Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa
File: 8118a06a-b99e-4bfa-810e-228874f352d3.roa (raw, json)
Hash identifier: lsyAtfBxSlqqhbiBeSuuvFbilqwwZV/lLQW4o1Rd7bE=
Subject key identifier: B7:B6:2F:DF:54:3E:88:FB:75:0B:1C:28:13:22:71:D3:D3:98:1C:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 45C16F753F2F8E5297BAF162F48CFC9642FF383B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa
Signing time: Fri 21 Mar 2025 00:22:09 +0000
ROA not before: Fri 21 Mar 2025 00:22:09 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c1:6f:75:3f:2f:8e:52:97:ba:f1:62:f4:8c:fc:96:42:ff:38:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:22:09 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:05:49:b9:0e:6c:5b:e6:84:88:57:56:41:
46:e7:bc:9b:b4:42:28:13:57:68:89:21:fe:18:77:
cd:11:33:0d:49:2c:f6:0f:01:58:5f:2d:58:2f:68:
e0:37:54:0a:d6:28:83:e6:90:87:2e:fc:b4:63:50:
75:a0:82:00:f0:53:16:35:aa:e7:44:db:03:4e:e7:
85:75:c3:18:fa:b5:00:4d:2f:72:0d:65:9b:a8:c1:
85:cf:a3:d4:82:f7:c8:9c:06:34:c1:c8:a9:20:f1:
81:7b:4d:56:59:24:d0:7f:e9:21:e4:d1:1c:da:cb:
c8:67:58:d9:18:51:89:8c:07:95:e0:53:7f:0a:80:
66:20:b4:8d:2e:c7:d7:c0:4c:85:30:ac:c6:27:c9:
95:24:03:24:76:99:a8:fd:cd:e2:74:84:38:6a:96:
41:4a:03:3e:f6:bf:ae:0d:44:fa:e0:ff:44:26:90:
94:d8:e5:d9:94:cd:96:7b:e7:73:6d:d8:cd:2a:13:
62:47:7a:81:8c:1e:46:53:09:de:1b:33:e2:5e:3c:
23:43:ac:3e:3a:67:8a:3b:33:bc:cb:d7:13:ff:c8:
8e:b8:1b:4f:a8:20:49:c8:47:07:92:c2:91:63:0c:
b5:42:06:7c:f4:4c:91:b6:3d:fa:25:81:ea:a0:01:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:2F:DF:54:3E:88:FB:75:0B:1C:28:13:22:71:D3:D3:98:1C:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8118a06a-b99e-4bfa-810e-228874f352d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:3d:64:be:4b:ba:28:dd:09:1a:2c:31:d9:b7:02:db:2a:8e:
61:66:26:13:67:a6:45:e0:1d:ac:43:10:a9:ab:c0:03:4f:10:
f5:db:27:1e:e0:2f:c1:07:dd:6b:aa:38:f0:12:30:90:24:80:
6e:b9:98:d0:36:61:fa:6c:fe:42:f7:5a:fa:df:cc:86:b9:e2:
65:f9:31:b9:5c:12:5b:f2:43:54:ca:a7:bb:d6:5d:3b:b9:16:
90:31:a4:83:1d:20:d3:87:ba:23:41:60:30:c3:f3:28:d9:dc:
72:d1:48:55:e9:e4:68:e9:a3:c1:d1:cf:a3:93:9d:04:ed:11:
1e:bc:34:13:26:c1:eb:19:c9:e0:08:ac:08:8d:3b:43:ad:0a:
f2:a7:d2:3f:27:9f:16:c9:59:9f:49:c8:d7:57:3a:dd:7e:90:
5f:94:fd:14:bb:5c:9e:ec:49:16:4b:a8:08:94:ca:cb:41:31:
93:4a:b5:49:43:ce:46:36:e3:52:e8:63:65:db:48:9c:44:5b:
7d:e8:49:8c:ff:05:77:36:a4:3e:1f:bf:88:c9:1e:2e:62:c6:
4d:16:b2:e5:46:0b:0d:f9:b6:e9:c4:5b:24:12:5d:2c:2f:2a:
83:8c:63:f7:28:22:b9:77:d3:be:dc:63:ec:a3:f8:85:47:58:
18:3b:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:58 2025 by rpki-client