Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac220a6-0e06-40a8-b44e-4fbb37349986.roa
File: 3ac220a6-0e06-40a8-b44e-4fbb37349986.roa (raw, json)
Hash identifier: JJqm/EekoRQOkywJwqOO045Bk1Fyio0h2XnPzrpg6vg=
Subject key identifier: 84:FF:06:B2:44:85:C8:A5:40:1F:D9:19:CD:81:21:4E:C2:4A:4C:1B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C0447C6C0354C4883957AFB211A7699BBCB4BE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac220a6-0e06-40a8-b44e-4fbb37349986.roa
Signing time: Fri 21 Mar 2025 00:20:14 +0000
ROA not before: Fri 21 Mar 2025 00:20:14 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 9498
IP address blocks: 70.130.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:04:47:c6:c0:35:4c:48:83:95:7a:fb:21:1a:76:99:bb:cb:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:20:14 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:a6:a6:21:1c:56:14:49:37:af:e0:d1:a6:
16:83:5c:5b:56:62:b4:56:e6:cb:f0:4a:6b:a8:31:
e3:42:1a:09:50:00:2e:26:f7:13:61:41:60:dc:c1:
7e:e6:1d:c4:f6:2d:fb:a9:05:1e:5b:3a:37:0a:9c:
dc:01:6c:d9:4f:1f:d8:bb:c8:67:f4:14:86:0a:c6:
02:ae:32:c7:1b:62:07:b3:c2:a6:d7:7e:ac:2d:28:
15:ca:59:70:fd:e3:3d:e3:23:3a:42:ea:45:e5:3d:
70:a5:3e:e8:71:99:36:1c:a2:3d:a8:a1:69:0f:53:
f9:fd:27:0a:35:2d:73:48:d3:4a:20:78:d0:58:f4:
f2:ca:7c:b1:24:e2:cb:f1:a1:9d:ed:f6:6c:5a:fc:
bd:d3:69:ff:1b:45:e9:02:4e:37:21:fa:7b:1f:fc:
25:44:b0:45:b7:66:60:c6:5b:47:45:e5:9b:84:d1:
88:f1:b8:cd:a2:3b:24:83:33:31:ba:c2:49:6b:54:
76:b6:c0:7c:2c:9d:68:d1:f7:5c:c0:9c:32:81:b0:
5a:5f:be:a6:81:51:ba:be:3b:a1:b5:5a:4e:f4:5b:
44:73:18:eb:99:87:34:07:bd:0d:10:f7:98:1d:e8:
7b:d7:5f:6c:54:a7:ba:34:83:24:50:3a:3d:be:51:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FF:06:B2:44:85:C8:A5:40:1F:D9:19:CD:81:21:4E:C2:4A:4C:1B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac220a6-0e06-40a8-b44e-4fbb37349986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:84:55:c7:f7:d1:ec:10:39:d2:35:19:49:44:ce:bf:de:00:
76:90:3b:b4:02:2d:58:96:e9:83:b3:fd:35:9a:32:ec:d6:3f:
61:3d:7b:1d:b0:6e:30:55:a7:ec:8e:98:a8:6b:86:64:25:d4:
62:06:f5:c4:33:41:c3:28:22:51:57:91:22:d3:93:66:f3:aa:
41:6a:0d:a9:62:2c:41:0f:18:f0:c7:68:1a:48:08:3c:62:74:
2e:00:7a:65:3a:5c:50:ee:55:03:37:80:96:86:40:11:aa:01:
b7:88:b9:6b:83:9b:02:5a:a8:f9:e0:46:9b:d8:06:b4:8b:d9:
c9:43:62:04:99:bf:d1:84:63:b6:4a:bc:35:8d:0e:24:14:51:
27:42:e8:d2:b7:4b:b9:b1:c5:1c:b1:60:29:bb:bc:41:94:bb:
ab:be:8a:de:c7:5f:94:70:10:77:0d:f2:51:24:c0:e1:62:3a:
ec:9a:17:4c:8a:56:84:b0:3b:41:6e:df:6c:88:e1:2c:cc:26:
44:b5:db:36:b7:35:75:68:bd:c2:1d:2c:2e:6b:a3:bb:e1:81:
de:be:c7:9e:f7:df:7d:0a:02:c2:a7:1c:5c:50:88:40:f6:f2:
17:ad:4a:87:8d:79:7d:0f:06:19:9d:9b:d2:6c:81:f5:54:f1:
92:96:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:47:47 2025 by rpki-client