Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb502d19-4247-4a4c-901f-7eaa696dfc9a.roa
File: eb502d19-4247-4a4c-901f-7eaa696dfc9a.roa (raw, json)
Hash identifier: 2Fm4vLr/UrihSh0ILUa7IG1L7+aYDEjhePrRfsVKzfY=
Subject key identifier: DA:55:85:F6:31:31:2B:35:ED:59:A9:FB:33:EC:8A:EB:6E:31:ED:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2AAE9C10B8A3D6FFA5A2277E6044F1B56542FA0C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb502d19-4247-4a4c-901f-7eaa696dfc9a.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.56.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ae:9c:10:b8:a3:d6:ff:a5:a2:27:7e:60:44:f1:b5:65:42:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=0831415bdf832fedeef8e926b8948afaa5414d93d5eaa53317c7c914cd5ae96d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:f5:64:ab:c7:60:8e:ce:d5:29:03:79:7f:
31:fe:01:f7:ce:51:e9:d0:21:30:a3:b7:ce:67:83:
d0:d8:8b:de:84:a8:fa:92:d9:92:a6:70:52:56:be:
b7:95:49:fc:0e:62:e4:4c:58:57:ea:e8:c8:15:38:
73:5d:51:8c:25:a8:ff:4f:07:ab:04:cf:fd:3d:9d:
0a:0a:f6:a9:5c:0d:b5:dc:66:4d:e0:f2:2e:c7:ed:
ae:bd:92:50:c4:ce:99:88:39:c7:ea:56:b5:24:66:
83:d0:45:52:a1:ae:92:ef:17:f7:9b:a5:f8:12:d2:
a7:38:20:16:89:8c:b4:26:8d:c5:eb:be:af:02:67:
b6:0a:55:fd:f1:dd:85:d3:f4:77:87:0a:f5:7f:41:
e3:99:df:e5:e8:85:70:bb:c7:c7:15:b4:bc:a3:b1:
e8:fb:97:88:21:c6:a0:bc:19:6c:b3:5a:49:d8:93:
10:2b:08:34:c9:e2:7f:f0:be:c9:4d:1e:e3:ab:09:
7b:fa:0c:9d:59:a1:6c:5d:65:cf:94:27:70:db:9d:
13:ee:af:b3:d0:5b:5c:0f:dc:c6:0e:f4:5a:a0:a7:
43:b2:1c:bb:3d:89:09:f9:ac:5f:ce:15:99:74:e0:
98:af:52:b1:ee:fa:9a:08:c7:3c:7c:c5:ac:77:a3:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:85:F6:31:31:2B:35:ED:59:A9:FB:33:EC:8A:EB:6E:31:ED:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb502d19-4247-4a4c-901f-7eaa696dfc9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.56.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:7d:8c:2d:37:e9:92:a5:d3:05:8b:0a:2f:06:02:2a:71:56:
ba:3a:b7:30:71:1f:cd:72:8f:12:6f:46:c5:e8:1d:25:e0:9a:
66:b8:45:16:74:79:54:4d:5b:88:74:e0:46:61:7a:8e:e1:65:
41:8a:bb:aa:37:cc:3e:74:92:04:c0:8c:5c:31:c8:4c:90:00:
a5:9d:2f:f4:c3:3e:a1:42:3e:21:84:65:65:94:5f:e2:04:0b:
eb:5e:47:69:69:48:bb:99:c8:4a:b4:78:66:77:af:17:26:80:
5f:16:28:3a:f8:5f:a8:27:ee:64:4a:f8:bc:02:17:44:04:89:
f6:7d:41:6f:57:fc:90:45:87:21:8e:e3:e3:c1:24:c0:2d:84:
dc:e7:c4:f7:e0:7c:ed:50:c9:eb:53:b4:d2:18:ba:7f:c3:00:
e5:fb:d4:3f:46:77:a1:4a:de:7b:ba:fe:cf:95:6a:44:43:bd:
02:ec:4d:da:ed:c9:d9:b0:41:12:01:24:5d:e6:99:9b:2b:e6:
91:2a:a4:da:f3:af:8e:37:92:08:1d:71:0b:be:cf:9a:b9:4d:
e4:11:d5:bf:6a:7e:08:61:b6:8b:e8:19:86:e8:3e:5e:ee:f1:
8d:6f:60:47:eb:0d:d0:5a:09:8c:d0:5c:5f:cc:98:f1:07:d6:
37:15:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:39 2025 by rpki-client