Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa
File: 27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa (raw, json)
Hash identifier: hfV0m6WR6qfP8BaOHhl8LFxgy5vc/ipCgsIJLZ09JDs=
Subject key identifier: 54:BC:CC:D1:F0:2F:B2:4B:09:33:3C:71:55:F4:10:5E:04:91:DC:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C7C3A52F2C59902BC7DE8208A54452C3B151C62
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa
Signing time: Wed 19 Mar 2025 00:01:48 +0000
ROA not before: Wed 19 Mar 2025 00:01:48 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7c:3a:52:f2:c5:99:02:bc:7d:e8:20:8a:54:45:2c:3b:15:1c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:01:48 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:2c:4c:1f:8c:47:41:1b:0e:09:77:df:e4:
e0:fe:73:8e:7c:57:c7:9f:bd:42:59:2b:d0:2a:a9:
8f:60:18:e4:ed:d6:07:31:61:c7:dd:b0:b9:1f:1c:
20:94:91:a8:67:03:bf:52:b0:cb:f8:55:c0:74:37:
9b:ef:bd:87:c1:71:5e:ca:b3:8c:f5:12:16:80:3d:
63:bb:9f:44:e1:1e:06:2f:3e:c8:a8:54:70:aa:c7:
fa:a2:ce:d8:a4:cd:26:57:d3:fe:dd:4d:91:33:eb:
03:9d:70:93:cf:0d:fb:34:1b:2a:08:7a:ea:45:ce:
51:aa:91:77:06:54:6d:cf:4c:71:89:db:00:de:35:
94:ca:bc:cb:0b:0d:c6:96:ee:18:1e:db:f8:34:62:
d8:48:2c:a5:6d:e3:d8:83:9a:25:79:1b:03:af:aa:
89:51:7a:fd:71:10:57:a2:da:e3:35:59:c9:80:2f:
ff:ad:c9:67:50:c1:e3:81:55:f9:10:4c:cb:6d:e8:
76:10:a3:76:9b:c5:57:63:61:d2:cf:e8:21:8d:4e:
5e:d9:3a:fe:ea:6a:4e:7b:8b:1b:c9:78:ca:2a:24:
bf:61:90:e9:2d:0a:df:5a:36:1e:16:e0:30:d6:e8:
34:b5:3e:07:9e:f0:39:34:eb:fa:98:38:bf:42:56:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BC:CC:D1:F0:2F:B2:4B:09:33:3C:71:55:F4:10:5E:04:91:DC:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.159.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e9:45:93:4d:aa:a0:e1:12:27:e9:00:88:c8:4e:ec:ee:cc:
3c:29:69:fe:c6:0d:f2:8f:d6:04:70:05:04:85:04:e4:3b:33:
72:c1:f1:f4:77:6b:8f:d6:75:a7:f1:b0:22:69:f8:90:a7:de:
20:8c:16:24:02:03:ba:18:89:99:71:bf:35:a7:d7:4a:fc:c9:
22:9e:b1:5a:8c:db:23:e2:a2:fa:54:1d:4e:be:0e:c3:f7:9a:
3c:67:e6:9c:c6:70:aa:d2:d7:df:8f:3a:27:41:81:f1:f9:56:
3e:81:89:e7:7a:80:df:dd:76:ae:2d:e4:dc:24:90:f3:ab:58:
77:f9:ba:ea:99:71:86:ef:74:1a:d0:af:f9:a5:97:62:ff:5f:
85:fd:76:d8:00:37:f8:48:52:0f:12:50:d2:a7:04:3f:d4:78:
03:15:fa:6b:30:be:e8:a8:f6:1d:4e:9c:d5:10:fe:6e:17:ea:
6f:36:c7:82:ba:dd:12:15:ee:9f:66:c1:1c:d3:00:26:3d:f0:
a0:32:0f:5f:a7:78:93:10:74:9a:c5:95:cd:66:06:e4:3c:17:
bd:b1:b0:93:cf:e4:e3:fa:75:16:4f:23:02:cc:64:55:dc:34:
d4:c9:b9:4a:8b:9f:e1:7a:a1:98:c1:7d:a6:bd:81:ed:83:e8:
3f:1c:30:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:38 2025 by rpki-client