850469dc24b67ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:94:b3:ea:41:1a:dc:45:ba:30:ca:ae:dd:
d9:d0:0c:6d:b7:5d:15:4c:61:b2:f3:ab:36:58:92:
e3:3a:66:84:70:32:ba:2e:ac:4b:c7:9b:3e:95:ad:
ba:4e:0c:b3:74:17:97:5f:96:2a:b2:f2:f0:9f:f4:
ec:dd:6a:49:c8:49:0a:c7:8e:8b:7c:cb:fa:ec:cc:
70:b2:dd:fd:67:47:34:58:c0:f8:86:cd:97:bb:30:
c9:67:ea:97:e3:6c:5f:08:8a:55:79:da:0a:da:0c:
d2:79:a0:1f:58:2a:9d:e7:cf:f8:8b:bb:51:26:46:
20:1b:66:2b:e9:d2:00:3c:7f:86:81:e4:c9:ff:89:
e2:80:2a:5e:2f:e0:08:15:de:86:4d:ec:7f:2e:80:
45:33:d3:ab:1a:5e:0d:f1:ff:80:ff:be:5f:52:8b:
b5:2d:34:0f:63:cb:10:e7:c8:07:f8:aa:d9:a1:f6:
f9:41:22:0f:43:d2:d0:23:fc:a6:ea:3f:1c:b4:17:
df:43:0a:1d:92:d8:48:e7:8c:c9:52:f5:da:05:c3:
e2:72:e2:d2:1e:9e:db:ea:57:9c:63:51:2a:fa:b1:
93:15:d4:3e:12:83:5d:00:84:eb:8a:5c:24:e7:ab:
84:40:f6:bf:0e:16:66:db:2d:9f:49:d5:03:42:56:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E9:0A:21:26:47:D4:04:82:2B:76:70:F9:FE:AA:12:DB:00:2B:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/693ec7f8-77ca-46c8-9d94-1b4c2ddfaa64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8a:19:26:d5:63:b5:5e:fc:59:fb:79:85:e7:be:08:a0:60:
85:ad:a1:28:1a:4a:f8:c6:65:90:f5:f1:51:8e:eb:6d:f7:c7:
3f:f0:f9:c3:b9:c2:f7:39:43:2d:f1:28:39:6a:97:3f:66:5b:
73:93:b8:22:24:5f:64:66:03:7d:1e:ab:e4:ab:53:10:6a:53:
0c:9e:c3:43:b9:26:cf:34:41:74:a9:c5:66:12:91:33:95:49:
a4:c7:ca:be:2a:25:95:ca:da:64:6e:5a:eb:44:12:b5:59:37:
8c:45:81:ad:50:56:46:82:5d:ef:d3:a6:a3:b1:60:4f:6b:0e:
e6:e8:ef:58:ee:d8:60:5c:35:48:ab:1d:fa:24:3f:73:6d:7d:
ce:ba:b2:22:b3:9e:7a:d9:b8:df:df:be:0c:13:bf:8d:69:d9:
ef:72:5a:0a:db:08:d2:aa:42:73:fb:fa:d9:e9:39:97:8a:9b:
8f:df:38:a1:f4:cc:0b:2a:87:b1:4f:64:2f:76:85:e3:d9:81:
80:88:d3:ef:2b:23:c3:da:42:3c:a1:f6:1c:b9:9f:d5:0b:31:
f7:4b:c7:3e:4e:ca:af:c0:f7:e2:38:64:36:c5:67:a7:65:92:
03:65:51:cb:fd:58:46:f6:2a:f0:b0:4d:56:86:61:8d:d0:6f:
5d:60:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:35 2025 by rpki-client