Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/566fa31f-a900-45ea-bf4f-117836ffe61b.roa
File: 566fa31f-a900-45ea-bf4f-117836ffe61b.roa (raw, json)
Hash identifier: WTKvzzxjZuimVOpvcYavqeo2N5K7j0EaZlsX+wvP3gk=
Subject key identifier: 58:9C:2C:11:B2:8E:19:13:0F:70:E5:94:3F:6D:BE:C5:12:3B:5F:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07850C5D252D96C6E9E7F52F157C6B903037F901
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/566fa31f-a900-45ea-bf4f-117836ffe61b.roa
Signing time: Sat 15 Mar 2025 00:40:29 +0000
ROA not before: Sat 15 Mar 2025 00:40:29 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:85:0c:5d:25:2d:96:c6:e9:e7:f5:2f:15:7c:6b:90:30:37:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:40:29 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:75:96:72:52:05:50:5a:8f:bd:07:80:72:
af:a2:2d:f8:81:24:db:d1:ab:18:3c:df:1f:1d:c5:
30:03:f4:ce:31:15:4d:01:09:f5:aa:37:77:64:2b:
e3:6e:77:eb:5d:02:e9:fd:b7:ef:d7:dd:bd:4d:f7:
c1:6c:02:cf:20:9a:c8:9c:f5:a2:cc:d1:ee:1a:46:
dc:45:45:81:cc:76:d3:0b:78:51:34:a0:d1:d2:51:
4b:d4:66:ef:91:91:0e:c7:75:85:75:ab:43:fc:09:
43:b6:04:b6:93:f5:fa:64:87:e2:22:42:1c:9b:31:
02:63:e2:e0:ce:c2:71:0e:37:25:3c:73:dd:cc:08:
68:78:a4:61:7c:dd:f0:7c:eb:16:c0:47:24:ba:b4:
65:b4:c5:b9:cb:46:1e:c5:45:92:64:79:76:3b:6d:
b4:aa:87:f4:5d:f2:a3:47:3f:b5:b1:f8:30:c0:d7:
72:1c:a6:2b:bc:84:af:2e:15:58:ae:40:fb:f7:03:
dc:68:4a:4c:a7:93:8c:eb:0c:3f:aa:75:86:d0:a7:
1b:9a:ec:67:c4:6a:b4:0b:f0:20:15:79:a7:cb:da:
87:04:2c:90:5f:7c:6d:da:29:5d:49:08:17:20:0b:
7f:b0:7d:14:25:f5:b0:04:08:31:70:41:9f:3f:d4:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:2C:11:B2:8E:19:13:0F:70:E5:94:3F:6D:BE:C5:12:3B:5F:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/566fa31f-a900-45ea-bf4f-117836ffe61b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.136.0/21
Signature Algorithm: sha256WithRSAEncryption
55:b0:03:8f:12:a3:34:19:c0:55:25:e2:cb:4e:7e:ee:80:ec:
a8:e5:93:3c:17:85:23:2e:d3:4b:d6:ca:dd:76:8b:55:2a:71:
b8:4d:26:55:7d:5c:ae:21:b6:5c:27:28:9a:00:41:ef:21:ad:
70:ac:da:2d:7c:3b:35:4d:8d:b4:c4:1d:74:ed:8a:43:1c:3c:
15:ee:61:d4:29:bd:75:25:78:44:5a:b1:7a:13:f6:7b:84:95:
88:bf:09:a4:98:54:7c:11:30:c3:62:75:cc:fc:3a:b8:72:b4:
6e:56:66:9b:e3:59:02:6f:87:a9:12:c9:91:65:92:e5:fe:03:
a3:34:e4:58:2f:d3:c6:bc:42:58:17:ad:5f:84:77:71:84:12:
96:08:57:08:76:98:e5:c2:34:31:1e:cf:f2:5c:96:a1:a6:bb:
7f:e7:81:29:bf:60:2e:75:b6:35:89:78:d9:d0:56:1d:ef:5d:
21:f1:ae:39:67:91:19:6c:bd:ae:4f:7c:72:d5:80:2f:3a:8d:
03:8b:f6:96:78:97:78:ca:23:54:3e:92:ba:42:52:aa:53:13:
28:50:b9:e2:75:43:34:84:40:17:e8:f2:b2:60:c3:11:82:93:
47:7f:d9:98:4f:74:81:4f:81:f9:b8:05:17:3b:b1:e5:40:82:
3e:42:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:04 2025 by rpki-client