Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e61776b-7e9d-4304-a53c-85ae477f8230.roa
File: 7e61776b-7e9d-4304-a53c-85ae477f8230.roa (raw, json)
Hash identifier: naRhKaYCKvi9WTAmHrrgNLwCrfNdLgUWSZw89pa63zQ=
Subject key identifier: 46:AB:2A:00:42:62:31:C6:75:A5:F0:3B:F8:84:19:A7:99:CE:61:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22BE62E2E4CC260DF987890002A8E98CA83991E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e61776b-7e9d-4304-a53c-85ae477f8230.roa
Signing time: Tue 04 Mar 2025 17:20:17 +0000
ROA not before: Tue 04 Mar 2025 17:20:17 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:be:62:e2:e4:cc:26:0d:f9:87:89:00:02:a8:e9:8c:a8:39:91:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 17:20:17 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:26:a6:f3:a4:8b:ab:a0:8e:a1:74:68:71:
91:dc:2f:03:91:66:90:f5:cc:0e:23:cf:46:99:94:
90:74:00:97:fa:4b:8a:3f:e3:15:86:94:44:3b:dd:
39:45:0d:8d:97:64:a6:f7:fa:65:77:a3:07:88:37:
26:a4:e2:c8:b6:2d:50:ab:12:31:a3:1b:ab:7d:6e:
93:40:36:0d:d3:e0:df:df:f5:8b:5d:b0:20:06:e6:
80:b5:19:a4:c4:ba:54:fb:3c:75:37:0c:63:5f:c9:
6a:71:80:e4:bc:ed:32:35:7e:3d:6a:91:e8:67:46:
a7:1f:20:ea:fe:01:66:da:50:f8:7b:6e:a0:d5:0c:
5a:01:cb:47:04:a0:2e:fc:aa:e9:75:61:3a:a2:61:
33:4b:15:5d:ef:5e:6b:4f:4c:bc:6a:6b:c9:31:32:
bb:1b:9d:da:77:77:73:90:81:e0:62:c4:10:6f:4f:
ef:55:77:e2:e5:cf:1c:50:3b:b8:d0:1b:3b:41:56:
14:08:5f:23:49:ac:8b:b8:7d:6f:73:a0:0b:2a:a7:
d1:c3:3e:ac:7b:c2:8c:e9:6f:7a:92:1f:7e:12:38:
5f:08:b4:25:2c:c4:74:40:84:8c:5a:c9:b1:98:3f:
12:a8:dd:de:b6:93:6e:84:0d:b8:10:22:dd:06:ab:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AB:2A:00:42:62:31:C6:75:A5:F0:3B:F8:84:19:A7:99:CE:61:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e61776b-7e9d-4304-a53c-85ae477f8230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.124.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ab:e2:11:21:89:a0:f0:98:db:97:6a:dc:4c:25:b3:bc:9e:b0:
2d:48:50:1f:3e:08:68:95:be:3e:35:fa:03:f6:3b:db:0e:c4:
7e:f1:f8:df:d9:11:57:15:52:9e:2a:9b:6e:09:cd:ef:df:da:
1d:c8:f1:b9:c8:5d:e3:26:1d:b7:e3:21:6a:45:f0:5d:0a:0b:
28:7a:08:b2:90:25:24:e1:4d:66:ec:ce:78:76:91:d2:8c:e1:
88:99:92:6f:2d:54:be:eb:1a:2a:c7:e3:92:db:aa:99:56:c0:
f2:2d:7e:50:52:31:70:90:ee:78:20:1a:5e:08:d0:46:32:50:
3e:5b:da:38:70:dd:b7:ef:73:8b:03:5f:84:2f:fe:aa:02:20:
82:be:c7:51:64:55:0f:d7:e2:f2:7e:c8:7a:a2:99:af:bb:d6:
72:4d:57:6c:c6:fa:98:73:4d:b8:c2:b9:0b:08:e1:a4:92:74:
9a:2e:c2:b0:4c:c8:aa:ea:09:a5:2e:46:8b:52:0d:53:dd:b9:
1e:19:5e:aa:b9:b2:4e:9a:04:1f:8c:7d:07:e5:7e:51:e2:04:
d4:bc:e6:76:ba:af:7b:0c:c1:a9:e6:3f:bd:45:d1:05:91:61:
03:99:8e:00:4e:d6:be:04:63:22:77:9a:ca:cd:ea:3d:02:b4:
ff:e9:cd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:53 2025 by rpki-client