Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f6c95e-dfde-4325-bba8-963c772e4a0c.roa
File: f8f6c95e-dfde-4325-bba8-963c772e4a0c.roa (raw, json)
Hash identifier: uvThOji/J3hEIekVAoZ0+rsWhyHtUOLIhociiTCKC2s=
Subject key identifier: 52:F9:60:92:D7:DF:EA:55:31:2A:57:9A:BA:A0:AB:91:E6:54:CE:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E588943B22A534541B4CE21FDC1AB83677DA962
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f6c95e-dfde-4325-bba8-963c772e4a0c.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 31.220.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:58:89:43:b2:2a:53:45:41:b4:ce:21:fd:c1:ab:83:67:7d:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=0ee43ad75b5d748fa9e2f0a00188a5674ddcc27899c6285d8389f85782e07548, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:82:fe:4d:80:9e:b5:4e:6a:20:cb:78:ea:
1e:66:07:12:ea:e9:a7:e4:18:b0:90:5c:eb:6a:b3:
e1:68:67:bc:30:47:6a:51:05:a1:18:70:8d:50:fd:
56:86:ff:37:ad:fc:6d:45:85:4f:72:24:a9:b7:4b:
ba:d2:d7:e4:39:be:13:22:f5:b1:0f:94:27:2b:dd:
fc:43:e4:31:76:14:0b:94:0b:3e:a3:8d:39:b1:dc:
9c:2b:12:9b:2c:0d:c4:11:cd:0e:5f:53:eb:78:01:
c4:fa:ba:cb:e1:e4:c0:7b:1c:fe:d3:4d:72:b3:98:
1e:d5:b9:51:b4:8f:b7:64:e9:c7:6a:0c:f7:a7:ba:
0d:7a:54:e5:a5:13:bd:47:55:51:13:de:e8:62:dc:
10:60:c4:24:bb:4d:68:6f:6e:94:14:7b:54:f2:fc:
08:2d:d5:16:24:77:93:ca:55:ea:13:b6:30:12:6e:
7e:9a:ad:c8:91:fe:37:69:83:b9:ac:d9:f9:53:31:
d2:d3:8b:1f:c0:14:c5:a1:f5:64:51:ab:0e:ce:26:
b3:50:5d:46:ef:b3:ca:9b:b3:11:39:4b:d5:62:5a:
62:b6:50:18:ef:bf:dd:c7:80:a3:1f:24:3c:7a:6b:
7e:84:23:f3:57:b8:2b:3e:f5:5f:31:2b:01:b3:ac:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:60:92:D7:DF:EA:55:31:2A:57:9A:BA:A0:AB:91:E6:54:CE:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f6c95e-dfde-4325-bba8-963c772e4a0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.245.0/24
Signature Algorithm: sha256WithRSAEncryption
35:eb:21:7f:da:f9:ce:c1:de:57:a3:74:7a:f4:05:7f:e6:66:
95:96:96:92:d6:bb:b7:3b:41:b1:09:f5:fb:57:a9:e4:ce:4a:
99:1e:36:f8:4c:0e:fb:84:74:0c:95:b8:db:61:53:f9:f8:15:
3a:72:35:cf:e1:c0:88:fb:6f:10:1b:57:ba:df:8a:5d:ed:bf:
95:de:1e:3b:e1:7d:58:a0:e4:f7:09:9c:ad:78:ba:fe:ca:79:
c7:bd:b9:8e:e2:b8:5b:29:a9:46:d1:0b:c3:32:63:8a:c7:ca:
e7:da:c1:15:ec:7f:2e:ec:37:ac:11:2b:30:9b:10:1b:33:ce:
b4:f2:98:75:43:89:83:69:5d:61:83:d7:1a:ed:df:98:b8:85:
a6:71:53:f7:f1:cc:6c:a2:4b:a9:cd:51:c8:01:72:14:a8:16:
dc:49:f9:ce:03:ca:f3:52:bd:39:e2:1d:8a:01:49:37:31:cb:
fe:bf:0d:c8:e2:72:67:c1:17:ee:d4:48:d8:ca:6f:f1:3b:3e:
71:2c:f9:f5:f3:6f:a9:e1:33:01:20:0d:6b:dc:4f:eb:cc:27:
75:97:f6:bc:3c:04:4f:02:98:9a:c2:a5:58:a4:a5:8b:7a:13:
d9:47:8b:ae:96:ba:2f:f9:cf:b0:7e:f3:fa:93:59:5b:cd:5e:
48:f2:05:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:11 2025 by rpki-client