Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c13ad75-355b-4c19-ae3d-b20d4e2280d6.roa
File: 7c13ad75-355b-4c19-ae3d-b20d4e2280d6.roa (raw, json)
Hash identifier: g5rU7E6ImcZ1nAtprE0EZYhvT8kyrhYCA7AdRtLrmck=
Subject key identifier: F5:BF:D3:E8:34:66:70:F7:F1:BE:59:30:48:C3:D7:C0:45:8B:95:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07C7F4B5CE90357BFC3B33B30F15A66F9E89FBBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c13ad75-355b-4c19-ae3d-b20d4e2280d6.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 5.60.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c7:f4:b5:ce:90:35:7b:fc:3b:33:b3:0f:15:a6:6f:9e:89:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=443440ef1834c7eb2dafe5d1669f5c932ab891841fd4dad0acc2bbb1046a55d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:22:49:bf:e4:4d:5d:3e:c5:16:5d:98:fb:
2c:ff:e9:f8:32:74:b1:fc:45:09:01:a7:aa:91:47:
cd:e1:2e:63:31:4e:cb:a7:eb:b7:de:b0:63:73:62:
cb:b8:15:9c:25:b0:ba:50:49:d8:6d:f9:8b:6d:01:
1a:b8:45:dd:87:3c:66:69:38:32:fe:7c:54:eb:25:
b0:32:15:8a:70:6e:87:d2:2b:40:d9:f5:14:95:86:
4b:c7:d2:9d:fd:13:53:7b:bf:94:09:92:02:c4:a2:
ea:3e:fa:df:7a:9b:6f:77:52:7d:0c:c5:94:63:14:
ca:d3:39:e3:1b:e6:e3:c1:2e:ea:e1:15:ad:68:fb:
7c:eb:4d:1b:d5:75:e9:2d:ff:9a:bd:01:cb:f5:e0:
08:51:7f:8c:ba:28:b1:49:b8:5d:ad:ee:e0:cc:a6:
16:6b:d8:11:95:22:16:83:83:d5:d1:fe:43:8f:a7:
aa:3e:80:53:a9:91:c6:52:aa:55:4a:55:ae:d8:a3:
c8:4c:84:e9:6f:b9:1e:80:68:82:8d:d1:a0:21:e8:
a0:1b:34:aa:a3:ae:bb:e3:30:9f:8a:4d:f7:61:07:
db:97:e6:a2:2c:26:c0:15:79:a5:51:e3:26:40:ee:
ea:ee:f0:48:00:93:92:be:1b:b8:00:16:dd:f4:a3:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:D3:E8:34:66:70:F7:F1:BE:59:30:48:C3:D7:C0:45:8B:95:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c13ad75-355b-4c19-ae3d-b20d4e2280d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.144.0/22
Signature Algorithm: sha256WithRSAEncryption
23:5e:d7:83:f5:b3:b3:76:77:a0:08:2c:fb:bf:24:c4:c4:15:
66:9b:47:ea:b8:a6:10:2f:36:dd:cc:7f:d5:45:25:7b:38:07:
46:ad:e8:01:7f:12:c5:c0:d3:96:dc:84:b3:77:a9:f0:47:83:
d5:0a:3d:47:19:62:9b:55:a0:7f:2c:3e:ba:6c:ff:65:f2:5b:
ee:bb:d9:25:b7:24:60:2f:4b:27:b9:ba:f8:49:d9:bd:28:67:
e8:19:2d:02:b4:30:66:5e:a3:29:d1:0d:75:35:5b:56:e9:66:
66:70:30:dd:47:e5:42:cc:fb:03:65:68:60:b3:98:bb:c9:8b:
c0:bc:67:b8:60:02:a6:cd:03:41:2e:5d:a3:23:c9:89:67:53:
1d:5b:d8:8e:db:0f:21:1d:be:6a:77:45:f9:f2:8b:f9:c3:93:
b2:ad:ec:6e:e2:09:b2:fc:71:dd:f7:2d:95:e3:de:67:32:88:
b5:ab:dd:8b:86:88:22:38:d9:f9:07:4a:6c:75:87:e0:69:aa:
cf:4d:5e:62:8d:37:91:68:3c:2a:5c:43:7c:e6:43:ef:9e:d4:
7d:5c:57:a4:bd:f1:22:2a:2f:cf:fc:a6:1c:85:17:24:e9:62:
d0:68:a9:a3:4c:94:0f:f0:cf:7a:3f:95:e2:02:c8:a1:f2:da:
d0:b6:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:25 2025 by rpki-client