Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5e54a86-ed38-4b92-882c-c19087637bc3.roa
File: b5e54a86-ed38-4b92-882c-c19087637bc3.roa (raw, json)
Hash identifier: +CirBlWLHkLGPFLW64a2beQUWPvQWtKB619eQWxWi1k=
Subject key identifier: E3:BD:F2:15:F3:B3:8F:8E:7E:FF:8A:04:E3:B6:23:38:AC:35:C2:8B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 754EF172DF88AE7A6633D34DDFC448B30B01DB25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5e54a86-ed38-4b92-882c-c19087637bc3.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 104.153.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4e:f1:72:df:88:ae:7a:66:33:d3:4d:df:c4:48:b3:0b:01:db:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=6e289945f373cc5275731a3a199c0b5482c2d3a403bef4b65261aa93c5e2107a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:4e:39:2d:bc:91:d0:fe:20:62:6d:36:24:
a3:d6:a6:b4:d4:9b:59:ad:3f:3f:a2:37:62:2c:e3:
2d:a2:99:be:07:2a:2d:9d:19:07:49:88:0a:8a:32:
61:c8:ec:60:15:f0:03:0f:60:0a:5f:af:36:e4:94:
66:0c:e6:8d:45:3e:a2:e6:40:70:88:b5:be:2f:42:
5b:1a:d6:b7:94:a3:14:85:90:47:9c:f9:82:78:60:
32:d7:54:bd:67:a0:1f:5e:88:b8:8b:ed:82:46:f1:
51:af:a1:bd:1e:ff:e6:2c:3c:43:f0:e5:ee:a1:c4:
4a:93:cf:26:90:9f:76:bb:96:68:7d:fd:5f:74:fa:
ed:4a:35:54:f8:09:f0:98:cc:03:1e:57:ab:d2:af:
4b:96:de:75:9e:e4:e6:bb:4b:83:a2:ca:1d:1e:20:
e8:58:cc:cc:4b:3a:a8:85:7a:d6:62:dd:9a:c0:8d:
fd:17:48:08:ff:1a:6a:5b:51:c8:55:a4:d1:b3:db:
2e:81:12:2e:26:01:fc:17:d4:85:e4:58:af:36:a4:
f7:55:b0:e3:8d:4d:1d:6b:4c:60:cc:8f:60:28:b8:
cd:bd:65:70:c6:f4:b3:5e:49:7d:cb:bb:f2:99:9f:
d2:2f:80:e2:63:94:65:f7:14:63:a4:1f:b8:ec:d0:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BD:F2:15:F3:B3:8F:8E:7E:FF:8A:04:E3:B6:23:38:AC:35:C2:8B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5e54a86-ed38-4b92-882c-c19087637bc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:cb:43:32:8d:b3:83:92:32:75:2f:93:04:38:61:10:5e:87:
94:05:a9:6d:ac:1d:ac:83:f9:89:f6:c6:85:f5:92:ed:09:f0:
89:b7:be:c7:77:9e:89:5d:6f:88:c6:e7:b3:83:f1:e4:be:81:
e5:91:35:79:0b:66:7a:a1:ba:2d:da:20:78:fa:f5:51:22:06:
44:c5:83:65:6a:91:14:2d:2e:05:e7:3c:76:34:80:c0:6c:50:
48:b6:83:80:99:28:fe:9a:f0:87:69:dd:5d:55:c0:ea:c2:8d:
7f:90:cc:a8:24:29:f4:f5:40:6f:81:37:15:71:19:05:71:da:
0e:b4:49:02:82:8e:40:e9:ed:c6:66:a8:9c:27:83:5b:76:44:
07:4f:5c:b4:f5:fc:ea:4c:0f:6a:02:88:3c:fb:33:e3:0f:04:
e9:b3:e9:f8:88:3b:49:0a:f9:2c:84:ed:48:89:0b:cc:37:e3:
58:a3:79:da:7b:0d:1e:89:d6:16:f6:f6:78:56:76:e8:c6:21:
09:3f:20:02:21:18:66:15:5c:aa:a6:75:a5:1e:8b:e2:9b:a8:
41:e1:bc:e1:89:15:08:cd:30:b9:01:e0:38:ac:f2:62:dc:7c:
ad:35:98:fc:0e:9a:21:c6:6d:e2:ef:14:43:21:25:5d:a3:ad:
a2:92:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:04 2025 by rpki-client