Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
File: cc204192-f54a-4a24-b693-905fbf433b73.roa (raw, json)
Hash identifier: 2WCl9rriyW4T4Yn3iRIamndY7rgfo5/gBczNo0XTtFk=
Subject key identifier: DE:11:AE:19:0D:69:13:E5:48:81:AC:47:F5:7C:E9:FF:18:86:7B:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FA661C0573F7B6D743FFB2A740D57D904202D03
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.81.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a6:61:c0:57:3f:7b:6d:74:3f:fb:2a:74:0d:57:d9:04:20:2d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=9db84ffcfee8eb6dcaebaa874079f7f95cefb95e9a5c969f82932a1a74d90299, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:6f:f1:40:2f:fe:94:d8:1b:96:c5:a1:92:
98:f5:53:7b:70:a8:19:8c:b9:a8:d0:d4:64:b6:9b:
1d:27:1d:31:8e:b8:50:48:34:42:59:a2:f9:d6:77:
3a:16:08:d2:0a:5a:aa:77:13:61:33:e3:fd:e9:70:
c5:83:81:b3:9f:7d:ca:dc:6b:d3:89:07:b9:51:ea:
3f:4d:c3:8e:94:d0:56:f4:89:1b:3a:0b:48:11:69:
f4:7d:93:f7:9f:8e:ec:88:5d:da:98:91:5e:b9:e0:
04:19:59:27:f1:a7:0e:ed:b6:66:83:c9:df:7b:c5:
48:1c:a7:3c:d1:7e:6a:47:34:7e:9f:df:56:1b:28:
67:37:58:76:29:6e:a9:95:45:ba:b6:9c:ce:f9:35:
5d:66:bb:7f:ef:23:cc:80:40:bc:3e:df:23:6b:11:
68:b3:95:78:05:b8:4d:e0:e6:26:dc:9a:e8:88:df:
6b:5f:81:2f:06:dc:3b:28:07:47:be:11:49:58:5f:
9f:df:ab:46:fc:f5:e4:60:e8:ed:51:d4:e7:a1:cb:
72:5d:37:46:b9:5c:99:3d:74:42:99:f8:01:d2:66:
5f:d4:1a:ad:e2:03:46:c2:b4:5e:79:dc:90:9f:5d:
e9:b2:b0:6f:cb:f1:82:b7:39:ce:4e:8b:29:59:16:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:AE:19:0D:69:13:E5:48:81:AC:47:F5:7C:E9:FF:18:86:7B:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.81.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:e5:1e:9b:00:55:20:89:09:ce:bf:de:73:62:06:7a:24:4b:
cd:86:1a:84:ba:69:52:51:e0:d0:fd:fe:c5:a6:3d:70:bd:d2:
1b:da:16:15:fb:5d:b4:ed:1c:1b:ad:28:6c:66:9d:8e:61:c9:
5e:ab:ac:53:2a:00:9f:62:aa:b8:53:6f:df:02:21:2a:a7:3f:
cf:66:35:f9:64:42:b8:01:49:81:29:74:e7:b3:13:f9:b6:67:
57:0f:c1:9a:1d:6b:17:47:a2:ef:23:f4:69:0f:b6:ed:4c:85:
93:26:1e:d4:95:6c:c8:64:d9:3b:5a:43:a4:cb:11:6d:fe:e7:
92:89:bd:6e:02:11:82:fc:20:59:8b:51:d5:2b:45:64:91:a3:
58:18:50:2d:68:bb:4e:90:c8:3c:c2:f1:57:e6:ac:98:bb:28:
22:a7:56:ce:44:28:c9:42:21:59:f9:1d:83:ec:19:56:92:5e:
05:dc:7d:c3:df:c6:ab:1b:2a:9c:d7:1f:8c:88:a4:72:2e:31:
e7:ef:ea:ff:57:18:7e:be:4f:6a:27:bb:6f:14:06:f5:a8:76:
a7:8e:e3:3f:ba:d4:73:63:88:74:33:8b:a6:a4:32:1e:ce:ec:
f4:bc:cc:d1:da:f6:f1:c5:46:48:14:f9:80:78:23:67:63:e9:
25:d5:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:34 2025 by rpki-client