Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6560d66-8e98-4546-86ad-c43d86d45125.roa
File: a6560d66-8e98-4546-86ad-c43d86d45125.roa (raw, json)
Hash identifier: +B9HEB/lxX5BfmS/zEgJUVSlvNMpTVrsKghWpq6VIsI=
Subject key identifier: AC:54:F9:B0:FE:36:50:A7:57:F0:5E:4B:5F:65:27:7F:54:3B:46:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71AB3B32154AEECDC006FB751D3B77C648237262
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6560d66-8e98-4546-86ad-c43d86d45125.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 151.148.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ab:3b:32:15:4a:ee:cd:c0:06:fb:75:1d:3b:77:c6:48:23:72:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=c41164f0613d0756fd3f95ac5ae4b1a4c57d760daa6c5c0fbd24106c155be672, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:1d:f1:80:04:b5:4b:1a:12:75:9b:b7:b4:
32:8a:f2:ec:38:af:58:61:6a:8b:3f:bd:f8:7f:df:
11:a6:eb:46:a9:b5:aa:45:7c:d4:6e:d1:e2:c5:70:
12:f3:e4:25:fb:6d:da:72:b6:0f:6a:c3:d1:11:44:
3c:aa:79:c2:5f:98:dc:5a:c1:0f:c1:72:0d:3d:e6:
af:31:06:d4:4b:61:c6:ed:7c:af:7d:87:34:b6:eb:
ff:88:b1:46:5f:8d:70:56:87:4b:3c:1e:af:0c:cf:
9e:5e:05:6b:ef:e9:95:32:7b:5a:8c:d0:51:2e:80:
14:48:4e:68:92:6e:78:ab:23:70:4c:46:22:a4:d6:
b5:ee:e6:20:d7:98:7f:2a:4e:64:c7:ce:fb:e2:9f:
79:92:50:98:1d:73:d6:a2:0b:29:e3:1c:71:ca:44:
5a:b5:eb:08:8f:25:c0:29:ed:9f:2a:a8:65:6d:26:
0a:f0:44:16:38:e7:66:77:89:0e:16:ed:7c:02:e7:
a7:92:64:5b:5b:53:d9:b1:78:fc:40:11:e1:41:f0:
43:44:47:fb:d2:08:f0:08:a2:1b:77:8b:b9:83:71:
82:85:15:06:fb:4c:32:fd:3f:48:dd:3c:f2:11:34:
ff:cf:53:8c:09:21:ba:3b:51:41:8d:1f:de:a0:eb:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:F9:B0:FE:36:50:A7:57:F0:5E:4B:5F:65:27:7F:54:3B:46:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6560d66-8e98-4546-86ad-c43d86d45125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.148.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:df:c8:ca:a7:51:39:48:56:c9:05:1a:62:43:38:1c:f6:a1:
a8:a9:1f:b3:37:b9:32:d6:00:ca:f5:37:ca:aa:1a:20:f8:d7:
ad:c5:81:aa:50:6d:d7:8a:1d:9d:39:3d:01:6a:2c:f7:3f:6b:
cf:07:69:96:da:9e:a1:d1:ab:a0:14:93:ce:38:ef:2c:04:0c:
3c:0e:ef:cb:e3:c0:ae:a6:bb:69:ab:20:6a:57:25:92:9a:23:
d7:9e:4f:83:6d:91:be:8d:e9:ef:c3:c4:8c:7b:19:68:71:30:
88:84:b8:04:9b:93:75:6a:77:c2:df:cc:f0:ea:ba:72:83:aa:
23:13:00:a9:42:fb:dd:12:48:d5:b6:90:88:fa:93:b7:ba:d6:
2c:7e:a8:c1:2b:f2:67:23:5a:a2:78:0b:96:92:4f:2d:89:0c:
05:05:1d:9c:a8:81:65:3e:8a:69:38:ca:09:1a:71:d1:74:6a:
77:f4:c1:e2:68:2e:71:d0:ac:ca:04:a4:73:bd:d2:22:14:05:
c9:e1:9d:c1:7c:93:6e:b6:8f:3a:ac:53:c4:6c:f6:b4:e9:c0:
de:02:8d:91:53:3c:50:bb:05:a3:32:af:f1:5f:3e:69:95:15:
6c:9e:65:1d:8c:5e:39:a9:27:8a:a6:04:4d:30:e9:86:de:4e:
eb:60:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:22 2025 by rpki-client