Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa
File: 6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa (raw, json)
Hash identifier: BQHsDqxKLYs79MtsGFrhYd7rq4IJHMu+qB+jVInwSQ4=
Subject key identifier: 60:5A:0C:3E:FD:AA:AA:FF:93:3E:2C:B5:AB:C3:1F:F7:5E:6F:E9:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06784A4F53BBC9E0CE11D0DF18AC527D874D426F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa
Signing time: Sat 08 Mar 2025 00:22:02 +0000
ROA not before: Sat 08 Mar 2025 00:22:02 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 45.57.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:78:4a:4f:53:bb:c9:e0:ce:11:d0:df:18:ac:52:7d:87:4d:42:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 8 00:22:02 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:32:87:24:4f:46:76:d5:52:16:ec:ed:55:
37:80:3d:08:ef:c8:12:e1:73:67:45:17:04:0d:e8:
9a:1a:ea:f0:c9:10:4a:ec:c4:b1:78:af:94:0c:f2:
f0:5b:7f:e2:78:36:f5:4f:4e:e3:5c:39:e2:85:c4:
16:01:4c:75:09:fd:b1:0d:01:3f:f9:93:69:b1:41:
40:8d:ec:c3:4d:b2:ff:d8:35:43:5d:5f:81:6e:55:
67:ac:15:ab:87:6e:6b:26:9b:28:16:44:ac:e4:84:
2b:f1:18:56:dc:6d:66:d4:08:25:d8:1f:57:56:11:
5e:77:84:76:79:bb:4a:1d:41:8c:20:c9:86:59:e5:
99:87:37:80:fe:50:a6:d4:da:c4:9e:89:1c:7a:c6:
a0:8c:4a:61:df:c0:53:0e:c5:48:22:90:9e:22:a7:
dd:a6:05:be:a5:d3:48:55:c1:15:df:68:34:5f:51:
86:2c:ae:85:dd:7f:33:b0:09:2a:cb:50:10:05:4a:
02:7d:0a:f2:94:9f:df:ac:04:f6:b7:82:3e:b2:2b:
21:ec:89:7b:f4:67:a9:89:9f:55:77:b8:bc:47:7e:
6a:d3:61:5f:21:2a:c7:92:c8:1b:3e:47:dc:d9:ed:
bb:ae:fc:1d:48:b4:8d:ea:5f:92:f7:1e:21:89:20:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:0C:3E:FD:AA:AA:FF:93:3E:2C:B5:AB:C3:1F:F7:5E:6F:E9:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.57.128.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:b0:9f:25:d7:0c:09:8f:8d:f1:4d:bf:6d:c0:ef:6f:9e:4b:
ba:cb:0d:40:14:9b:14:a9:85:7f:d1:d4:cc:c7:60:e8:bb:eb:
b8:78:40:88:58:b2:5c:d9:ce:bb:1e:13:cc:31:d8:0d:4c:36:
9b:c2:48:7c:6d:5b:b7:ef:97:6b:9f:41:b7:af:15:55:42:5b:
3e:56:4f:8d:bd:db:4e:97:af:2d:5e:3c:b5:3b:33:08:c0:be:
0c:d0:bf:e2:88:67:a4:b2:62:13:be:15:d7:38:54:d0:91:ed:
61:07:16:f0:00:83:33:ef:a6:2a:aa:40:95:18:f7:a8:53:6a:
25:d8:ae:16:82:1b:fa:4c:f8:40:44:7d:94:87:bc:64:35:36:
56:c0:60:be:ad:73:e7:be:8d:1f:03:40:b8:a8:bd:7e:2f:23:
be:c4:dd:a9:76:94:d1:95:24:75:aa:72:0f:c3:14:17:6a:24:
3b:ad:e7:66:bb:3d:ba:37:71:50:1c:f7:96:e8:7c:29:a5:ee:
b3:bd:2b:2f:40:8e:98:4a:03:49:c9:7a:8f:70:0a:1c:cf:53:
a4:c7:f5:25:1a:ac:82:cd:04:a3:3b:87:61:f3:4b:3f:6c:b4:
de:00:72:2b:77:b0:08:6d:af:a4:98:89:f5:fd:59:d6:17:b5:
2c:cb:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:32 2025 by rpki-client