Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa
File: e1bc806e-2572-403e-b1e0-48367c6289fe.roa (raw, json)
Hash identifier: S6HdTE2Lfzi8/hDpymTwxMidEz2cv6WKZo7B9V6coug=
Subject key identifier: D3:8E:0B:07:2E:CB:53:C7:77:E9:37:F1:A2:9D:0F:8B:1A:40:ED:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 50A1EB392E988A3E54D24BE9147331B169FE778F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 134.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a1:eb:39:2e:98:8a:3e:54:d2:4b:e9:14:73:31:b1:69:fe:77:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=c418809979af224a1a5d3870f7b78f5ad3642d84a6b5b21d6dd7404bb170a3e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:ce:53:18:a1:4b:c2:67:7f:7c:93:2a:07:
71:4e:ba:e4:8e:76:3b:0d:6d:64:15:d0:c2:df:53:
8d:c8:2e:54:75:eb:fc:cb:27:db:87:d6:42:ea:57:
59:03:94:7f:86:cb:09:9f:a0:df:01:5b:e5:89:12:
31:89:fb:be:ed:a0:c2:0f:a6:20:54:0d:41:ae:af:
e4:40:32:0c:de:e2:75:2a:cc:8f:94:54:89:1c:99:
4f:b5:0c:98:f4:4a:2d:b7:a1:97:18:45:48:e3:57:
9c:46:39:93:3f:b2:99:b3:3d:13:3b:76:05:dc:e4:
4d:b5:c6:d0:0c:11:3c:11:3f:b8:4b:d7:9f:70:06:
23:26:6a:98:ef:c6:07:35:4b:83:37:e2:db:fc:92:
ff:38:02:84:cd:dc:04:29:72:11:8b:7f:3e:b0:58:
ce:6a:de:75:6d:2d:15:68:4f:83:ee:2a:81:06:56:
dd:81:8b:09:08:7e:ef:98:63:82:9c:2d:ed:43:2d:
08:00:71:2d:de:14:24:88:da:f3:9e:15:0d:34:0a:
f1:dd:87:24:c7:1d:d8:9f:a2:d8:85:a6:bd:c9:2f:
df:56:67:33:82:4e:d5:33:c1:e2:54:d1:e2:a7:b8:
fd:3e:eb:35:b1:35:d5:32:81:48:90:0a:33:61:86:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:0B:07:2E:CB:53:C7:77:E9:37:F1:A2:9D:0F:8B:1A:40:ED:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:b4:29:42:25:e6:60:f5:38:9f:b7:e2:00:be:ec:c4:15:50:
ba:2c:65:bd:0e:12:d2:eb:2e:3c:4e:fb:da:cc:05:14:a4:d7:
6f:7b:dd:6e:86:c4:b5:bb:f6:75:25:4a:e6:ef:0c:ba:b0:cf:
07:6c:da:53:bb:12:4f:0b:6f:83:4e:b7:60:47:f6:24:f3:39:
05:7c:df:be:02:19:6a:69:aa:b1:d4:8b:09:eb:89:81:fc:d5:
fd:af:a3:f7:4c:df:a0:15:8a:1d:42:bd:c6:7c:6b:ec:c2:5b:
88:58:64:35:06:84:7f:93:38:e7:7f:b9:25:2f:d1:09:e1:5f:
8e:62:79:18:40:d2:ba:44:7b:54:58:0c:8d:cd:77:4e:d6:0e:
15:57:14:3f:6d:b5:72:7a:46:1f:af:1a:3c:26:32:10:5e:af:
ad:43:15:a7:41:ce:3c:b9:3d:c5:48:63:07:f5:35:50:67:b3:
4b:8c:7e:6a:2d:f1:74:fe:f2:16:cc:9e:41:99:1a:e1:97:9c:
9e:3e:fb:a7:94:ef:af:0f:7c:da:b2:b4:c4:a6:2c:94:e4:5f:
4e:a9:5a:5b:64:d7:fb:81:b3:85:8e:51:ff:05:e9:da:99:06:
de:72:b7:f6:cb:3b:39:7e:83:5f:35:ca:ad:d6:af:95:5e:02:
99:ae:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:29 2025 by rpki-client