Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa
File: f188b8ee-3a4b-4868-9d1b-037431b45053.roa (raw, json)
Hash identifier: tdGx67Y8WCJNpHunTMgQyJUuwjvGhlR/48duqM/BnBU=
Subject key identifier: A9:DB:37:93:89:D4:67:13:25:24:65:8C:1B:92:BA:4F:B6:0B:80:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 252A56EDD1EAEE624438927367398A2DCBDA74E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2a:56:ed:d1:ea:ee:62:44:38:92:73:67:39:8a:2d:cb:da:74:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=07d5b915367960626830175bcdcbd3822f4c0a8489f98b501f41c21636f28178, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:b4:4c:49:79:14:c8:5f:9a:29:0f:d9:ad:
0e:4a:bd:25:ef:65:19:9c:25:da:6b:e9:4e:d1:49:
93:9b:9b:79:c3:f5:82:79:94:37:51:85:ec:19:dd:
15:12:6b:67:bb:46:f3:7b:dc:12:d7:f6:c7:f9:27:
c9:33:d4:ee:0f:a3:38:c9:8a:cd:88:1f:05:d7:70:
33:49:9e:b3:48:c9:48:01:1d:60:82:f2:ae:a3:a4:
d6:fb:8d:43:61:3d:eb:5d:8c:7c:02:94:b5:3b:2f:
b2:3f:aa:28:8d:f8:8b:9f:7d:86:b7:71:40:a4:93:
c3:63:5d:36:53:3e:0e:bb:f8:6c:39:e0:43:ee:54:
cf:a4:ce:13:d6:59:0a:06:41:c1:7f:ec:6c:47:af:
b1:36:64:d8:ec:51:90:bd:0d:9b:de:15:ca:f7:be:
91:49:84:a3:0e:51:c7:8f:1f:61:21:47:b5:e4:79:
49:85:f5:0b:f6:f2:e2:b8:4c:cf:cd:3f:18:6f:41:
cb:90:98:12:b2:f8:f0:44:42:40:4b:2f:82:fc:ff:
8f:7d:ee:3b:2d:d2:78:70:5b:96:73:fa:a4:dc:5e:
1a:91:d5:fa:94:af:54:9f:d4:23:ba:65:db:da:39:
e5:96:a0:f6:89:24:0a:b8:bc:6f:6c:e2:bb:07:69:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:37:93:89:D4:67:13:25:24:65:8C:1B:92:BA:4F:B6:0B:80:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:0c:6c:7b:e1:a9:e5:a0:d2:85:ab:e3:48:60:08:65:26:25:
0d:d7:f0:70:64:f1:a4:de:e9:f2:2f:73:c4:90:26:d8:68:da:
60:0a:d7:60:55:b6:c5:df:67:e8:69:31:97:ce:87:25:2b:b8:
54:99:a6:f1:3f:84:fd:85:8d:8e:e1:df:0f:d3:db:4b:88:ff:
9e:41:db:1f:90:3c:5e:09:55:f5:67:44:bd:8b:53:76:db:be:
56:d9:86:60:cb:c4:08:4f:7d:b4:d9:d0:dc:b8:3c:65:93:29:
4c:d4:30:a8:05:cc:57:57:5d:24:10:10:6f:1d:fa:8f:80:d8:
e5:e7:6b:b8:52:67:c2:96:b0:84:b5:22:ab:16:e8:2d:74:9f:
ba:52:78:14:eb:48:e0:e8:ab:2c:ab:f8:ab:aa:45:f2:30:a5:
b8:8b:82:1c:74:49:47:87:bb:7c:7f:d1:87:e0:db:b0:9f:f5:
c4:29:c8:4f:66:94:8b:d4:ed:de:5c:6e:d2:89:db:7a:50:84:
ca:0a:ff:dd:7c:9f:d7:a6:9d:74:b2:0d:cd:d3:b9:82:26:10:
15:29:5e:09:ed:9d:38:46:3a:91:c3:eb:25:03:36:37:fa:38:
e1:18:47:6f:d2:02:c8:a4:31:35:55:4d:84:48:7c:81:13:de:
28:f2:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:30 2025 by rpki-client