Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f35684-6e69-42e2-8bd9-fcd1a07f79ba.roa
File: b7f35684-6e69-42e2-8bd9-fcd1a07f79ba.roa (raw, json)
Hash identifier: BL3PmK6CdLUYf0qAH8I2nVueRNYhCrl4tqOQreibTv4=
Subject key identifier: 29:0E:9F:C2:44:53:09:16:E6:A2:59:F2:59:68:E6:A8:29:57:6F:5C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C05F806666FE36F72A0EB268D2A787303034546
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f35684-6e69-42e2-8bd9-fcd1a07f79ba.roa
Signing time: Wed 19 Mar 2025 00:01:59 +0000
ROA not before: Wed 19 Mar 2025 00:01:59 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:05:f8:06:66:6f:e3:6f:72:a0:eb:26:8d:2a:78:73:03:03:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:01:59 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:95:70:7b:cc:8c:63:20:72:c8:23:e2:9c:
c0:9e:aa:3a:1b:a9:52:cc:95:c6:c8:34:0e:cd:90:
a8:04:b9:82:1e:6a:81:a5:37:65:e1:aa:3b:be:60:
3c:91:c1:b7:f0:ef:34:d5:a5:0b:78:74:d4:e1:93:
ac:c7:b7:5e:35:37:d8:97:7c:1b:14:c1:48:8a:f4:
fe:98:74:3f:e5:b7:71:47:e1:aa:ae:c4:9e:56:b8:
7b:cc:ca:85:40:e0:90:16:e8:c9:aa:b5:2d:3b:68:
2c:4b:97:24:a8:a9:5f:9f:31:23:02:ad:4b:e8:28:
74:b4:ab:09:4c:22:2c:43:34:1c:9f:1b:f0:bd:2e:
bd:eb:63:c0:03:77:cb:be:7c:43:1d:21:08:49:46:
1e:68:75:44:6c:5f:64:2b:1f:45:1c:cd:cb:c1:de:
63:55:68:8f:58:fc:e5:dd:49:50:59:08:c9:96:22:
e8:00:94:42:9a:6f:3c:5e:4b:30:28:1d:ab:48:82:
c6:9e:04:5a:ec:31:00:e1:f5:12:d5:6c:45:24:ba:
f5:1e:cf:f7:27:52:87:ae:e2:b4:cc:d4:15:25:58:
fe:eb:0e:7a:ba:f4:ec:5b:dc:52:d1:e7:c1:e8:37:
34:cc:99:1f:17:2d:94:6a:2b:ef:8b:3c:7e:79:fc:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:9F:C2:44:53:09:16:E6:A2:59:F2:59:68:E6:A8:29:57:6F:5C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f35684-6e69-42e2-8bd9-fcd1a07f79ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.130.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b0:fc:57:d3:f8:a3:d4:db:51:da:b5:96:88:33:74:e9:87:
b9:ee:8d:5d:32:4f:b8:db:c5:68:ae:6d:9d:5e:3c:0d:16:e1:
0b:4d:19:2d:33:67:82:e1:87:ae:c6:b3:2f:39:76:92:2c:68:
5a:cb:83:04:f4:81:79:9a:d0:fb:d1:f5:d6:a7:7e:33:61:ca:
71:d6:7b:74:d0:fa:6f:e7:f2:dd:e1:3b:6d:1e:f8:c8:02:5c:
6d:e6:df:02:a7:14:30:62:dc:96:4b:45:40:46:c2:2e:66:4b:
9e:c5:3d:f0:3f:0c:0a:67:9c:a2:1c:8c:4c:2d:3a:63:5d:e7:
7c:57:eb:38:2c:ed:4c:7f:32:bd:0d:bd:16:1d:1c:b2:3e:5e:
55:69:85:69:5d:ad:d2:ba:e5:7c:ad:76:d2:9f:32:84:c7:35:
7e:23:a7:49:94:ba:8a:20:4b:fb:69:ee:81:44:24:f1:40:ae:
18:6c:bd:83:55:a7:26:69:2d:ea:4a:46:d4:56:ac:a5:f9:f4:
ed:3f:de:77:30:94:44:ee:95:6d:a6:33:88:f8:1c:1c:8a:8a:
ce:6c:86:bf:e0:04:46:e7:ed:1b:b1:3b:6b:e6:28:bf:a4:d2:
f8:f0:1d:ad:9e:1f:d4:94:1f:28:4f:2e:69:ef:b2:85:06:1d:
a6:c2:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:17 2025 by rpki-client