Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf58c506-215e-438f-baee-9c4a03ed9a7f.roa
File: cf58c506-215e-438f-baee-9c4a03ed9a7f.roa (raw, json)
Hash identifier: QOYxN1YdvY57DAKu2xnA0Qc56Ip9fnVJ9AiM6dMZXR8=
Subject key identifier: A9:95:8B:86:03:8D:A9:EE:5A:0D:93:32:CE:8D:26:B7:C1:EA:92:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5442FFE72959E0C403773D609C5A39AF87EB1C41
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf58c506-215e-438f-baee-9c4a03ed9a7f.roa
Signing time: Wed 19 Mar 2025 00:11:58 +0000
ROA not before: Wed 19 Mar 2025 00:11:58 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 184.72.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:42:ff:e7:29:59:e0:c4:03:77:3d:60:9c:5a:39:af:87:eb:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 19 00:11:58 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:e6:f5:91:f3:69:05:28:bd:e6:ef:20:fd:
b4:24:05:20:ab:04:5c:1c:d2:8d:18:7c:6d:a9:7a:
26:24:fa:e6:de:32:03:57:e5:ba:4c:16:6b:80:28:
75:ff:4c:a8:ad:c2:88:e1:75:20:f3:27:fe:b3:e0:
64:f7:8b:8a:f7:b2:75:85:cc:39:c6:a6:94:df:ba:
0a:33:63:65:4f:b5:8d:6d:e9:07:8e:28:79:2e:4d:
38:5c:b2:83:67:cb:47:6a:23:76:18:1b:bf:ed:54:
64:7b:67:4d:3f:30:ef:12:34:01:b6:dc:89:39:32:
4a:27:fe:d4:16:50:47:4a:9f:14:54:f5:ec:40:a8:
6a:14:59:ec:19:37:09:1d:7e:d1:46:b8:52:26:68:
1e:a1:82:3d:f7:7d:b6:5a:d5:5b:4d:04:00:68:ac:
d2:d0:98:c4:71:2a:19:ab:d6:99:f4:cb:dc:1d:f1:
ba:f5:da:dd:47:4d:f5:97:27:bb:6c:62:1c:2a:33:
4e:e7:e8:fe:4f:3c:4b:fa:cd:03:4b:cd:56:a7:1c:
9d:c4:4c:24:b3:63:ac:d7:4e:98:42:71:8a:13:af:
f0:32:2e:8e:2b:08:71:90:62:4f:92:9b:1d:83:dd:
29:d5:1a:1c:44:b6:f9:b7:df:5c:bf:6f:e3:77:a8:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:8B:86:03:8D:A9:EE:5A:0D:93:32:CE:8D:26:B7:C1:EA:92:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf58c506-215e-438f-baee-9c4a03ed9a7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.208.0/21
Signature Algorithm: sha256WithRSAEncryption
92:5b:56:c2:53:f4:3d:c2:49:38:23:94:2e:64:81:78:18:f2:
45:63:74:52:c4:c7:eb:eb:01:a1:ee:7e:31:d5:b4:d3:a9:d6:
65:d8:e6:cf:13:b6:27:15:df:8b:36:db:dc:26:40:1d:bf:95:
fc:37:a7:7f:7e:ce:86:66:ea:3c:6f:63:fd:31:3a:38:bf:c8:
27:d3:9b:41:9b:eb:18:de:e5:99:4b:91:c6:a1:fe:ab:12:8f:
c4:12:4c:4f:48:51:85:b7:e1:c2:d2:e7:b9:36:c9:d3:1c:fa:
b1:90:a7:0a:87:67:b6:be:dd:73:da:09:72:35:bf:97:45:3d:
78:54:77:e1:22:6d:e6:75:4f:0e:59:6a:14:15:a7:cc:b6:7b:
79:62:70:71:a1:b6:19:fa:19:8c:8b:07:11:e6:13:cf:22:3d:
3b:21:64:ce:1a:4c:83:7d:81:2b:65:63:49:c5:8f:c8:b8:41:
22:24:b6:e6:ca:b0:11:4d:8f:a2:a6:72:4a:a0:2c:54:82:af:
48:35:ae:22:06:59:6f:6a:a8:e4:dd:2a:df:48:de:90:86:b8:
20:23:59:5b:74:1c:b0:2b:2f:48:73:dd:1a:6c:4a:96:7f:e5:
e1:a1:ea:cb:b8:69:42:36:e5:8b:11:ff:9c:42:02:cb:30:a5:
bc:4a:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:04 2025 by rpki-client