Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa
File: be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa (raw, json)
Hash identifier: M/uaW/hZKdEuHmbHMgv5mRisbf+JzlaSI/RHSTBnTW4=
Subject key identifier: D5:80:A1:1D:BC:0C:43:15:16:A8:23:3E:F1:16:A3:C0:19:51:38:15
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DEBE7B53B25D839EED053DDA9C147F971950BFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa
Signing time: Wed 19 Mar 2025 00:21:19 +0000
ROA not before: Wed 19 Mar 2025 00:21:19 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:eb:e7:b5:3b:25:d8:39:ee:d0:53:dd:a9:c1:47:f9:71:95:0b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:21:19 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:46:10:e3:fe:44:88:5a:aa:ab:0e:73:76:
08:b3:ed:84:c9:37:7b:f9:40:fc:81:ae:2f:3c:a7:
85:d0:c3:27:08:80:53:43:13:f9:40:61:4c:f0:ba:
75:63:2a:64:3d:dc:5b:0e:59:f2:ac:57:ba:95:2a:
f5:88:d7:6a:b5:5b:01:23:62:98:5c:b6:8f:74:60:
85:83:8b:fb:be:d4:aa:2f:64:60:5e:5e:47:34:6a:
bd:2b:44:75:45:d2:49:d4:aa:6e:a7:12:7e:38:96:
42:13:31:27:8f:0a:f1:55:49:02:36:6a:68:5e:98:
27:48:f6:1c:d3:3a:f8:5d:02:02:7b:9d:e8:43:1c:
58:fb:0d:14:a9:1f:90:53:17:56:02:3f:15:3a:e3:
9c:28:5e:9a:25:6c:6f:81:7d:00:45:97:fc:46:17:
cb:b8:bc:91:5f:26:4b:a4:18:40:31:86:75:5a:e7:
d9:ed:33:43:f8:bd:8f:4d:ea:96:cf:cf:2d:d7:ca:
ec:92:f1:d2:86:da:7b:12:3e:80:e9:40:a7:fc:fb:
aa:7c:ba:4e:2b:ed:b0:e6:d0:a4:31:02:87:04:7a:
16:f8:8e:0e:f5:8f:bb:f8:7d:40:7e:fe:8f:c0:69:
65:4a:f6:3d:92:28:3f:dc:14:ac:6f:45:7c:3b:39:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:A1:1D:BC:0C:43:15:16:A8:23:3E:F1:16:A3:C0:19:51:38:15
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:ee:4f:0c:e0:d2:a3:f2:ca:34:8b:2c:b9:cd:ef:19:30:03:
2c:9d:af:f7:2e:74:12:e7:32:38:a8:4b:99:26:6f:40:e7:e9:
33:b0:46:e2:78:d2:be:2d:d4:a8:4a:0d:41:2f:0f:a6:0f:83:
0f:ba:dc:e3:c7:19:b4:f6:e2:36:1c:ad:8b:e6:19:b6:3a:4a:
42:1e:80:72:39:6a:f9:e9:0b:ca:56:67:59:b6:6b:9d:43:2a:
96:4b:84:b2:60:02:7d:6e:f3:e9:2f:52:90:a3:ab:d0:58:e1:
a2:04:f4:05:56:f1:84:66:8b:d9:01:8f:e6:32:5d:a3:40:2e:
e6:61:7a:87:4d:4e:1f:65:7e:b0:cf:eb:1c:11:ce:10:1b:ac:
f7:6c:6b:a6:e8:62:fc:6f:51:29:ef:49:1b:06:a5:06:54:f4:
35:1c:6f:5e:95:4e:3f:5c:9d:91:08:78:d0:ac:ed:5e:77:ba:
55:fe:73:bb:b0:58:ad:a4:31:e8:17:92:ba:29:d5:e5:9a:5a:
90:1d:14:e4:99:51:16:17:ef:19:70:73:71:e6:1d:4e:3a:0b:
ae:bd:b2:c9:5e:6f:ce:d9:4c:7b:54:13:42:1b:f0:9e:eb:51:
c5:e5:85:0c:81:82:b0:a6:13:41:5c:c3:3f:51:af:6d:57:e5:
8d:d4:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:49 2025 by rpki-client