Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa
File: 3505df96-b443-43ec-8e8c-f0de340b6cc2.roa (raw, json)
Hash identifier: 3XETRv1/ISKkLWA2PUdgaIajHs76udPnodnm7Os3BbQ=
Subject key identifier: A0:8C:79:F2:D6:F8:F9:58:CC:BC:BC:E0:38:B0:A1:AE:47:99:31:E6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 28D219BE060AB31B4C97F6288015A386E62EC93E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa
Signing time: Fri 07 Mar 2025 00:01:26 +0000
ROA not before: Fri 07 Mar 2025 00:01:26 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 134.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d2:19:be:06:0a:b3:1b:4c:97:f6:28:80:15:a3:86:e6:2e:c9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 7 00:01:26 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:e2:d1:7d:f1:2e:4d:84:48:45:3a:22:00:
ed:3e:bc:02:b1:55:25:f1:1a:b0:e3:6d:17:b5:4e:
c9:f5:f6:87:41:54:59:7d:09:4a:c3:1a:3e:78:5a:
ef:2d:da:48:7b:71:8a:31:66:91:60:05:5c:82:4d:
08:b4:47:4a:7f:66:da:cc:41:ac:50:99:c7:c8:b2:
5b:b7:08:36:65:de:51:be:71:59:8c:65:a9:3b:47:
12:21:a1:dd:7b:62:a4:ed:40:14:a5:b5:32:40:40:
dd:3a:d4:57:2e:ae:26:fa:f5:a0:73:18:08:57:9b:
c0:d9:7b:ec:ed:1e:13:fc:6d:cd:81:95:84:7e:57:
b5:4d:ce:f8:77:ca:6f:96:a3:43:23:f0:4e:aa:89:
56:3f:e8:46:29:e9:c3:6f:47:b1:3d:c0:15:4a:e8:
f8:db:ff:4f:90:89:08:d2:69:9c:ee:41:00:5f:23:
95:20:8a:ad:f3:5e:11:c9:79:e0:78:6d:b2:ad:9c:
c1:21:46:cf:08:bc:9f:2c:a6:bf:7f:c3:f3:c7:4d:
8f:d1:c2:a7:10:c2:c6:88:3a:2f:67:d7:67:d0:be:
42:ec:93:38:a7:1c:d1:50:5f:4b:9a:30:25:f3:5b:
1c:b8:08:02:72:5c:7e:68:e0:20:3f:5b:b6:f1:27:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:79:F2:D6:F8:F9:58:CC:BC:BC:E0:38:B0:A1:AE:47:99:31:E6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:b8:3a:ef:4a:7f:97:5a:89:40:24:10:1f:b8:df:ab:33:e8:
fc:00:34:81:05:bf:1e:4f:2b:e9:c5:60:7b:fa:f9:cc:ba:4c:
6e:06:c2:64:0f:50:98:1e:e6:8b:3c:25:8b:98:a1:61:1f:28:
cd:d7:29:03:6e:0c:e2:b0:19:db:bc:e5:bc:a7:c9:19:ba:ca:
e3:85:2c:7c:e3:b9:53:dd:31:23:40:8b:10:0c:96:70:c3:f8:
70:6b:b7:bc:ed:a1:3d:7a:cf:fd:f0:26:e9:cb:ea:6d:79:72:
f8:9d:ef:22:c7:ca:42:9a:a6:99:cf:cd:4e:84:83:35:1c:c2:
66:a9:98:bb:61:b6:0f:eb:f0:b9:a0:09:e9:9e:52:6c:5f:ca:
16:22:c6:21:32:30:75:ce:8d:19:3f:73:67:bb:cc:86:cf:61:
93:9a:1e:31:45:cd:26:e7:1a:32:a7:31:be:81:d2:19:12:76:
4a:78:1c:ab:0d:4d:8e:42:6b:d5:e6:4e:ec:7f:97:55:cf:ea:
61:50:11:a5:8c:c4:34:79:f8:4e:d3:73:26:c3:99:9b:9a:eb:
bb:e9:61:49:e9:0d:67:7e:8a:41:38:5e:83:bb:53:2d:4f:fe:
19:7e:54:8a:96:af:7f:d1:9d:3b:58:e3:20:58:6e:95:7d:84:
e8:61:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:05 2025 by rpki-client