Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90b9cac4-3ca9-4ec7-88e5-a809fdf74774.roa
File: 90b9cac4-3ca9-4ec7-88e5-a809fdf74774.roa (raw, json)
Hash identifier: wvw8N3EnFeyFIIGOJMY/3ghR4tEQ97rkT+pvWMmfOyY=
Subject key identifier: 52:38:95:F9:E5:DC:27:A3:F1:A8:7A:EB:F1:84:D9:4B:A9:BB:3A:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: DE5766F70A1CED88957C46690808C75D35D6EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90b9cac4-3ca9-4ec7-88e5-a809fdf74774.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 701
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
de:57:66:f7:0a:1c:ed:88:95:7c:46:69:08:08:c7:5d:35:d6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=d6d4640300a29bd5879f3289f650492a6b638aa43de38ba1ce9cd3904031b41d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:1c:e4:2c:af:24:8b:21:ae:4c:7a:6e:bf:
f6:d2:fc:00:9c:d5:58:44:70:76:3e:ed:a6:cd:b4:
df:95:23:4e:f5:c5:3b:af:2e:39:6d:97:9a:42:51:
e9:7b:a9:6e:9a:15:80:b7:f1:2d:7a:65:a5:38:35:
99:f8:54:93:cd:f1:c5:53:f5:d8:7a:37:82:64:7a:
d8:18:7e:02:54:e6:80:11:4a:22:38:b5:03:3d:d7:
e8:51:76:bd:ce:c3:e8:22:94:67:4a:b0:bc:04:14:
46:21:c8:6f:58:1e:67:7c:23:4f:ea:95:d5:fd:34:
3c:f8:b2:8c:06:e9:d6:19:40:07:f8:9c:57:d2:75:
0f:a8:5d:26:00:8e:14:02:40:cc:b1:5c:9a:b5:76:
de:c6:a2:14:04:6e:69:b8:87:54:c8:00:7b:a3:8f:
b8:8d:d6:bc:2d:1b:fc:3b:dd:3c:69:5d:11:a5:c2:
1b:f4:b2:d6:b9:9d:dc:c1:3a:fb:fc:44:79:dc:e5:
c2:9c:87:32:94:6d:5c:3d:e3:bc:5b:5c:42:ee:8e:
3e:f2:d3:ee:9c:7b:57:55:5f:4e:59:ef:b0:4c:6b:
d3:82:92:83:25:58:58:16:64:2a:32:0b:02:57:b5:
4c:14:a1:b3:99:ff:11:79:20:b5:83:50:31:a3:cb:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:95:F9:E5:DC:27:A3:F1:A8:7A:EB:F1:84:D9:4B:A9:BB:3A:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90b9cac4-3ca9-4ec7-88e5-a809fdf74774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bc:03:90:62:3e:09:66:a6:5e:4e:e5:c7:62:ae:18:b1:2e:
af:7b:34:00:34:04:c1:9f:a1:7b:c1:51:9d:e3:62:3f:d6:e4:
72:78:69:15:e2:91:20:ab:b5:63:5c:d5:f0:97:6e:37:0b:9b:
dc:2c:be:db:7b:5f:d7:82:10:43:26:85:de:a3:12:91:e5:5c:
9b:04:a4:58:55:2e:bf:4a:2e:dc:55:0a:7e:49:9f:21:c9:d6:
f0:67:79:d5:9b:30:91:eb:aa:98:72:69:eb:ac:86:34:ea:27:
71:9e:42:03:0b:e7:53:38:33:e9:bd:21:33:38:b3:b3:16:41:
ed:12:3e:ad:c2:01:ac:a0:0c:0c:94:c3:de:dc:35:b5:8b:d6:
6a:7f:ce:41:c1:10:31:52:49:49:ad:70:f6:3d:f1:62:96:a1:
ec:46:2b:00:30:a0:f0:69:a7:45:d9:6a:e3:98:5d:a4:64:14:
0b:f2:84:34:e4:a9:2d:41:71:c1:a4:21:e6:17:a6:39:6a:b6:
ef:5e:b0:04:e1:9c:91:d7:b0:4b:a4:2d:d3:96:8d:d8:da:ed:
1a:7f:fb:2e:15:8d:ff:5a:98:69:ff:4b:6e:3c:4e:59:19:80:
a1:9f:81:37:c7:92:bb:96:58:d4:08:66:8c:76:55:f6:b7:61:
d3:e6:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:00 2025 by rpki-client