Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3455e8e-f699-45e7-a79a-1ce3d0e57b79.roa
File: b3455e8e-f699-45e7-a79a-1ce3d0e57b79.roa (raw, json)
Hash identifier: ojj8FE9e+Aaek8A0UEjUXpiHfq+ZQGbB2+sA5s7YOWk=
Subject key identifier: FD:C2:4F:31:1B:E5:DB:06:57:C6:49:77:B8:36:36:68:21:F0:3D:29
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75CA8061F6A97BDA8DED934B3F23B234253C4536
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3455e8e-f699-45e7-a79a-1ce3d0e57b79.roa
Signing time: Tue 04 Mar 2025 16:10:16 +0000
ROA not before: Tue 04 Mar 2025 16:10:16 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 208.110.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ca:80:61:f6:a9:7b:da:8d:ed:93:4b:3f:23:b2:34:25:3c:45:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 16:10:16 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:9c:2e:ee:d6:a3:75:6c:c7:86:5a:71:e9:
67:c4:2b:fc:03:82:2a:46:26:f3:0d:42:a5:8d:c2:
4b:5c:4f:5b:ba:b6:f8:32:e7:4f:11:92:91:4e:39:
05:46:69:bd:e3:68:dd:09:28:87:a9:24:06:1c:67:
ce:bd:ca:10:58:b9:62:7b:0f:00:db:ff:68:50:f3:
35:5d:7b:22:da:65:13:33:fd:93:2d:fb:3f:e9:55:
f3:4e:ed:07:f4:28:77:56:dd:d8:6d:68:13:11:ed:
62:4d:e1:84:c3:0e:bb:be:8a:28:28:e7:4f:25:a9:
d2:4c:43:2e:a6:30:58:81:38:18:22:58:ba:c0:16:
d0:d6:13:c1:c7:f4:04:de:8f:d5:22:50:27:a4:ef:
a5:d1:b7:87:0b:5e:4a:92:54:7d:9e:62:b6:95:8f:
6d:d2:a2:e6:8a:49:6f:11:82:77:9a:08:a0:c3:eb:
d0:76:9c:3c:9d:b8:e8:f4:28:27:ae:59:7d:5a:be:
e3:d4:8c:f3:37:eb:1f:ff:1d:20:21:cb:78:ed:36:
84:ef:1d:10:fd:57:47:58:4e:24:82:37:63:7b:c9:
87:47:ed:f2:93:0f:21:f7:ce:c3:7f:7a:df:1f:fa:
25:a2:ac:1f:f8:10:b9:e6:75:72:0d:87:e5:34:49:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C2:4F:31:1B:E5:DB:06:57:C6:49:77:B8:36:36:68:21:F0:3D:29
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3455e8e-f699-45e7-a79a-1ce3d0e57b79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.110.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:a3:79:8d:63:76:61:cd:0e:b8:c2:91:82:ce:fd:f5:2f:fd:
d4:29:2d:3d:9a:fb:fa:6c:b1:9a:9f:53:af:29:ba:07:cc:a3:
a9:4c:65:0f:fd:9b:ab:7c:f4:ab:bf:6c:6a:b5:21:86:38:b4:
59:5b:87:df:ce:01:fb:24:4a:24:9f:e2:6e:cc:54:c0:f6:08:
c6:3b:75:fc:d7:43:f8:c4:ee:a6:03:02:c9:57:27:2f:7e:a0:
c6:b9:1d:f4:d7:a7:cb:0d:6e:5d:92:87:74:dc:fa:07:5e:a7:
7e:7b:fd:c4:12:4f:4e:52:88:de:db:ec:64:be:2f:0c:6a:44:
c0:cf:fc:a1:96:1f:04:ee:6d:76:8d:02:9e:13:ae:95:da:81:
bd:bc:cc:55:56:4a:66:22:d3:71:f6:87:2c:a9:ab:9d:ca:52:
e2:f5:64:1c:dd:2e:40:c7:85:66:03:06:8b:24:37:20:f0:1a:
e3:40:02:9b:7b:fc:f6:7d:da:5f:7b:68:f8:56:8d:91:ca:79:
a2:24:b2:ae:b2:e5:15:f3:b6:dc:95:78:c6:0e:b1:92:b2:07:
0e:eb:11:2d:78:9b:1e:0a:a6:67:24:0a:89:f1:7f:b0:dc:33:
8a:7c:24:fd:64:87:e7:26:8a:4d:72:9b:f5:ef:0f:dc:f4:bf:
4c:9b:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:27 2025 by rpki-client