Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7642d3ab-849c-439b-8014-211a2e42cdab.roa
File: 7642d3ab-849c-439b-8014-211a2e42cdab.roa (raw, json)
Hash identifier: VmQLsM/n5mUP1VNtYWmK3Dmcj992eD8GTJXoz1swHSA=
Subject key identifier: AC:5B:1E:7A:FD:23:81:3E:70:A8:67:96:BF:F1:1A:7A:D3:73:1B:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3BCE39875A3A6B606FCA7DF00BC755B26EE0EDB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7642d3ab-849c-439b-8014-211a2e42cdab.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 22394
IP address blocks: 139.56.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ce:39:87:5a:3a:6b:60:6f:ca:7d:f0:0b:c7:55:b2:6e:e0:ed:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=682929a81b9602a81a21e3d141c38e6a205cd087ba0920f358caecc17f70d130, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:63:f7:cd:58:7b:9d:1a:eb:37:be:2f:08:
76:e6:14:07:75:b6:7e:01:7a:ce:a6:07:2b:e8:31:
c7:97:81:cd:f0:c3:98:e0:d1:0e:69:5c:72:b7:1e:
24:96:e6:76:ec:6c:6f:6f:f9:6e:87:1c:45:8d:4c:
c5:61:6a:8e:b9:4a:a0:bb:ee:28:7f:85:af:52:f9:
e2:53:5a:57:11:2d:10:52:82:fe:2b:39:7e:dd:f5:
56:49:df:3b:cd:42:2b:8e:19:bf:6c:f2:b5:05:12:
02:c8:ac:7d:e6:1b:70:75:a7:b8:a4:1c:36:59:6f:
6d:ed:90:9a:59:02:6c:10:f3:82:4b:33:b8:ce:63:
5d:16:e2:5d:58:8a:92:be:b7:a9:ba:a0:7d:22:e3:
31:f3:fc:0a:6d:02:0c:4b:c8:02:b2:dc:27:71:7f:
15:c5:c0:2a:d4:02:9d:1f:33:0b:d5:52:55:f5:c6:
c2:64:14:a6:c3:cf:dc:0d:f4:7a:4f:13:45:87:3d:
b5:8b:04:eb:8d:b4:0f:4c:ae:91:38:d7:5b:f0:59:
5f:a5:16:3d:13:fb:5d:b5:f8:b7:15:7b:0b:0c:eb:
fa:af:31:8b:af:35:36:d7:98:0f:9f:d9:07:a9:73:
26:3c:7d:d0:97:78:2b:c7:eb:b3:65:0c:e1:98:03:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:1E:7A:FD:23:81:3E:70:A8:67:96:BF:F1:1A:7A:D3:73:1B:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7642d3ab-849c-439b-8014-211a2e42cdab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.5.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c4:1d:37:16:a8:27:8c:6d:7e:7e:42:4e:eb:da:6e:c2:a4:
df:04:46:d8:51:e4:48:d0:41:84:66:c4:5f:36:62:79:f1:ea:
2c:4a:46:4f:8b:3e:d2:ba:1b:13:5b:a5:52:6b:bc:4f:6e:1f:
8c:37:77:b1:ab:7d:fa:5c:a8:04:fe:54:31:ec:78:fd:42:d7:
a4:67:30:a5:77:fb:3e:24:f5:4b:e0:31:6b:97:a8:6c:b6:5c:
53:e1:62:7c:10:a3:a4:f3:e3:0d:a0:56:38:15:45:b4:82:5b:
47:ad:3e:4f:e3:5f:05:37:82:cf:4e:58:a1:16:3a:82:33:b2:
9c:40:6a:bc:5a:f1:ca:65:9d:01:63:45:18:2f:7d:cf:e5:30:
d5:3b:25:62:2f:ae:a5:31:b9:b5:bc:54:de:b3:56:53:60:35:
59:18:3e:a8:8f:ee:85:7d:c6:fb:ea:0e:3b:cd:aa:f1:1c:dc:
0c:fc:85:64:dd:bf:31:05:c6:31:31:82:2c:a8:ec:f1:ec:f1:
16:5e:b6:51:b8:1d:cc:08:59:f4:b3:72:1c:0d:e4:73:56:df:
0c:20:b8:63:85:d0:bc:ea:13:4d:46:c4:54:65:8c:23:f3:b8:
d1:b3:d4:e5:9e:34:f2:b7:9f:4c:b5:11:0d:ae:80:b9:a2:d6:
05:ea:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:50 2025 by rpki-client