Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92ffd9a-1a02-404a-95c7-3fe0a7852a38.roa
File: d92ffd9a-1a02-404a-95c7-3fe0a7852a38.roa (raw, json)
Hash identifier: S83hvx3P1yvnnoK/IQyEN+ax9s6OKJb+Jkh4R7YH0NU=
Subject key identifier: C3:3B:7B:B5:75:98:A3:9A:AD:9E:32:2F:E9:C6:44:36:EF:6B:AE:21
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 105E8D1310189B42CE4D457CE57EBB1C59083E5A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92ffd9a-1a02-404a-95c7-3fe0a7852a38.roa
Signing time: Mon 24 Mar 2025 15:20:13 +0000
ROA not before: Mon 24 Mar 2025 15:20:13 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 109.71.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5e:8d:13:10:18:9b:42:ce:4d:45:7c:e5:7e:bb:1c:59:08:3e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 24 15:20:13 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:0e:97:6a:d7:3f:2d:35:9e:86:2e:e9:5c:
d5:32:4a:9f:02:da:74:2c:d0:e7:4a:ec:9a:32:87:
96:e7:4a:0c:e0:05:d3:51:bc:4d:d4:1b:b6:aa:59:
62:e0:26:86:0e:c9:b2:27:9e:0e:73:a9:4b:15:49:
67:c0:05:9b:6d:5c:2f:aa:5b:70:60:68:8d:6c:46:
3a:4a:9d:c4:1f:12:52:be:b1:cb:f6:ec:bf:22:e2:
be:f3:2c:6b:65:af:07:57:57:9e:ed:1a:f2:d4:c2:
2a:00:31:fb:42:cc:25:22:99:1f:6a:2d:01:3e:a0:
23:7e:c7:c0:69:0a:ff:e0:a6:a5:49:a7:d7:30:5d:
d8:82:d2:c2:4b:e2:46:fb:cd:28:37:26:f0:8d:a6:
ce:86:c5:9c:1b:92:60:39:09:95:eb:de:7e:b0:49:
6e:9a:ed:47:7f:b0:aa:3d:ae:e9:b9:c3:f1:a9:81:
52:0f:9d:4e:ee:e7:37:4c:96:dc:1b:62:cc:cb:f0:
61:13:96:7b:c4:44:2d:18:28:d9:08:f8:a5:d4:5f:
29:ac:08:14:f8:b6:85:6b:11:ae:9e:a1:af:69:fc:
28:6c:8f:c1:f6:5e:80:d8:c3:45:37:1a:7b:be:f1:
f2:40:df:b1:d3:b0:ed:6a:66:61:9f:ad:a3:3d:a0:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:7B:B5:75:98:A3:9A:AD:9E:32:2F:E9:C6:44:36:EF:6B:AE:21
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92ffd9a-1a02-404a-95c7-3fe0a7852a38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5d:43:5d:22:3d:1a:8f:8d:08:8d:18:fd:87:5d:e7:34:35:
0b:68:0e:b4:24:b1:48:61:cd:1d:eb:1a:c9:27:c6:bf:09:99:
41:3d:e1:af:31:bb:ed:95:c2:4f:88:3a:6b:d1:4e:74:a8:a4:
64:94:9d:58:e8:5a:22:d6:a8:c4:8c:0a:34:ae:5f:d9:27:ad:
01:af:92:0f:0b:ff:db:e2:97:a2:f1:43:1e:80:b7:e2:31:84:
c0:c7:aa:11:90:81:af:7f:9a:04:56:cb:ca:a6:ab:0f:63:35:
27:81:68:6e:27:26:97:21:a7:a2:74:c7:ce:6b:f2:65:81:b5:
4f:5b:29:f8:03:7a:a2:e8:d4:b4:d8:1b:a9:c4:41:bd:45:19:
25:26:95:68:0e:4b:fa:d7:65:70:12:35:27:30:60:5d:ba:c2:
9b:d3:91:4f:54:65:db:a8:9d:b3:ad:b6:b3:ff:fe:5b:73:88:
bb:e4:c7:6d:a4:e3:97:37:58:30:0f:f2:27:dc:0b:b8:1e:9c:
6f:6f:0e:7f:9d:8c:05:19:13:4a:8a:1b:90:74:57:3f:46:60:
3a:6c:e2:7f:e6:03:87:5e:e8:02:03:1b:f0:e3:e3:ed:c0:c9:
04:28:ca:00:04:3d:57:1b:16:fd:22:18:ed:fe:01:26:75:0c:
35:8a:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:51 2025 by rpki-client