Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa
File: 8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa (raw, json)
Hash identifier: A1dkn1K3FhaxBgsjWnrpS6WRRZuSyVFvgrwC40sZrsk=
Subject key identifier: 73:31:76:8B:E1:5D:86:92:B3:9B:B3:07:D3:EE:EF:FA:91:EE:2C:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57D7C4FE1C5D7E7D85FFF6875785BABE500E6779
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.232.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d7:c4:fe:1c:5d:7e:7d:85:ff:f6:87:57:85:ba:be:50:0e:67:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=9f3c5e9ca5f9be830a512e8d614a790e2fda9710e3ba471af4070cbbf3a77701, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:93:19:8e:8b:cd:f9:bc:c8:f0:e3:3e:1c:
34:43:07:7b:b8:7c:f9:ac:6f:e0:6d:5d:91:72:8a:
f6:ef:8a:dd:ba:22:b0:cb:27:6f:1f:a0:89:4a:cd:
91:ab:45:fe:24:d4:46:f7:06:7f:79:aa:e4:77:59:
2a:ee:f1:8a:89:37:bb:d5:c9:81:91:f8:f6:fd:d5:
73:26:98:07:96:2b:37:67:da:fc:9d:6d:41:bf:90:
cf:aa:db:70:22:ba:d7:8d:ba:1b:9f:bd:da:18:81:
8f:2f:41:13:0a:f1:b2:81:8c:99:f8:92:ee:88:48:
bd:55:3b:01:aa:87:71:03:50:e8:42:79:37:fc:ec:
63:ef:85:5b:ea:50:37:64:1f:40:4b:d1:af:d5:80:
16:8a:81:96:c1:23:d5:82:26:c5:c6:71:7c:b2:b9:
a8:26:26:83:44:b0:47:59:f9:be:0a:96:da:5b:53:
15:9e:1d:61:55:c1:62:ef:3b:dd:c8:7e:a3:b6:59:
5c:68:e1:82:2c:bb:1f:6b:ef:95:f6:ab:5f:f9:10:
5d:20:00:0d:d4:23:07:34:98:ca:00:59:48:cb:85:
16:ba:46:5f:e3:94:96:74:3e:4d:25:bd:3e:14:b5:
d1:30:4d:4a:cc:52:78:de:43:f8:98:a8:d9:7c:89:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:76:8B:E1:5D:86:92:B3:9B:B3:07:D3:EE:EF:FA:91:EE:2C:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:14:94:a6:d8:c6:cc:01:b2:7c:d2:78:46:a7:d0:3f:2c:f0:
3e:61:30:8f:2f:c5:f4:27:70:01:35:4f:b1:d2:b9:0b:47:e5:
62:3b:2c:ce:74:58:12:77:f6:53:96:f2:4b:d9:76:5a:24:11:
79:c2:81:71:bf:d1:82:2b:cd:35:44:01:6d:d6:ca:de:c9:96:
11:26:9a:f2:ea:94:e9:2f:6c:7d:02:32:24:c4:75:13:f3:e5:
75:33:a7:68:e4:be:b1:27:f6:6e:12:22:9e:d9:26:7d:67:a5:
c7:31:cc:07:c2:7d:46:48:29:49:37:bc:5f:96:b6:32:0f:aa:
df:6d:90:a1:df:54:7a:ef:ca:48:7a:cc:38:56:4c:05:59:eb:
f1:99:5b:9b:40:75:38:0d:46:28:6b:c9:39:1e:ca:58:23:d7:
0c:ef:7c:7c:3e:0e:44:3a:e0:f7:dd:fe:e5:8e:9a:af:d1:be:
f7:00:ea:80:f3:f9:af:28:0e:1f:5c:1e:61:55:a9:fb:8c:32:
34:9a:e7:ec:38:6c:df:67:a4:0c:0d:2c:a4:19:7e:01:67:75:
90:2a:d9:fe:b1:28:ce:c2:34:37:0f:5e:10:99:21:86:ee:34:
bf:d9:bc:93:52:e5:6f:84:e3:05:07:bb:7e:66:a8:da:67:9e:
6d:4a:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:07 2025 by rpki-client