Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
File: ec82d39f-e496-445b-b47e-f9450ba4b273.roa (raw, json)
Hash identifier: CQSpdB6Dd0wO+yQMhD8ioMovZ557jxaghJGIaXCNl48=
Subject key identifier: F1:AE:58:05:73:01:8D:FE:6F:36:40:42:0F:DE:30:DC:23:6F:CD:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3999975BA00B417C007A758EFD35E8B63FFE8C5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.93.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:99:97:5b:a0:0b:41:7c:00:7a:75:8e:fd:35:e8:b6:3f:fe:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=f1bb2ff954c4169c6929ec3c3a7344950e07b9b78b6c6f8c3907d34e28af5574, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:c6:1a:71:f7:c4:3e:8b:63:3f:48:09:7e:
80:07:2f:eb:e1:8b:8d:b3:98:fb:96:27:65:f2:38:
70:02:c8:5e:38:70:b5:19:e6:43:dd:8e:81:28:d8:
b9:be:0f:0c:5a:4e:13:0b:16:3c:94:ad:a9:43:71:
44:e5:c5:ce:56:24:cf:93:01:42:36:fd:8b:38:cf:
e1:93:4c:6d:f7:78:04:41:41:c8:64:80:37:66:ad:
21:b2:6a:f0:5f:52:55:25:fd:ac:74:04:32:36:bf:
cb:b0:a9:cd:d1:70:a3:57:5a:1d:61:df:d8:3f:30:
1f:e3:cb:03:a6:3b:ab:d7:fc:84:65:dc:c7:80:d2:
17:9d:0c:0a:90:e3:04:b7:fe:67:e6:05:21:f4:47:
80:f2:a1:ee:25:0a:27:3c:98:c6:f5:db:3f:5a:d1:
c8:81:f5:0a:78:ec:76:d1:ea:b0:f4:51:7c:4c:16:
52:6b:0b:89:5b:18:1b:bb:41:9b:7d:16:4e:00:5d:
ca:bf:8f:d8:b6:14:2f:84:ea:70:e0:7f:32:0c:03:
21:2f:e1:28:d1:88:5e:04:e8:0f:f5:d6:b5:95:46:
87:72:33:2e:53:f9:14:af:9b:39:17:a4:71:d9:fb:
57:57:67:d8:ca:97:87:53:f0:f0:2e:91:02:a2:80:
88:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AE:58:05:73:01:8D:FE:6F:36:40:42:0F:DE:30:DC:23:6F:CD:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:a1:ea:08:bf:3a:88:47:2d:63:c9:cd:9c:42:22:07:0d:e8:
e7:e7:0b:47:86:04:81:0a:fd:b5:a4:7d:5b:93:dc:06:48:49:
0a:dd:94:69:ef:bf:65:1c:8b:6e:e3:b6:73:25:4d:82:0e:d2:
1f:b1:ff:7c:d7:3f:d9:13:5b:91:df:10:2b:23:da:3b:f8:55:
bd:46:4d:06:95:2e:d3:10:45:01:a8:63:23:e6:3b:6d:c8:00:
6b:4e:d6:10:a0:dc:ec:19:0f:1c:92:77:1e:94:f1:45:fa:52:
80:35:36:26:da:74:b5:92:b8:f0:b5:79:06:40:94:50:d1:bb:
e2:bb:07:36:75:1e:d0:38:95:58:8f:82:9f:6c:ea:c1:74:14:
1f:53:9c:44:4d:aa:a2:b5:e4:20:82:64:bc:0e:1f:e7:cc:ca:
5a:43:72:7a:1c:a3:e0:e8:8b:cb:8d:46:2f:80:4e:11:76:05:
07:7d:33:dd:98:4a:c3:a8:d4:65:53:30:29:f4:cb:a9:f0:50:
94:38:fd:42:e7:34:02:a1:60:61:65:03:5d:9c:9e:e4:cd:b6:
c3:90:b1:61:0d:66:7d:3a:28:a7:62:fe:e0:25:e9:8c:a1:be:
e6:fb:a0:2d:ea:93:86:5b:57:5e:97:bf:dd:3f:6f:89:46:dd:
60:35:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:48 2025 by rpki-client