Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa
File: 940d4db1-8435-4b14-9f65-40384956f3cf.roa (raw, json)
Hash identifier: laz7umq6DiZKu+HWepGyHbDiLlkTRtFjtIz+9e7yP+0=
Subject key identifier: DD:0E:C5:31:9E:19:6E:90:BC:D9:57:61:03:F2:78:61:D6:35:35:53
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18B44CC2D5E6CA5C2ED64A8A6F22D70361A6632E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.51.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b4:4c:c2:d5:e6:ca:5c:2e:d6:4a:8a:6f:22:d7:03:61:a6:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=084068ef5f46384ffcbdba6cfe28c3f210373a5de381142e52046ffbfa4c276f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:15:d1:a8:a4:46:64:eb:12:c2:36:5a:b1:
7d:12:9b:61:8d:52:9d:89:28:0e:d7:1d:08:f2:79:
e8:c3:2a:6b:7d:93:87:ea:2e:f6:e4:86:c8:9d:10:
0c:80:d1:d8:cc:e0:e5:dc:0d:41:ce:71:db:83:a3:
ee:bc:ce:d9:dc:99:53:9e:e1:dc:70:65:72:78:a2:
55:c5:5f:09:54:40:be:f6:86:99:95:0c:19:df:c1:
7e:5e:ff:7a:da:f0:e9:4a:be:4f:90:75:33:87:56:
b5:8b:98:ff:32:e2:57:6f:8b:b0:7a:5b:7c:a3:d9:
6f:bc:02:e9:ed:43:f5:46:31:13:73:02:66:f6:d2:
22:94:c2:dc:86:fa:9d:36:a9:1e:df:fb:62:2b:75:
e0:e2:08:8b:6a:59:ff:5f:63:0e:00:a9:bb:f0:ba:
45:c9:37:42:1f:43:75:55:a0:41:ea:12:fa:be:b6:
ad:65:fb:05:f7:7e:91:c7:e5:4b:07:9b:bd:d4:a1:
1a:1b:21:e2:72:d7:62:3c:43:6c:b7:40:9d:c0:00:
1a:6f:12:18:7f:e9:62:f0:6d:b4:c2:4d:b0:f6:a0:
0d:ed:6d:31:5c:ed:5a:5d:06:f1:2d:c6:c6:52:3a:
d0:25:c1:1c:28:f6:b6:b8:e0:a1:f4:17:80:15:4c:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:C5:31:9E:19:6E:90:BC:D9:57:61:03:F2:78:61:D6:35:35:53
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:c6:8a:ff:6e:cd:19:a8:41:9f:f4:94:03:0a:26:72:ce:b2:
ca:0c:12:7f:3a:e0:7d:63:97:00:03:e4:b6:52:89:d7:82:41:
2c:ca:1d:85:de:27:6b:de:87:ea:07:92:7e:29:c3:bd:6b:d7:
12:06:52:af:21:7e:88:c8:9a:3b:02:8c:f1:5e:8d:ba:c9:a8:
82:fb:52:3e:e5:f1:01:00:07:bc:41:45:38:6f:49:07:5c:8b:
0f:fb:3c:a4:43:d0:bb:f8:50:c5:c7:1d:7e:58:23:0b:3c:c0:
29:13:97:03:d5:6d:1b:8c:0e:b1:4a:28:7a:30:f6:7c:3b:e6:
27:93:c2:31:f2:38:b0:3e:1e:4a:0f:41:a2:68:e6:a7:fb:a5:
17:53:f4:3a:2f:76:5b:c9:39:7c:8c:d1:40:7d:e8:50:f1:54:
a7:f8:26:bf:5e:74:30:0f:62:1b:e0:6d:d2:d0:ee:a3:46:b5:
b0:79:88:4e:cc:0d:ea:df:28:91:58:d4:7c:a8:0f:4d:31:2b:
a7:e9:aa:15:7f:48:bb:ca:cf:88:15:ff:26:1a:72:d9:dc:28:
5a:0e:48:ae:b8:a4:d7:0b:bf:d3:8d:4e:07:4e:fd:c3:c8:1d:
17:e3:66:5f:f5:67:9b:94:75:5d:95:36:0f:27:70:73:2e:23:
c6:b4:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:09 2025 by rpki-client