Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dbc5e25-f726-4ad0-b90d-33cea3f88be4.roa
File: 8dbc5e25-f726-4ad0-b90d-33cea3f88be4.roa (raw, json)
Hash identifier: 2vMzq1GTBIs4peJlXyrnUmj+BflnpVLPnSKb1D30bMo=
Subject key identifier: 5A:0D:7D:98:3D:24:D7:EC:D6:3F:21:15:E2:4E:39:E6:0F:2B:FA:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 01B464AA8B38A22BCF3526EEE24F891772C0EA89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dbc5e25-f726-4ad0-b90d-33cea3f88be4.roa
Signing time: Fri 04 Apr 2025 00:10:27 +0000
ROA not before: Fri 04 Apr 2025 00:10:27 +0000
ROA not after: Fri 09 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.109.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b4:64:aa:8b:38:a2:2b:cf:35:26:ee:e2:4f:89:17:72:c0:ea:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 4 00:10:27 2025 GMT
Not After : May 9 23:59:59 2025 GMT
Subject: serialNumber=ceb0dbfaf1809e26cffd334edac8cc5ddca6768e0b2821ea4dce86370e32097d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:12:cb:36:b1:4f:b9:34:0a:16:3e:f7:41:
47:40:07:e9:9d:8a:85:89:72:c1:95:6e:97:ec:8b:
4a:d1:2c:cb:dd:51:e8:b8:9a:a8:ff:51:59:f3:87:
1b:1e:91:7b:45:83:d5:cf:a1:71:ac:e7:11:3b:4f:
b7:1c:b0:88:a3:d8:68:8c:db:46:54:a4:c1:7e:5a:
33:0e:7c:95:ba:23:e2:21:bc:e8:79:d5:e8:8e:6b:
f4:ff:8c:b1:58:d9:bc:51:3a:b3:f1:60:3c:8f:c1:
43:1c:1c:20:8d:0b:4d:66:31:77:70:b2:f6:26:72:
39:19:de:5f:25:b8:1e:63:35:7f:65:4a:74:c8:6a:
aa:7f:09:46:5d:d7:06:aa:96:b7:27:86:20:44:f8:
c5:13:7f:4c:0c:a7:7c:62:dc:49:17:2e:d6:e6:56:
9f:e7:1f:c2:61:be:e6:41:63:dd:ab:03:29:44:52:
c7:48:67:8c:d8:71:65:a9:a9:23:9c:70:00:ba:56:
ac:64:b6:12:2f:b0:c5:b0:e6:18:ac:7b:90:e8:b8:
73:e1:9c:8c:3c:de:00:a4:6e:dd:8e:b5:0c:3c:f6:
df:52:5c:6d:93:f7:5f:31:39:8f:43:2b:c2:a1:f5:
51:96:ab:11:3b:d0:53:4e:ff:dd:03:ac:20:fb:fe:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0D:7D:98:3D:24:D7:EC:D6:3F:21:15:E2:4E:39:E6:0F:2B:FA:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dbc5e25-f726-4ad0-b90d-33cea3f88be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:35:d2:ab:67:60:91:ca:49:96:cb:87:3a:2b:b9:0f:96:c6:
57:1d:4f:5e:08:f2:cd:e6:0b:4d:cb:b1:4f:de:bf:44:ff:bd:
02:f0:28:46:0f:d2:9e:b9:ef:f7:1e:ae:6a:43:82:a4:09:79:
c5:ee:ca:1e:b6:45:ee:2a:96:63:e8:d9:5d:d7:86:ff:cc:90:
4b:ea:e1:da:4b:38:e8:34:f7:b1:b5:0a:19:24:e0:76:f2:d2:
97:19:d9:d8:cd:0a:81:7f:fb:f2:d2:6e:47:5e:97:4d:8b:7f:
ec:50:77:b0:25:e6:6f:1f:79:79:97:e7:83:35:e1:c7:27:d7:
dc:73:90:9b:b5:c0:d2:d8:1c:35:fd:24:c9:46:10:4c:a6:e7:
05:08:ac:97:24:fd:5f:92:b3:eb:a5:de:4d:2c:cc:db:37:1a:
26:0e:b9:88:ae:eb:f1:39:13:af:bb:c4:05:f9:f5:fa:7e:13:
44:1f:c3:4b:33:f0:24:bb:9d:c4:2f:63:e3:99:96:ed:39:4f:
28:9e:60:6a:a1:67:1f:d0:92:fc:59:e2:9e:c8:a8:ab:94:c1:
49:02:dd:16:7f:54:c7:a1:7f:bc:14:91:fc:0a:8a:02:c0:d9:
2c:b2:b9:8c:b4:af:5a:20:4e:ad:8a:ee:a3:f1:fa:c0:4e:8a:
89:46:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:13 2025 by rpki-client on console.sobornost.net