Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa
File: dba7885d-04f4-44b6-8fa7-310271019cc6.roa (raw, json)
Hash identifier: 98g/9AoKt2dwopQ/kCgxcMrNAKzj/TuKZqW/Aadjl7I=
Subject key identifier: 0C:EA:34:F4:52:A2:7D:48:9C:06:31:C8:42:39:26:E3:DE:6B:C4:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35E865275913F66F7474019B2F3B72F9F4F195C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 158.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e8:65:27:59:13:f6:6f:74:74:01:9b:2f:3b:72:f9:f4:f1:95:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=d12c6270504e454f37edb01933152a4e5945f239fddfed6f1af2c4bf52d766c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:79:3a:11:cb:a9:76:73:0b:33:60:b0:1c:
87:2b:bd:67:7c:cb:3a:fb:f7:88:09:ca:05:d5:a0:
08:fc:b3:fd:53:2d:95:54:e2:ba:b5:02:2f:05:77:
71:f4:f1:72:90:5d:e0:39:2c:7e:c4:ce:b4:f5:89:
89:cc:f0:d7:aa:35:8e:6b:98:a3:15:1c:eb:eb:38:
fd:20:ec:94:91:5b:dc:1c:80:71:36:6e:6e:28:36:
ac:a4:76:44:4c:52:6c:8d:38:4e:45:a7:85:99:3e:
89:77:15:ac:60:c4:84:fd:cc:26:70:d4:30:a3:0b:
ea:27:7a:75:bd:9c:d6:68:88:36:95:cc:fe:25:ec:
ea:40:29:be:85:af:8a:4d:f3:ca:35:a7:93:cb:88:
a0:0e:cf:76:19:57:aa:56:79:b2:ff:54:e2:36:56:
9c:9e:ba:2d:70:7d:fb:c2:06:93:79:93:c6:7f:ca:
2c:51:8c:1c:eb:3f:6d:ee:7e:c4:aa:83:5b:d7:fd:
82:20:9b:3d:18:e1:f4:db:fa:9c:92:98:61:76:f5:
04:77:dc:1e:18:d5:aa:ea:61:c9:a7:e3:31:1b:6e:
5b:3b:3d:40:49:2d:1c:b3:ac:47:56:3d:c1:f1:ba:
f6:52:0e:56:07:31:5c:10:7f:db:ef:0c:4c:b6:8a:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:34:F4:52:A2:7D:48:9C:06:31:C8:42:39:26:E3:DE:6B:C4:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:a1:7a:50:87:ce:8f:71:63:b1:a0:fb:c6:d4:ca:7a:54:c9:
4d:4e:30:db:6b:1b:00:f5:89:16:50:d3:54:94:3f:58:28:67:
07:e7:54:20:8e:e1:60:0b:bd:50:72:9f:2a:a8:be:cf:a6:8a:
f3:ec:3b:3e:08:79:b5:30:21:4a:31:71:83:50:3b:ad:8c:ee:
d9:76:b4:b5:9d:39:c2:44:ab:5f:c8:0e:56:b6:bb:93:d9:43:
d2:77:f2:00:05:f8:fa:5b:0b:bf:0b:c0:d8:e2:26:01:24:d3:
23:16:3c:3f:66:27:43:dc:fd:3b:3a:29:db:5a:3a:10:ca:47:
8b:7c:5c:89:b5:b1:62:97:94:85:cf:e8:c3:d4:0f:a1:3b:ef:
e2:34:ab:ad:89:98:2b:d1:ab:a8:30:de:6d:c7:fe:0a:ca:22:
f0:e4:fd:01:00:9f:24:6e:ac:3e:23:bf:67:8e:ca:51:40:21:
57:60:53:c9:c5:c7:7d:da:6f:a0:c1:55:34:bd:ab:ea:d6:10:
4b:1b:70:a9:1f:f1:7b:ff:93:85:b3:9f:51:e1:c9:55:67:93:
56:2f:ae:5d:8d:d4:c5:6e:99:7a:36:31:b4:34:ed:4d:48:17:
10:05:e0:a1:a3:30:78:00:71:e4:9e:ad:84:c8:91:59:22:be:
7d:0d:bd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:42 2025 by rpki-client