Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa
File: f3593bc6-497b-4beb-8e27-47d654b88fdb.roa (raw, json)
Hash identifier: 7ea+TyM1BUUOH23ZfAfKY0U7q5tEO4wxHn/uWsStnwI=
Subject key identifier: 25:27:DF:3C:12:58:89:63:49:B9:CD:6E:8A:AB:E2:E2:52:9D:B0:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DDBA38863DBC77F30284FF516E927994D428AAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa
Signing time: Fri 21 Mar 2025 00:20:19 +0000
ROA not before: Fri 21 Mar 2025 00:20:19 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 89.48.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:db:a3:88:63:db:c7:7f:30:28:4f:f5:16:e9:27:99:4d:42:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:20:19 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:fd:f6:5d:3f:26:a0:74:52:8e:e5:1c:57:
eb:65:fe:a1:a7:ce:d5:2d:e3:94:4d:b3:2c:46:cf:
c3:16:36:27:b4:48:20:82:b9:f8:33:69:e7:e1:81:
42:80:c1:b0:ab:14:3c:20:89:a0:4c:5e:f5:a5:74:
fa:18:ce:fa:1b:93:c5:48:25:15:2f:fd:b9:ee:2a:
d0:19:55:94:fb:7c:ee:13:b6:f7:cb:de:15:cb:a9:
48:18:75:2a:bb:02:27:b0:51:ec:7e:43:e9:c1:ef:
7c:99:19:dd:21:80:a0:e3:9d:e8:c0:30:f2:63:f1:
58:be:a3:75:82:a1:2b:40:4c:6b:cd:0f:18:5a:e1:
12:4c:74:84:ac:71:c7:da:d0:e5:3f:26:4b:42:20:
bf:90:34:22:1f:e7:f3:dc:b5:11:20:dd:0f:de:6d:
07:14:d5:34:12:72:c1:28:d7:bb:b6:53:d0:cc:b9:
a4:8b:25:b8:8f:95:3f:27:f9:9d:86:d6:10:af:fd:
1d:46:55:eb:a7:f9:54:ed:25:63:3a:4c:dc:3f:1a:
c4:bc:5a:c3:3a:95:b0:f3:54:1a:a4:41:0d:88:08:
08:b2:2e:a1:9b:76:18:41:f1:67:4a:e1:fb:a3:a3:
f7:57:94:4b:97:e8:e6:dc:d1:1b:ed:ca:57:a3:f1:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:DF:3C:12:58:89:63:49:B9:CD:6E:8A:AB:E2:E2:52:9D:B0:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.48.0.0/13
Signature Algorithm: sha256WithRSAEncryption
ad:5b:ed:84:4c:a0:20:9d:4c:e9:12:f2:80:87:e9:1e:b2:2a:
a8:62:4f:34:40:63:b7:18:32:74:91:e3:91:a2:da:c6:e3:c6:
8a:c5:80:54:20:36:6b:89:a3:d8:78:01:4a:a1:e8:70:80:fa:
e2:67:35:93:aa:ac:67:40:81:b7:c3:25:a7:c2:f3:e9:72:8a:
af:89:dc:79:3a:bf:4d:6a:22:3b:d3:ee:0a:0a:66:18:5a:0c:
a6:31:55:97:9e:b7:d1:33:53:6d:96:d1:c2:57:52:9d:64:59:
34:e8:5b:b2:98:7e:bc:a3:a5:af:da:b3:04:5a:39:dd:7d:ac:
5e:69:bb:21:6a:b8:5c:e3:20:66:79:e5:bb:10:72:15:27:2a:
5e:8a:4d:4e:56:2f:d5:68:b9:dc:e8:ab:76:e2:8c:d9:63:df:
c9:97:6b:9b:6e:21:28:78:28:6c:05:30:01:bf:26:16:d0:5a:
aa:35:ea:7e:0a:a9:a2:31:63:ea:83:43:6e:39:c1:8a:d6:67:
3b:84:24:fc:ca:c2:9e:bb:2c:52:2c:a8:47:4f:d8:22:e5:db:
6a:b9:82:dd:4c:f1:c2:e9:f9:e3:79:85:2b:60:0d:b7:72:94:
a5:4d:5e:c5:41:aa:a3:73:cd:63:04:79:97:ba:9a:f7:88:cc:
00:d5:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:39 2025 by rpki-client