Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e0cafd-0de6-48b8-bd43-f81bd44f6fc5.roa
File: 53e0cafd-0de6-48b8-bd43-f81bd44f6fc5.roa (raw, json)
Hash identifier: Mxc9xe3ou6jdQBui7tl0Au6vAG/4ucpKUzsrt2LLNrA=
Subject key identifier: F9:DB:AF:2B:BB:B3:5B:B7:0F:A4:EB:6A:32:97:15:B5:1B:0D:0A:BD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D82D0E1B32EF2C90D4A2493286916CCB0AB5C15
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e0cafd-0de6-48b8-bd43-f81bd44f6fc5.roa
Signing time: Mon 17 Mar 2025 15:10:53 +0000
ROA not before: Mon 17 Mar 2025 15:10:53 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 151.148.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:82:d0:e1:b3:2e:f2:c9:0d:4a:24:93:28:69:16:cc:b0:ab:5c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 17 15:10:53 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:da:ac:66:93:03:7c:5b:fc:c8:de:ff:6d:
12:c4:96:9e:75:d8:b3:87:3c:8a:4c:f7:0f:b5:40:
6e:ea:55:40:14:b4:b2:85:86:68:d6:b1:d4:ea:f8:
0d:21:13:35:52:8e:a0:a8:94:a7:93:41:c4:cc:f7:
94:4c:80:c5:d9:db:b3:0f:04:bd:fd:9d:d8:9b:4f:
be:00:eb:df:6d:01:77:93:a0:0c:5f:0d:af:5c:75:
e6:af:10:7e:32:bf:a4:43:b2:8f:7f:86:ae:57:00:
67:7a:69:6e:32:8c:1b:b6:0e:ba:08:c2:4a:6e:e7:
b0:05:87:78:03:2b:ea:f2:b2:97:f7:1d:14:8e:f8:
e3:76:5c:b9:a5:37:cb:9a:a5:00:4f:1b:12:bc:33:
9c:05:30:83:51:41:55:b8:ca:1e:ce:d3:8c:f4:29:
d8:e6:44:89:90:09:46:af:73:ed:35:f3:17:45:87:
6b:a7:6a:04:d0:15:68:32:f3:64:5a:a3:76:86:b1:
60:dd:e4:ad:a7:7a:67:84:9a:a7:58:f0:46:b7:6d:
33:d6:28:da:c8:fb:aa:d4:25:c8:e8:ea:8a:f4:ff:
fa:61:88:ac:45:55:74:77:2a:79:50:1c:b1:ff:35:
db:37:d1:b7:df:aa:87:b1:b9:f6:81:69:8d:b5:41:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:AF:2B:BB:B3:5B:B7:0F:A4:EB:6A:32:97:15:B5:1B:0D:0A:BD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e0cafd-0de6-48b8-bd43-f81bd44f6fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.148.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5d:9c:1b:c9:90:27:c3:6c:64:05:df:c8:8c:74:94:09:98:
a9:cc:4d:95:9b:b5:6a:f0:b7:2d:0c:4f:01:b7:97:42:36:ee:
8a:65:d8:9b:3d:2c:64:63:b6:42:20:30:bd:86:c3:16:ac:46:
e9:e9:81:26:81:40:2f:a4:b3:ec:b6:4f:65:2a:f4:8f:93:8e:
d3:9f:e7:81:ce:00:b9:46:86:a1:e2:3f:78:8e:de:a3:66:60:
78:f3:ac:c4:79:94:58:5e:05:5d:70:00:cd:fc:1f:4c:38:68:
a6:ac:f7:f7:22:88:73:e1:a6:f4:01:d0:f5:cc:19:35:7d:07:
35:32:a4:63:7e:d0:e4:2f:f1:6c:c6:0f:9b:81:ba:2f:2e:fd:
91:46:ed:22:86:6c:48:0e:32:f0:db:19:b9:97:6d:c3:7f:c8:
b6:31:87:d3:ec:f1:22:7b:5a:b4:5c:8a:cc:b2:59:38:c6:76:
c1:63:96:58:44:b0:de:b6:05:cd:aa:29:94:bc:7e:4b:0b:32:
4f:93:a2:3d:b6:9d:24:b5:a7:52:3c:78:75:09:1f:01:a9:9c:
f3:02:2b:c5:0d:b9:b8:b7:c7:63:b5:d8:9c:a6:70:47:18:07:
cc:7d:24:71:a4:6a:87:70:f3:23:26:a8:49:4f:ca:26:1a:b4:
77:27:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:46 2025 by rpki-client