Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa
File: 88f2ff63-7659-498d-b994-ed526db12b18.roa (raw, json)
Hash identifier: OW3ITHjc4sGJO1XiihZryGbXBx9jTk4YHAuDH2NGW9s=
Subject key identifier: 86:F9:F2:BB:35:24:D1:29:0C:66:52:E8:76:73:C9:AF:80:E2:70:98
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A401D000B82F634FBEF59B7317C5E49F83C2F96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa
Signing time: Sat 15 Mar 2025 00:41:11 +0000
ROA not before: Sat 15 Mar 2025 00:41:11 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:40:1d:00:0b:82:f6:34:fb:ef:59:b7:31:7c:5e:49:f8:3c:2f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:41:11 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:08:15:c9:0b:70:84:a4:79:d2:c0:2e:dd:
7e:60:e4:9d:c0:37:77:ca:ba:ea:4e:cc:5e:64:bc:
72:b3:56:51:df:5b:ab:f8:59:cd:41:6f:75:08:c5:
fd:8a:09:d6:86:92:89:49:dc:32:9a:99:0e:8d:c0:
72:11:7d:9d:79:2e:f6:ed:7f:ce:80:07:69:83:4f:
f1:a1:10:8e:8d:c2:dc:6a:df:14:d8:a4:7c:0f:87:
1b:8c:c7:b8:75:a6:73:e0:78:a2:27:39:1f:7a:14:
ca:a4:2c:92:be:ae:48:73:61:04:1a:8b:e3:01:06:
63:a5:5f:22:87:65:42:34:9d:b5:14:58:be:0f:d0:
a1:fa:b5:e7:36:d8:8b:5a:b3:e2:4a:c2:81:41:ab:
07:15:a0:48:f2:fc:5f:5d:c9:ff:a1:44:96:64:f6:
56:cd:e9:fe:81:e6:17:3f:5e:52:f1:3e:60:bf:24:
29:e8:17:8c:98:c8:a7:29:72:40:30:1d:a3:7e:0b:
b0:44:17:67:f3:6b:dc:91:02:3e:19:23:da:ca:0a:
af:79:00:9a:2f:a7:74:87:c4:3d:bd:c2:95:28:b9:
91:da:ba:05:a3:17:b6:a2:15:5b:ea:31:e1:5c:25:
7a:3a:cb:b8:89:4c:a5:3d:a0:2b:a0:53:3c:e2:d1:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:F2:BB:35:24:D1:29:0C:66:52:E8:76:73:C9:AF:80:E2:70:98
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:62:ea:77:d7:62:d6:ed:dd:b3:4d:69:9a:4d:10:e3:f9:67:
e5:4e:e6:5c:b3:8d:0c:02:a9:9a:99:c2:35:f9:48:3d:5c:4a:
0e:34:60:7e:66:c7:2b:59:41:31:bc:da:b8:26:db:80:f9:91:
d0:93:25:0b:95:26:74:36:fd:db:49:36:ce:bc:8f:0c:82:e3:
53:38:ed:ae:2c:64:fe:b1:5a:c1:90:52:2f:b9:64:12:83:82:
51:ed:dc:35:c2:ed:8a:63:e8:18:bf:5f:d6:75:e1:de:80:1a:
11:f2:df:ff:62:fe:59:6c:e5:1b:01:ef:46:5d:99:9c:70:78:
40:75:7b:de:45:72:e2:3c:36:eb:4d:01:8b:e5:08:31:10:9e:
df:bf:4b:62:a7:4f:1c:5d:b0:4c:4b:0c:fc:ef:31:4b:c6:9c:
b7:1c:1b:43:a6:b8:4a:e8:aa:2c:f9:0a:63:db:14:9f:af:63:
44:41:28:c2:4a:dc:33:4f:2a:dc:e7:c2:35:d7:c6:61:99:83:
bf:d1:b7:95:f6:64:d4:90:74:88:65:2a:1b:04:e1:53:8f:a5:
fa:c8:ce:db:d4:15:23:cc:af:cf:32:7d:23:2c:ba:4a:45:10:
23:54:86:e4:8e:af:c4:bd:54:78:93:ca:3b:4d:fc:78:a8:ca:
8f:28:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:26:39 2025 by rpki-client