Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa
File: 9a1b7496-b916-471e-be55-e180367c84ee.roa (raw, json)
Hash identifier: ilSPjd2GCBMOo38Auhr3jP0q34sYRqTRh7QFKnEDx7k=
Subject key identifier: B3:83:A5:E0:D1:62:F4:C4:0D:0A:C9:9C:1F:E7:0E:5D:F0:C2:20:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AE6E0780FBDEF54F786747D1D6B9616B9C68045
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa
Signing time: Fri 21 Mar 2025 00:10:26 +0000
ROA not before: Fri 21 Mar 2025 00:10:26 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.30.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e6:e0:78:0f:bd:ef:54:f7:86:74:7d:1d:6b:96:16:b9:c6:80:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:10:26 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:1e:54:4b:a0:e6:4e:b6:b2:f8:8d:9a:5a:
ea:30:2b:97:68:c5:32:11:94:b4:22:d7:c1:3b:3e:
c3:84:f3:11:41:3e:00:c1:20:42:88:41:b2:d8:62:
30:f3:13:59:d3:b2:b8:d3:c2:d6:69:56:14:6d:73:
85:bd:ab:29:47:83:2f:42:02:05:93:02:01:2c:97:
de:92:94:9a:dd:0c:97:ea:b6:58:84:e9:dd:8f:4b:
3c:a2:c0:31:1b:59:4e:13:0a:dd:1e:d7:25:cf:2d:
37:a5:2f:bb:a1:c3:a9:dd:34:42:c7:aa:63:dc:c6:
29:e0:14:bd:63:81:90:8e:51:38:6c:bb:80:5e:ca:
7b:86:54:69:6e:3d:64:53:5b:09:1d:8c:34:52:6a:
c8:b5:bb:96:d9:14:20:de:74:f6:23:29:3b:06:44:
5a:ae:38:db:b4:50:99:93:db:34:0e:16:f4:a0:3c:
02:97:99:52:d4:b2:88:fe:ef:c2:e5:de:49:e3:69:
72:ef:97:17:ef:cc:3c:4f:3e:f6:75:4a:8f:7a:2b:
1a:41:2e:80:8f:d2:07:c9:d1:72:cd:91:a0:5c:a9:
e7:48:7c:ca:be:e1:69:95:8c:4a:c9:69:ab:6e:2d:
cf:46:8a:3f:89:e7:d7:25:df:6e:32:b3:e5:ac:7d:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:83:A5:E0:D1:62:F4:C4:0D:0A:C9:9C:1F:E7:0E:5D:F0:C2:20:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:86:84:af:c6:c0:d7:d2:ac:28:df:b6:8f:d2:89:6a:96:88:
d5:32:76:63:55:77:03:fa:5d:3f:72:71:8e:0f:e9:0a:fd:b4:
9e:40:56:e0:bb:88:35:30:fa:a4:29:d9:bd:92:40:dd:ef:fa:
8a:11:c4:2d:44:57:48:e2:45:ed:8b:bc:db:45:6e:f0:26:6c:
1f:70:3a:c4:d9:d4:da:3b:2e:06:90:0d:3f:c5:cf:ec:0c:e2:
a2:75:5f:ec:75:85:e8:7d:5f:03:eb:49:4b:8b:0b:8f:c8:19:
3a:50:3b:55:03:59:ab:9d:0b:60:5e:d3:8c:a3:d8:f8:f0:9e:
22:10:cb:79:c7:4e:d9:5a:80:b2:cc:1f:a1:42:18:d3:ac:7b:
b6:e7:4a:88:65:43:3b:98:97:37:28:f3:41:c3:00:ad:ea:f4:
5b:aa:f5:0d:d2:ea:02:1e:ae:3f:de:d8:1a:58:5e:99:10:cd:
5d:ad:f5:92:ea:58:df:8d:f2:b2:26:45:85:16:e3:f9:8c:f7:
9a:bc:1a:83:01:a9:4c:bc:ea:91:72:dd:c6:34:d4:78:b8:42:
b0:dd:cb:c9:e6:52:0c:06:c6:16:11:65:f3:5e:d8:7d:83:9d:
10:c8:9a:bf:09:1b:4e:45:03:84:d8:67:f3:4e:6d:1c:3b:20:
10:36:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:36 2025 by rpki-client