Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5c1b-8121-4a01-905a-9948723914f0.roa
File: b78a5c1b-8121-4a01-905a-9948723914f0.roa (raw, json)
Hash identifier: NwQilYC/5B5eIuvBrWT9jUKVqS7v+ziBDOYrOI/e+IY=
Subject key identifier: E7:23:35:05:1B:D7:D5:1D:DA:93:49:D3:DA:20:AF:49:86:F6:63:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4CD20C6D861AEEF21930C0A8D09018601C8DD01B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5c1b-8121-4a01-905a-9948723914f0.roa
Signing time: Mon 24 Mar 2025 15:41:59 +0000
ROA not before: Mon 24 Mar 2025 15:41:59 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.226.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d2:0c:6d:86:1a:ee:f2:19:30:c0:a8:d0:90:18:60:1c:8d:d0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 24 15:41:59 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:25:b6:a0:40:e4:5a:b3:43:a3:cd:59:84:
6b:ff:0d:f7:82:57:c2:b6:57:55:4c:61:13:40:56:
2f:ed:0a:6a:b3:2a:1e:cb:2b:9b:55:86:db:ad:ec:
1b:26:00:a0:82:e7:70:2d:c0:32:0c:ae:c5:de:9a:
0c:70:5c:dc:fc:ef:80:08:4f:83:9f:3f:18:23:1b:
30:93:56:42:cb:f0:67:3d:d4:15:a4:c5:b1:9c:21:
0b:b7:d0:59:41:c8:78:4b:35:6e:a0:c9:c5:7e:a1:
b1:c2:6f:bd:f0:aa:b7:2a:27:68:d8:b8:f9:b1:b1:
54:48:8b:22:d9:89:9c:80:44:32:a5:18:10:a8:32:
d7:44:71:a1:6e:ef:24:4e:73:7d:91:54:d6:97:0f:
c5:84:9d:d7:73:dc:27:3d:c8:b0:d3:a8:f0:d7:9f:
78:9f:7c:9d:b0:e4:9e:32:36:a3:28:f9:54:15:c9:
81:61:3a:ee:1d:9b:d5:bc:57:3f:41:5f:13:d5:d8:
28:2e:7d:fd:43:14:0d:db:0b:57:8a:80:5d:bf:a7:
61:6c:61:60:26:57:05:63:a5:39:56:3a:e7:59:55:
5e:a5:ba:5f:71:b9:d9:4a:67:20:d4:7a:ab:25:d7:
a2:3f:63:f2:2d:08:00:53:53:c0:9f:bd:46:e9:cf:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:23:35:05:1B:D7:D5:1D:DA:93:49:D3:DA:20:AF:49:86:F6:63:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a5c1b-8121-4a01-905a-9948723914f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.224.0/23
Signature Algorithm: sha256WithRSAEncryption
84:45:6f:9d:03:a5:3f:3d:a9:65:c5:a4:d1:4e:86:e1:90:f5:
8d:3c:77:f4:84:7f:58:88:cf:09:77:88:ee:a5:26:be:96:ab:
06:36:11:1d:f6:14:99:85:fe:83:ca:8e:28:7b:7d:57:6b:a1:
af:7e:93:af:ab:ca:4d:37:e1:c2:ed:11:f0:88:72:04:99:cc:
6a:26:e4:d8:2b:34:47:48:85:2d:19:1f:7a:0b:32:9b:36:e4:
03:b3:58:8d:86:8b:05:3a:bd:56:fc:21:6c:89:18:af:b5:a1:
6e:c3:e9:91:51:28:a8:97:bc:2f:21:2d:de:7d:1e:2d:42:e0:
82:d4:69:e4:ee:7c:f0:80:17:38:e2:76:47:dc:e8:d5:4a:50:
2f:ba:75:ab:81:fc:4a:ad:14:3a:28:d0:c1:76:dd:f4:e6:37:
04:30:0a:14:ae:8e:82:98:f8:79:62:0b:31:19:b9:90:a9:68:
1a:27:13:17:78:4b:09:56:ab:f7:80:53:59:a5:86:cf:d5:ad:
f5:c7:dd:3f:23:74:d1:93:51:73:a7:e4:a3:73:bd:1a:87:28:
ee:cb:d3:54:a9:84:83:f4:a1:d5:7c:74:53:a6:c6:85:59:f4:
c5:8e:80:20:08:26:02:46:f7:85:ee:56:3d:44:34:04:bc:0f:
a2:3f:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:58 2025 by rpki-client