Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cda23138-742a-4945-a526-5d8595732797.roa
File: cda23138-742a-4945-a526-5d8595732797.roa (raw, json)
Hash identifier: NaVmJ0K06ryR31hbi++EOvD4tuNNhKmPutJ+9zSMMnU=
Subject key identifier: 33:05:B3:83:07:70:EF:D5:4E:A0:20:AD:D7:0A:C8:29:9C:C9:18:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 738C54502ED692A142CB2CBEE10811F723FBCE02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cda23138-742a-4945-a526-5d8595732797.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 6167
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8c:54:50:2e:d6:92:a1:42:cb:2c:be:e1:08:11:f7:23:fb:ce:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=af5eab4090f78bbd30c6e61f48a3ed68766fdd36048ecda44557da4868fc00b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:c5:97:da:5f:18:55:f8:bc:ff:7a:68:c8:
1c:bd:c8:95:86:ca:b6:9d:d0:05:d1:e9:66:86:05:
51:8f:fa:b7:b4:d1:cb:d4:78:31:7e:71:36:d8:91:
dc:14:06:36:49:b6:c9:7b:f5:d2:61:4b:ea:eb:cc:
6c:e0:e1:ee:77:b0:58:01:24:a7:11:f4:43:0f:8c:
40:dc:42:cb:ee:fb:a6:7b:a0:de:6e:1c:25:e5:07:
e2:43:ad:e9:50:c8:75:23:cf:49:8a:c2:7e:e3:9e:
0b:b2:28:2a:60:c1:24:f0:4f:bc:e9:89:85:87:27:
db:6e:b0:07:38:88:e6:c5:85:f7:84:59:df:36:15:
60:ab:9c:e9:39:d8:f3:ed:c2:1c:3c:35:61:1f:33:
f4:ee:e9:30:b9:48:46:b6:6c:d5:7a:11:f3:35:cb:
4a:fb:d4:ad:fd:39:04:f8:80:50:64:f9:06:18:91:
0e:f6:16:60:8d:d9:e1:a2:15:0e:08:71:db:4c:6a:
28:a5:12:62:d1:1e:61:09:f6:a0:38:7d:93:4b:80:
18:8e:2b:94:87:74:7f:6e:71:0b:2e:ac:87:4b:1c:
85:99:5d:d7:65:d0:72:74:92:86:2a:10:0e:25:ea:
8f:9f:02:f6:56:2f:72:ef:0d:2d:58:9d:26:ec:26:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:B3:83:07:70:EF:D5:4E:A0:20:AD:D7:0A:C8:29:9C:C9:18:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cda23138-742a-4945-a526-5d8595732797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
Signature Algorithm: sha256WithRSAEncryption
14:77:f7:d4:f6:0b:17:af:21:61:4a:46:9d:c2:ac:45:37:5d:
f0:23:bb:cd:32:99:38:da:ce:e7:e6:b6:44:54:07:6f:70:45:
f1:70:57:ce:84:9b:b6:2f:93:d7:c8:84:5c:fb:ed:b9:26:50:
b6:4c:7b:88:d5:18:f8:cb:fd:59:3b:13:ec:97:17:83:45:f4:
d1:1e:a3:5d:74:f0:ed:14:28:09:79:67:f6:34:e7:62:33:84:
cb:1e:9e:c0:10:72:f6:44:ed:6f:b7:08:c4:c3:9d:f2:b1:bf:
8e:3b:8c:7c:01:0f:49:a2:6a:b3:55:7d:bb:38:94:07:13:63:
6e:57:a1:84:26:3b:42:c2:18:f7:49:84:23:31:c7:30:7b:16:
21:89:9d:32:3e:85:bf:99:74:48:08:fb:85:86:95:35:e2:27:
0d:53:7a:30:0a:4d:a2:41:fd:a9:97:c8:24:ef:6e:e5:57:82:
bd:06:4c:15:a3:5c:0a:15:b7:1a:6b:84:c8:a3:8c:7f:da:99:
bc:55:c0:3a:06:7a:a8:98:f1:5a:08:84:e1:8e:d4:e1:75:4f:
c7:3e:cb:8a:0b:84:eb:5b:74:57:89:21:8b:89:2d:26:7d:28:
fe:a6:17:85:8b:70:74:f4:d1:63:c0:20:bf:90:3a:93:ce:b2:
74:e2:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:12:01 2025 by rpki-client