Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ad3a4fb-a417-4f1b-83fd-6527c2718313.roa
File: 0ad3a4fb-a417-4f1b-83fd-6527c2718313.roa (raw, json)
Hash identifier: jTWgsqSjRaggF9XcSv71kXWlR8XDv6neu/5BWfpqqY8=
Subject key identifier: 36:A6:6F:DB:AC:DE:4C:A9:08:9A:9B:85:72:5B:B8:2C:8D:D4:B9:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 268295AAA133D745923412115534E118A5056DEE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ad3a4fb-a417-4f1b-83fd-6527c2718313.roa
Signing time: Mon 24 Mar 2025 15:50:26 +0000
ROA not before: Mon 24 Mar 2025 15:50:26 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 93.190.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:82:95:aa:a1:33:d7:45:92:34:12:11:55:34:e1:18:a5:05:6d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 24 15:50:26 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:c8:1e:0a:fb:e4:2d:87:f3:d2:87:b8:03:
37:4a:27:f8:ba:d8:e9:6d:16:58:3b:47:09:c5:3c:
d5:b5:43:ee:b6:06:eb:ab:8e:e2:7c:71:ff:e6:66:
62:c9:e4:7d:46:46:b3:76:6d:1b:4d:33:d1:77:ba:
b0:99:49:88:ae:b2:78:01:ab:fb:46:41:30:86:37:
2b:4b:49:f9:9d:e8:9d:c1:41:fd:b4:96:eb:96:81:
ed:bd:97:43:ef:55:72:19:e4:30:d0:ae:8d:ab:5e:
c9:c9:cc:6f:20:33:16:33:0f:dd:7b:79:b7:fd:8f:
91:fa:9c:ab:41:cc:e1:d2:52:e5:12:83:ff:dd:ff:
f0:d5:be:8f:a5:8c:05:de:76:d6:73:1c:a4:4a:7d:
8f:a2:2b:79:e9:fc:3e:57:02:a3:5f:39:5d:95:a0:
85:22:f1:5d:8f:65:ca:08:64:1f:04:40:1f:9b:9a:
fa:a3:5e:69:3c:0b:cb:5f:26:a5:4a:24:fc:71:f9:
70:68:a0:e5:55:ab:15:8e:9a:7c:f4:3e:6f:6c:0c:
81:73:47:be:1a:d2:16:30:2a:32:83:32:9b:f0:d6:
fc:0c:1a:27:e2:52:ee:6b:44:46:f6:d1:fc:00:35:
92:73:e5:bf:82:31:e7:d0:d9:0a:f7:93:cd:5b:87:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A6:6F:DB:AC:DE:4C:A9:08:9A:9B:85:72:5B:B8:2C:8D:D4:B9:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ad3a4fb-a417-4f1b-83fd-6527c2718313.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.184.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9e:ff:af:64:04:08:88:b3:74:fa:54:86:76:c8:35:0a:b7:
04:a4:a4:e5:42:a2:a2:c6:a3:d7:3e:7f:43:f1:52:e9:99:1b:
29:55:7f:bd:8b:ea:29:b0:87:10:8a:e4:52:76:aa:be:86:a7:
7a:01:27:b2:c4:77:33:08:d7:68:b5:de:32:69:b0:19:b0:34:
85:d7:6d:4a:18:15:d2:06:60:98:46:5f:56:2c:57:b3:bf:d0:
49:e9:e9:d5:50:b0:ee:9f:71:1a:42:88:c0:89:ae:e9:ca:01:
e9:a4:6e:c2:8f:82:83:06:92:9a:35:2b:53:89:1a:49:52:65:
79:14:78:de:50:4e:82:42:be:1d:f1:12:48:b0:4b:da:99:20:
5f:c6:c8:f5:d0:f5:d7:e4:a8:1c:6b:5e:ca:f9:0f:5f:dd:62:
1c:8f:69:b1:42:4c:5b:3c:52:a5:dd:21:76:41:d7:f7:ca:42:
9c:18:b9:d0:3a:8b:56:34:42:09:89:b9:78:2b:2e:85:d3:83:
f3:2b:72:03:45:b5:5e:fc:93:54:88:25:8b:f2:02:7d:6e:70:
64:61:07:1d:fa:36:bf:a9:e8:3b:bf:30:72:41:c1:ba:4c:8c:
b5:89:8a:d6:6c:37:07:50:9e:5e:2e:89:f6:01:a2:74:f8:5f:
5e:e4:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:17 2025 by rpki-client