Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/165a35d8-b38d-40b9-a232-c82d49be27e2.roa
File: 165a35d8-b38d-40b9-a232-c82d49be27e2.roa (raw, json)
Hash identifier: 7dK2/lBCQy7DcfadKiDYVg1CpmLDyjziED+o86aBqIk=
Subject key identifier: 5A:E7:75:B6:18:E6:B5:11:F8:57:15:FC:E1:EC:7B:63:A0:CC:1E:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1926BB1F1612955B3DE2737FA04121E71FBF0078
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/165a35d8-b38d-40b9-a232-c82d49be27e2.roa
Signing time: Sat 29 Mar 2025 00:31:25 +0000
ROA not before: Sat 29 Mar 2025 00:31:25 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 139.81.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:26:bb:1f:16:12:95:5b:3d:e2:73:7f:a0:41:21:e7:1f:bf:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:31:25 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:62:89:ee:fd:60:00:04:5c:31:c7:f0:0b:
d9:7c:c9:e9:43:5b:17:5f:9c:cd:a4:e3:e2:bf:1a:
71:7c:3e:ff:27:e0:7c:9b:65:d1:b9:b6:b2:46:c7:
82:23:b2:7f:b4:0b:80:81:64:52:d0:e0:c1:1d:7e:
8b:b9:05:99:e4:ca:50:bc:00:ff:5f:e7:19:bb:64:
0a:f8:87:3a:74:72:cd:b7:ce:42:bf:df:24:79:78:
7f:e5:51:13:c0:cb:07:c7:b0:d9:8b:31:03:1b:59:
34:0c:79:d6:b6:4a:ac:e2:3a:86:81:27:90:8a:dc:
98:7e:a7:21:8c:b7:dd:ad:b2:68:f5:79:8b:a4:b3:
f3:e2:c5:68:90:d0:fc:e5:4e:ab:3e:dd:7c:3c:dc:
51:c4:b4:b4:ad:66:3f:b8:14:4a:3a:fb:f0:78:44:
15:e4:e4:57:1f:fe:f3:24:48:1c:b4:a6:a9:c7:46:
44:9d:44:26:7e:65:94:49:ac:2f:73:ce:5c:90:c9:
c1:d5:b3:cc:41:38:3c:d5:08:17:bd:1b:11:89:98:
36:09:4e:0b:0e:aa:aa:4e:ce:93:c8:1f:72:65:3c:
1f:f0:14:2a:a8:b5:78:90:ed:98:3c:5f:33:9a:bf:
6d:c6:06:ab:d8:51:f8:3a:96:ec:e3:3f:eb:de:26:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E7:75:B6:18:E6:B5:11:F8:57:15:FC:E1:EC:7B:63:A0:CC:1E:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/165a35d8-b38d-40b9-a232-c82d49be27e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.81.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:21:73:7c:2e:40:7b:72:2f:26:19:db:08:b6:43:d0:3a:be:
08:85:c9:63:88:27:30:30:1e:a5:9a:e3:4b:cc:e4:02:61:ab:
9b:e4:1f:62:09:fc:30:78:a9:60:9b:08:41:9e:d3:d8:f2:30:
a8:a4:5c:91:8a:12:c7:31:1c:72:42:65:5a:d8:cf:1f:1d:0d:
38:5d:72:0b:a4:99:b0:a3:84:5f:6e:0b:1d:71:b9:59:e3:11:
ea:a2:92:4a:fa:43:bd:e1:67:b5:5b:6d:13:33:6d:d0:9c:b7:
8e:63:38:f1:b1:bd:ea:d5:eb:65:e2:c2:de:8f:c4:03:ed:6f:
88:21:7e:58:4a:bb:72:8c:fb:b7:89:c6:81:c0:1d:36:41:1d:
58:05:4b:d5:20:5c:41:f9:14:14:5e:df:e3:12:06:38:a6:aa:
b5:26:3c:ba:60:65:0e:08:5a:9a:ae:ec:c2:ee:ef:50:6b:be:
55:9f:8f:76:1c:28:bc:da:ee:a1:46:ab:cf:60:21:1c:41:aa:
f4:21:3c:f8:87:7d:b7:00:08:35:ce:00:9f:b1:38:8c:42:96:
ac:ea:ac:11:bd:39:9d:1e:be:7e:34:61:76:5f:e6:b3:d1:81:
a8:14:ec:ba:fd:60:27:c9:2c:9d:90:69:d2:d1:87:83:96:96:
67:72:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:25:12 2025 by rpki-client