Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa
File: 68dcad37-18c1-468c-aca3-9e34ef1240c2.roa (raw, json)
Hash identifier: QVysLxVKYwVELgV1/eM6j2yVH2IC0ORa3QnDjvOhgrM=
Subject key identifier: FB:B0:5A:CC:12:96:2D:37:0F:0D:D4:07:A7:77:82:21:B6:5C:3E:B5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 050542509FFFB842F6ADFA657AC8A547CAD5F708
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa
Signing time: Sat 29 Mar 2025 00:31:27 +0000
ROA not before: Sat 29 Mar 2025 00:31:27 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 149.128.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:05:42:50:9f:ff:b8:42:f6:ad:fa:65:7a:c8:a5:47:ca:d5:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:31:27 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:f0:01:ca:4d:76:6c:66:c5:d1:38:6a:ea:
84:52:2b:11:15:60:22:7c:e1:5b:48:80:ff:53:65:
a0:15:fb:70:a3:4f:54:b6:1a:2a:00:8c:5c:be:81:
78:34:46:19:12:c9:b0:90:ce:39:dc:6c:7f:ac:08:
4b:cc:11:8c:d1:a5:62:81:06:44:2e:67:9d:49:fa:
81:81:74:a7:98:88:a7:dc:a1:bc:fd:c4:35:d1:65:
39:9b:51:9b:13:1c:1a:93:06:ef:ff:78:f1:4c:df:
cf:de:bf:14:cd:5e:94:fb:60:2d:f0:32:2c:ff:7e:
6f:5c:17:0f:15:ef:99:b2:8b:5b:8b:67:f1:b3:7b:
9f:85:49:62:2e:56:de:b7:dd:30:df:46:1a:54:c9:
6b:35:59:45:b1:83:ed:24:75:35:4a:35:40:72:73:
56:9c:95:d0:8c:36:49:0f:cd:15:9f:0e:58:75:eb:
78:93:37:2e:80:37:d5:ee:46:28:cf:94:dc:8e:ef:
32:7c:ca:d8:9c:44:ba:09:17:89:11:bb:b7:26:2d:
4c:95:eb:d9:74:7b:90:af:3b:fa:9b:1d:5e:c6:bb:
d0:32:49:b6:be:43:62:0d:a2:1e:fe:ed:4e:d9:7d:
a4:15:6e:e7:11:1a:74:0b:74:77:87:fe:9d:17:dd:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:5A:CC:12:96:2D:37:0F:0D:D4:07:A7:77:82:21:B6:5C:3E:B5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.128.32.0/19
Signature Algorithm: sha256WithRSAEncryption
cd:ed:19:ed:c9:de:0d:47:18:f2:c2:e7:5f:bb:6e:d8:f1:fc:
62:0c:c0:c7:de:96:f7:e2:b0:32:16:36:fa:ca:5c:b5:0f:e8:
96:1d:d9:2d:4c:8f:bc:ba:68:77:82:be:65:b6:08:91:97:b6:
4d:08:2c:71:46:cc:de:55:60:19:4f:29:c5:f1:3b:20:d6:f9:
f2:b2:ae:4d:87:72:98:7a:98:08:9e:2c:4f:15:54:5d:3f:82:
ad:9b:52:35:15:bc:bc:ef:e3:1a:01:83:70:2f:b8:51:85:3a:
5a:10:ea:23:21:ab:ce:3d:29:41:c0:0a:73:08:d3:a2:9d:9e:
2e:97:9a:1e:b9:fe:ec:ae:76:a5:0f:9a:ef:d9:7f:79:f8:e5:
ef:14:32:73:c5:91:ef:05:f5:08:d1:2f:69:4d:70:1d:e6:e5:
1c:7a:55:70:ac:37:3e:32:ac:dd:77:25:b5:20:2e:2c:d0:09:
84:e1:87:73:bb:98:eb:d2:86:57:6d:57:39:ce:b5:73:ce:56:
cb:ad:71:a7:3d:90:d3:98:f8:db:58:b1:4a:af:89:59:60:19:
c5:f7:ae:f1:95:b5:0f:ff:54:86:1f:6c:ac:83:44:4e:24:50:
ee:02:68:70:dd:9f:eb:09:2a:0b:86:d1:42:4b:e2:35:49:2f:
af:e1:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:27 2025 by rpki-client