Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
File: 565bd2b5-79dd-4341-a5bc-d68981cd9648.roa (raw, json)
Hash identifier: LJeD1d3xu9WuVws0hsHjZZ22pwUPncF8kpxqV1ulIH4=
Subject key identifier: E2:70:58:C5:AB:78:36:08:CE:25:69:9C:7A:34:25:8E:C0:3E:59:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 42C1191EA398BBB40D1C5FEB78DF88759A2D129E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
Signing time: Tue 18 Mar 2025 00:41:54 +0000
ROA not before: Tue 18 Mar 2025 00:41:54 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c1:19:1e:a3:98:bb:b4:0d:1c:5f:eb:78:df:88:75:9a:2d:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 18 00:41:54 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:f4:0c:b5:95:76:c6:db:ba:f5:57:28:21:
7e:32:df:e4:d6:ea:a3:a7:39:c5:f1:ff:f9:2a:af:
51:c8:8f:32:1e:4c:73:a3:4e:04:5c:d7:1f:e1:83:
8c:80:b8:e5:26:b6:cd:a9:94:81:95:3d:9e:8e:49:
28:2e:3a:6c:e3:b8:83:53:cb:c3:bc:c2:18:c5:54:
5c:9f:68:c0:77:5b:92:ad:f7:7b:de:8a:28:b6:29:
8f:80:2b:54:bf:36:a6:dc:de:be:f0:05:a1:07:70:
ec:7e:75:0f:1d:f0:3a:c9:7d:0d:04:58:fa:63:7e:
2f:40:68:62:e1:42:50:b7:be:8c:48:02:da:67:01:
df:35:d5:f8:45:bb:47:93:b1:50:77:63:f3:5d:fd:
59:5b:50:6e:6c:ba:3d:ae:c4:fe:7c:32:89:32:6a:
1f:dc:ef:ba:55:8b:73:2e:cd:a7:83:b4:9a:fb:cc:
9a:53:e5:7e:44:38:ee:46:01:d9:1c:8e:13:c7:76:
b0:fd:db:a7:82:4b:e7:e4:86:e0:ee:6f:7a:f6:c4:
0b:aa:0a:8b:85:0c:80:63:3c:16:52:0a:d4:2b:af:
c7:70:06:2a:82:9f:c9:40:89:60:df:11:1a:7b:0d:
61:59:45:f0:b4:96:0e:ec:aa:ac:af:dc:4f:72:01:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:70:58:C5:AB:78:36:08:CE:25:69:9C:7A:34:25:8E:C0:3E:59:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:b9:52:a0:40:12:bb:08:38:d4:a4:d9:66:9a:60:33:80:f5:
6a:ab:87:1b:b2:b9:4f:68:e2:5c:b6:08:5c:e6:2c:c1:12:ee:
75:98:37:de:36:e9:4d:bd:91:1c:3d:98:04:b7:dc:d8:e0:ba:
0a:d0:ef:bf:8b:6e:57:ca:f1:89:a0:e4:f9:ba:35:90:9c:49:
dc:6b:d6:38:b5:f5:15:f5:f1:b8:be:41:da:43:6e:bd:cf:b5:
5b:4e:f9:a6:99:fa:06:1e:ad:34:26:f4:fe:f6:13:4d:60:b5:
4d:e1:66:b1:4f:0d:10:58:60:97:67:f1:e9:18:59:93:8a:80:
30:31:f6:67:14:50:a7:e7:54:54:0a:09:0c:9d:34:71:aa:4f:
d4:d5:4b:61:39:5b:39:8c:b7:3d:74:6c:ca:78:09:39:31:7b:
c6:3e:17:d3:ea:17:a6:68:c0:af:e0:be:91:f2:24:0d:a5:de:
ee:cb:65:fd:14:f4:aa:32:73:cd:ed:dd:8a:db:e8:c8:47:80:
b6:af:a2:f3:6b:d6:3e:14:a5:4c:58:26:d9:37:62:20:d3:04:
9c:02:13:f3:98:15:92:eb:0c:ec:72:3d:26:c9:b8:a6:fa:72:
43:27:2c:0c:a7:f0:1d:c4:1a:8e:f1:e3:9f:e9:93:3f:d0:5f:
6b:92:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:56 2025 by rpki-client