Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b64896ec-1eb6-4b13-9ee7-9ff591b892f9.roa
File: b64896ec-1eb6-4b13-9ee7-9ff591b892f9.roa (raw, json)
Hash identifier: X5l4mccgp/ehotZ0nrZt2Uz/TupfPUsnstE7gMAJp6M=
Subject key identifier: 51:55:56:65:53:38:39:CF:D8:D1:3E:23:5D:8F:96:6A:45:A2:9F:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 44FFA68DCA470A9F488A5501F705D535943CC543
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b64896ec-1eb6-4b13-9ee7-9ff591b892f9.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.22.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ff:a6:8d:ca:47:0a:9f:48:8a:55:01:f7:05:d5:35:94:3c:c5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=458feab47f5d5d461fe760ea069a5c5e309d136e33d2d77a7492debc05fd42a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:a8:4b:7a:3d:d1:22:86:5f:19:9f:a0:1d:
37:d8:1e:e6:aa:7f:2a:33:0e:ed:4d:ae:09:f9:76:
e6:a1:65:c7:04:0c:98:29:52:7f:20:b7:ab:29:ec:
8d:fa:aa:70:e1:dc:15:c3:a0:80:dd:c1:d6:f9:98:
5b:13:2d:35:43:d6:18:66:1f:2f:db:f6:20:0b:88:
4a:46:04:bf:9a:a7:5f:ff:15:76:f0:4d:87:29:98:
6d:6b:53:b4:43:b3:3d:0a:d1:47:36:5b:df:81:e1:
fc:d4:7b:4b:a1:b5:78:f5:8a:87:08:9b:95:2e:f6:
d2:b8:b4:83:d2:3e:a7:a6:6d:b0:42:fe:ba:ed:a6:
fb:48:76:d6:40:33:3c:be:00:5c:4d:19:8a:e3:1c:
7a:18:ce:66:16:d7:a1:0f:07:d7:4f:fa:6f:50:c7:
80:68:ab:68:93:b2:ee:9d:74:da:26:24:24:75:ef:
8d:ef:5c:57:1c:15:0c:9f:57:3f:1e:5a:b1:fd:16:
19:88:9d:69:58:ff:72:84:ff:30:d9:20:5b:a8:5e:
21:5c:18:c2:f5:64:db:35:03:c2:c4:1d:60:25:ec:
28:5b:de:4c:fa:75:c8:df:e8:10:fb:4a:f0:73:32:
9a:2f:0d:4f:58:41:a5:46:f5:60:0f:b2:e8:f0:8d:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:56:65:53:38:39:CF:D8:D1:3E:23:5D:8F:96:6A:45:A2:9F:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b64896ec-1eb6-4b13-9ee7-9ff591b892f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.0.0/15
Signature Algorithm: sha256WithRSAEncryption
08:10:64:7d:06:8c:c9:16:89:35:2a:0c:68:b6:52:53:b9:c2:
7b:3b:32:4f:39:df:81:02:d2:54:ad:51:c7:ee:54:27:71:4f:
7e:10:e8:4b:14:28:ba:4a:6c:0c:b9:14:29:54:12:1a:e2:84:
cd:a1:cc:72:b3:f4:ca:a1:5c:67:d7:82:c7:0f:26:db:d9:17:
89:72:e5:90:87:02:f7:91:91:db:d4:f0:36:ee:0c:89:2d:13:
9d:a7:38:9d:1c:33:3e:4a:22:ce:b7:6a:52:8d:a5:60:26:c6:
74:08:9a:ba:aa:ac:49:ce:ec:92:3d:1c:8c:e4:48:02:d4:b7:
21:ba:ca:4e:10:b4:35:fa:20:87:c5:78:09:08:ac:5a:1a:7c:
e2:48:e8:31:bf:ea:02:62:04:a2:34:7d:78:d4:1a:05:bd:78:
f4:df:b1:19:76:a4:41:20:d2:1c:58:56:55:eb:4c:f8:ae:9a:
99:3c:22:92:f4:eb:b6:b2:16:2e:1c:cf:b7:2f:cd:0b:42:e7:
0c:19:1f:f6:2f:cd:5d:ab:27:18:d6:fa:07:ef:a4:84:df:c0:
2d:a2:7a:08:31:35:50:43:87:44:9d:3b:5c:8f:c5:3c:f9:4f:
b0:1a:2b:d1:40:45:92:36:9e:f0:ef:80:ad:6e:9d:32:2e:3b:
ce:bb:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:35 2025 by rpki-client