Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d687e7a1-6ed2-4234-955c-5cf33207f3d4.roa
File: d687e7a1-6ed2-4234-955c-5cf33207f3d4.roa (raw, json)
Hash identifier: 12xD8wZXOttVssOcadqoRDVJ3Tp/gQv1MrXu2Wtfy6s=
Subject key identifier: A6:95:5A:13:80:6B:18:87:56:85:15:05:1B:4F:95:B1:7C:A2:0C:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6056A6F8ED3107531ED218DB878456EDFCC49C47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d687e7a1-6ed2-4234-955c-5cf33207f3d4.roa
Signing time: Mon 10 Mar 2025 15:01:32 +0000
ROA not before: Mon 10 Mar 2025 15:01:32 +0000
ROA not after: Mon 14 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 147.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:56:a6:f8:ed:31:07:53:1e:d2:18:db:87:84:56:ed:fc:c4:9c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 10 15:01:32 2025 GMT
Not After : Apr 14 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:e7:1d:30:e3:43:e7:06:cf:2c:2f:35:71:
ca:7d:60:58:91:68:75:97:41:c0:cf:58:96:da:8a:
cd:d6:70:06:d9:d1:dd:41:bc:b1:7a:90:4e:b1:f7:
0d:02:f0:54:c1:f9:dd:36:2c:b2:a4:b7:ef:f2:12:
5a:d9:d3:db:b3:cf:a4:bb:34:2c:50:cd:1c:18:4d:
e7:a9:f7:f2:30:bb:8d:78:d6:fe:f8:7c:2f:b9:3c:
d4:b9:b6:d9:4c:60:b3:60:43:ea:9d:39:8a:ad:a1:
ac:4a:25:41:b3:3f:50:15:e1:33:de:55:44:1f:25:
b0:fe:fa:6c:c6:9e:57:6d:d2:f7:70:cb:40:6c:c1:
f6:e0:96:de:eb:0f:6c:3c:fd:1b:aa:8d:64:6e:99:
f5:25:6b:b4:3a:46:f6:ba:1a:62:36:a8:27:fe:f0:
47:b0:ea:09:d7:9d:17:52:3a:86:dd:1a:5a:c4:cf:
11:93:f4:48:41:fa:f2:99:11:78:6a:69:48:97:dd:
2f:d2:65:d8:79:ec:84:67:cc:fe:a3:4a:52:83:43:
c8:ad:1f:b4:d3:d0:4b:9b:aa:35:07:f1:75:71:66:
02:63:f3:8a:e1:7b:c6:b0:88:db:65:75:b5:42:0f:
fc:38:d9:a2:0d:13:53:2b:80:97:18:61:f1:23:6d:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:5A:13:80:6B:18:87:56:85:15:05:1B:4F:95:B1:7C:A2:0C:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d687e7a1-6ed2-4234-955c-5cf33207f3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:19:65:39:11:45:f1:77:0a:26:5a:24:22:c2:cb:ef:70:0a:
c8:35:ef:8e:a5:44:6b:f5:4e:7f:e4:98:c7:9a:dd:10:9e:0a:
6e:9e:51:85:f4:f0:4b:67:25:40:55:a3:e6:8b:52:74:d8:17:
20:dc:fd:80:3f:52:f0:ce:34:5c:9c:76:7f:1a:63:46:0c:fb:
80:57:a6:9c:b5:d7:8a:02:37:d4:29:05:4e:d0:ac:99:56:c2:
49:39:fe:46:67:1a:21:4d:84:51:87:3a:ce:7f:eb:f7:fd:fa:
77:30:b8:8e:2f:af:11:14:25:60:19:87:ce:02:47:4d:1a:fd:
24:10:a7:a5:95:a7:cb:44:fc:72:a6:0f:74:db:17:68:9b:b6:
7d:b4:8c:dc:f8:1f:0a:46:86:d0:e2:32:c2:76:e2:85:21:d4:
af:cb:85:bd:fc:00:be:a5:cc:1d:cf:97:2c:f5:23:c8:48:5c:
20:bf:df:bf:95:9b:b2:e4:5f:28:5d:86:4b:12:03:58:c8:97:
56:28:99:49:39:e2:6f:13:d4:cd:85:20:b9:83:eb:1c:53:34:
39:05:66:1e:cd:fd:e9:72:23:00:cf:e3:8b:55:93:90:d0:a8:
9c:6e:5e:e9:70:35:6f:cf:d8:dc:72:6b:17:37:97:4a:5f:06:
b9:7b:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:52 2025 by rpki-client