Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d6c20c8-51a8-4a01-982f-1879ea5a55cb.roa
File: 3d6c20c8-51a8-4a01-982f-1879ea5a55cb.roa (raw, json)
Hash identifier: OC5BAt8bSiD7hBf56poMNnmItctIJLok8hS1WHAPj6Y=
Subject key identifier: DA:CE:9F:4D:A5:F5:05:18:00:82:0C:E1:14:79:7D:43:5C:9C:DE:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 39BF68E1C3D10BE14E24F825AA5B7B26F4EACA5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d6c20c8-51a8-4a01-982f-1879ea5a55cb.roa
Signing time: Wed 19 Mar 2025 00:01:44 +0000
ROA not before: Wed 19 Mar 2025 00:01:44 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bf:68:e1:c3:d1:0b:e1:4e:24:f8:25:aa:5b:7b:26:f4:ea:ca:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:01:44 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:86:17:80:ba:1b:19:f0:53:51:73:1c:d9:
1b:16:27:20:29:e4:02:4e:c7:20:34:70:8e:f5:39:
e2:85:f0:3a:12:a4:31:b4:77:0c:a4:23:c0:34:94:
47:fe:20:ef:b0:97:59:0c:1c:c7:0c:27:57:82:b4:
8c:f5:9e:94:d0:79:0c:0f:8e:d4:3f:b0:8f:3a:da:
a2:ec:ec:1c:c4:80:67:e9:ab:6d:4c:fd:8c:e9:7e:
98:60:00:19:c2:b3:82:54:bc:e8:59:4f:4d:6f:68:
16:68:5a:a9:bd:85:22:7a:5f:69:06:0c:7c:c5:31:
49:a6:72:5c:a4:fc:38:97:3a:89:e5:9c:b0:84:ef:
01:79:ea:6b:10:a6:e2:4d:c8:8f:f6:b0:18:32:25:
f3:fc:b2:e9:39:8d:c5:c1:48:72:28:21:44:af:de:
c1:b2:48:9e:43:88:73:64:1c:9d:f5:b7:a5:e4:4d:
9e:98:47:f8:e3:c0:ba:c8:3f:54:6b:45:7f:4d:7b:
7e:b7:5b:3f:4e:24:f3:8a:03:6d:6c:d6:07:17:fb:
58:68:a8:a3:96:5b:f0:2b:e7:2b:b7:41:e5:ab:a5:
d2:1c:37:78:a9:36:28:fc:12:6b:6f:22:02:1a:c8:
e2:5b:88:f8:f7:43:53:2d:f1:01:68:c7:04:9f:93:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CE:9F:4D:A5:F5:05:18:00:82:0C:E1:14:79:7D:43:5C:9C:DE:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d6c20c8-51a8-4a01-982f-1879ea5a55cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.140.0/24
Signature Algorithm: sha256WithRSAEncryption
19:dd:65:18:88:b7:ca:63:08:7f:77:2a:45:ba:1b:c6:78:60:
6c:36:17:2a:8f:0c:ac:2c:08:ae:13:18:99:49:80:21:15:4c:
83:b6:be:d7:3f:5c:4a:f6:11:f4:c4:c7:44:93:d2:5b:f5:5c:
6a:c4:5d:91:aa:a5:66:e1:e2:d6:fa:eb:b5:b5:da:86:0d:72:
45:4e:07:ee:98:16:11:a3:11:54:6b:9e:a9:c1:0f:9a:29:e9:
4a:51:70:e0:47:a1:4b:cb:59:82:37:8f:a8:a7:64:aa:94:14:
8b:73:5f:44:b7:8a:ec:62:de:f5:78:e1:79:a9:4d:29:f8:50:
6a:d5:f7:8f:b8:82:ee:39:25:55:5a:3f:e2:78:10:a9:c9:2f:
87:ba:84:72:96:f9:80:54:d1:ab:96:93:c4:ba:81:7c:9a:35:
28:3a:a5:c7:e6:8c:df:88:8f:de:52:0a:c2:98:e8:74:d3:b9:
88:90:1a:cd:43:40:7b:26:62:d9:cf:1d:2c:9f:c1:11:cf:e3:
a9:dd:52:7b:b5:fd:23:53:3c:0c:82:d8:57:df:2e:38:78:ce:
d3:49:df:a0:5c:a3:00:7b:64:11:30:6c:90:2d:2d:8d:7f:16:
fb:09:25:bd:ee:df:b6:e1:2c:33:94:bc:5a:b3:88:f1:b4:a4:
bd:1a:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:14 2025 by rpki-client