Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa
File: 268e47e6-0e83-4333-8c14-c7c8d95614d8.roa (raw, json)
Hash identifier: 5w9H0N/K90Ir1jJ056VVvpv6EC2J+YbZ3ehYwspiONg=
Subject key identifier: BB:C1:F0:EA:98:7B:11:31:91:76:B4:C8:00:FA:D5:22:F0:75:50:60
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C644B1BDC2844EF0882404476CA306C7024AB27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa
Signing time: Fri 28 Mar 2025 20:07:03 +0000
ROA not before: Fri 28 Mar 2025 20:07:03 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 114.56.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:64:4b:1b:dc:28:44:ef:08:82:40:44:76:ca:30:6c:70:24:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 20:07:03 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:92:d1:53:5f:16:80:74:80:68:a7:da:db:
0b:10:fc:9a:50:08:50:0e:26:f3:0d:95:e8:6d:8f:
e6:e1:9c:91:89:47:9f:af:80:82:8f:8b:ea:e1:5c:
56:ed:86:d1:61:71:15:90:fc:c2:df:0c:de:89:31:
83:33:64:2d:27:dc:ac:27:e0:1d:a0:08:2a:42:f1:
c3:df:f6:b8:93:2d:31:34:86:5d:f2:c2:81:9b:16:
40:00:a4:d3:64:a9:5b:e4:5f:e1:00:5f:ab:0e:be:
ea:cf:b8:ee:98:ad:1c:7a:04:c2:04:83:22:84:ec:
b1:ef:9a:21:b5:9e:b8:a1:58:cc:be:28:95:44:41:
9c:4e:51:6d:a2:ec:53:f1:a1:f9:90:e0:fd:ba:44:
59:34:cf:a8:08:a0:31:9a:1a:6e:a9:fe:d4:ac:7f:
8d:bf:be:27:f2:0e:32:83:7f:de:31:6a:55:38:39:
59:bb:16:64:39:b8:1d:92:3a:a7:25:c8:3b:bd:91:
34:4a:40:51:cf:85:de:e5:e7:2a:82:ee:1f:a4:9a:
62:60:ab:5d:bc:cf:49:3f:44:36:b7:4e:48:0d:9c:
8b:c9:f9:03:b7:01:d0:d1:d2:b9:e4:52:ce:bb:5b:
97:29:b1:21:27:56:42:2f:0c:51:a0:23:d9:1c:d6:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C1:F0:EA:98:7B:11:31:91:76:B4:C8:00:FA:D5:22:F0:75:50:60
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.56.189.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5e:35:ed:a9:f2:eb:60:37:88:01:ea:8a:31:e8:ac:c0:72:
15:b3:d9:be:52:73:9e:c7:06:1e:10:29:9b:73:17:d7:c9:ff:
2a:7e:69:f8:b1:8c:c7:a9:ac:44:22:bb:5a:6d:eb:a5:0c:e9:
77:00:33:11:1f:99:65:65:e8:b5:8f:ed:71:19:31:61:f9:b1:
6e:f9:88:a6:7d:4b:f3:bb:18:5d:29:2e:0c:1a:f5:bb:91:39:
0c:ca:bd:99:98:00:ae:d0:e1:86:28:02:e4:df:39:5d:24:e1:
59:95:76:b8:c4:f3:40:cc:a9:fa:7d:e8:6d:de:c9:61:7a:64:
9a:99:3b:9f:bc:4c:f0:37:68:d0:d1:61:c0:45:8d:d2:26:f6:
c9:a2:b0:88:8b:a7:d1:9a:b2:5a:1d:9a:ea:02:67:e8:8f:0e:
54:6e:4c:ca:fe:c8:cc:5b:f7:f5:eb:93:f3:41:87:f5:dd:88:
42:89:42:02:4a:91:6f:5d:b1:d2:b0:11:c4:ca:1c:ff:32:e9:
8e:bf:40:dd:11:96:6f:32:71:af:0c:49:79:26:1d:19:ba:b9:
4d:ae:d7:69:c3:17:ce:87:94:6c:b7:9b:b1:08:62:b0:92:41:
80:ea:a9:58:33:11:e6:83:7f:28:13:c5:f1:e2:9e:bc:53:09:
df:6f:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:58 2025 by rpki-client