Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc607eda-1d8d-4479-b98f-bf82f4cda692.roa
File: bc607eda-1d8d-4479-b98f-bf82f4cda692.roa (raw, json)
Hash identifier: lJiVOv0cs2aZKbnqp/SSnl3l3lJo3Vf2FURMO3lTOkg=
Subject key identifier: C9:70:9B:1B:B9:BE:4C:AA:96:6D:E6:8F:EF:16:46:FB:B1:16:C8:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0452FF40E0C9675C9B37035FEC5A27F454411E79
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc607eda-1d8d-4479-b98f-bf82f4cda692.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 156.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:52:ff:40:e0:c9:67:5c:9b:37:03:5f:ec:5a:27:f4:54:41:1e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=e52b8abd89aee051ad7aa0f88578a4e7459573a0af0b5d1e9a9db660cff94995, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:7e:ce:26:e6:b3:c5:14:6f:3a:69:58:93:
f2:70:aa:c7:c1:59:19:56:6b:df:a8:8d:3b:80:12:
4e:7a:74:25:f6:42:69:eb:3a:1d:3d:96:38:e1:82:
60:70:d0:ae:ec:62:e5:9f:da:56:ff:99:d9:16:3e:
16:ac:0b:1f:47:41:c7:43:1a:cd:4f:2a:9e:30:65:
2e:36:68:7e:fd:1d:c6:96:59:b5:b2:30:50:58:16:
af:33:81:98:a4:70:05:ce:9c:6e:e3:4c:90:07:9a:
14:64:af:f7:62:72:fb:07:94:0b:9b:f8:73:93:4f:
e9:77:de:d8:81:b2:c0:1f:26:a7:e7:5c:42:d1:bb:
c4:c4:b7:0a:0d:91:3c:6e:c9:89:fc:de:ef:c2:88:
ac:5c:0d:04:ac:e9:47:89:01:45:1b:51:f7:01:f0:
58:aa:6f:9d:c9:67:ac:2d:c0:1a:cd:e5:38:09:ad:
37:67:a8:ee:cd:90:07:49:46:fc:cc:fc:14:ce:f8:
7a:0c:62:e0:2e:6e:eb:79:91:27:dd:d1:97:e7:8d:
0a:a0:5f:00:55:ed:b6:98:ef:69:ef:07:dd:5a:e9:
93:4e:46:a7:5c:bd:8d:0a:02:ae:ca:73:97:d0:c8:
8a:a2:ba:ee:4c:a6:c7:24:bc:38:be:1a:50:8e:98:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:9B:1B:B9:BE:4C:AA:96:6D:E6:8F:EF:16:46:FB:B1:16:C8:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc607eda-1d8d-4479-b98f-bf82f4cda692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:f4:64:2b:b3:5a:ec:05:94:60:30:49:11:0d:6b:09:4e:f5:
c7:14:a7:65:82:7a:c4:c7:c8:93:38:20:e3:ab:f8:79:63:91:
5d:88:3a:e1:56:c8:2f:47:7c:fc:75:8b:7b:6c:4a:0c:37:15:
a0:36:a6:01:88:a4:ee:9b:15:4d:ba:c8:bc:7b:6a:d3:d4:73:
bd:bb:ee:55:d0:2d:cb:ed:cb:6e:bf:82:84:2d:aa:2f:b9:86:
b8:0a:2f:5c:3e:06:30:5e:ef:1f:d5:9d:ea:41:5c:7c:82:df:
74:75:2f:b5:5d:c4:d1:9e:f6:46:2d:7a:dc:2b:ab:24:5e:fd:
73:76:1b:57:e5:20:83:cb:71:31:33:44:2f:74:63:30:10:a9:
60:4a:ee:03:cd:cc:f0:da:05:ec:0c:3c:02:61:8b:c6:0f:6f:
33:2c:a2:bf:f0:52:5b:fb:6f:66:dc:dc:94:5d:6d:d1:ab:7f:
18:05:d8:a9:03:ad:92:5a:be:15:95:61:65:2d:f9:9c:6b:d2:
46:5d:e5:ee:49:5a:bf:2c:71:ac:6d:b5:d0:96:bc:81:6d:74:
c6:aa:25:1b:fe:08:c5:de:ce:8c:72:c3:0e:5c:cd:b7:8b:3b:
77:d2:f7:e7:e3:33:da:54:b2:42:f3:54:cc:90:9f:16:3f:ec:
2e:51:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:37 2025 by rpki-client