Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1732ff16-324b-4846-896d-bea216d30a89.roa
File: 1732ff16-324b-4846-896d-bea216d30a89.roa (raw, json)
Hash identifier: oCbicvgfL+qvj12ODFRcygJILOOnmmNRYMQewMNAmKA=
Subject key identifier: F8:9E:66:AB:63:B0:A5:66:BE:FE:7B:65:69:FF:66:2F:9B:9E:FE:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0EFE3F04BC4BAE9CC0EC9A38EED637900ABFBF6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1732ff16-324b-4846-896d-bea216d30a89.roa
Signing time: Sat 12 Apr 2025 00:20:20 +0000
ROA not before: Sat 12 Apr 2025 00:20:20 +0000
ROA not after: Sat 17 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 5.174.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fe:3f:04:bc:4b:ae:9c:c0:ec:9a:38:ee:d6:37:90:0a:bf:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 12 00:20:20 2025 GMT
Not After : May 17 23:59:59 2025 GMT
Subject: serialNumber=9919891c1ba11c803729407259810b38b895d0950fdc99335edf355ecaff47ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:4d:5c:19:37:24:ff:4f:52:94:95:76:a3:
96:15:e5:14:5f:4b:24:d9:3f:aa:80:5d:31:ef:51:
05:51:85:b4:ac:f2:bf:83:36:4e:39:4c:0e:59:c0:
99:05:28:9a:41:7b:43:af:db:f7:80:a7:49:04:bc:
b4:43:fa:ef:92:1b:fd:ec:89:ea:b7:d8:68:fb:20:
1e:b9:48:d0:a4:15:df:cc:a5:a0:b7:84:6c:9b:40:
a1:7c:44:61:1b:f7:eb:f2:61:14:35:b4:4a:eb:c8:
a8:71:a4:9a:ce:a2:f5:2f:30:7a:da:aa:63:1e:27:
37:b6:3e:c7:63:53:19:ab:d2:d7:67:bb:07:19:05:
08:54:ce:5a:1f:1c:56:1f:d1:8c:9f:7b:81:c7:08:
0d:ac:13:cd:94:37:88:5f:98:07:07:39:5b:12:f4:
be:d1:83:14:3f:3c:84:ae:53:ed:7d:29:4a:1b:2a:
3d:7c:7b:39:24:73:5c:74:ea:e0:88:47:ec:0f:e2:
0a:86:15:31:9d:75:47:5c:65:0b:a9:c4:e8:4f:60:
3f:ae:f1:f6:2e:d8:95:7f:52:3f:0f:2b:56:05:7a:
d1:13:43:aa:3b:1f:aa:03:15:af:a5:d0:a2:90:80:
4a:c6:ce:c5:f3:31:7f:8e:c0:10:fa:27:f6:00:82:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9E:66:AB:63:B0:A5:66:BE:FE:7B:65:69:FF:66:2F:9B:9E:FE:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1732ff16-324b-4846-896d-bea216d30a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:37:d3:fc:1a:f9:d9:37:54:0b:6f:9f:a6:c6:6a:43:c5:a1:
52:15:c6:e2:1d:6b:c4:81:f7:b0:40:33:b1:59:35:a5:4a:5e:
01:82:71:9d:76:60:1c:4e:8b:88:6c:7d:8f:61:4a:88:95:10:
66:76:7c:40:90:52:c7:ca:7d:83:9f:1a:4b:90:5d:da:2b:9d:
c2:24:2a:b2:04:b7:6b:44:50:47:f0:8a:8f:48:5d:fc:f1:54:
b5:46:a5:db:80:41:34:64:c0:b7:db:d5:5c:5d:09:2b:4e:c4:
2f:52:ea:8a:91:6a:56:f9:f2:b7:25:fa:b1:d7:ca:38:6d:9d:
fd:de:11:79:37:c0:3b:c2:61:be:e0:7d:9b:72:bb:00:5d:41:
73:e9:04:a1:93:bb:7b:50:20:aa:ce:1b:04:6a:4c:36:19:ff:
82:61:ac:20:4f:ed:a5:65:c0:56:38:b7:1c:ff:22:ae:df:92:
2f:8f:85:ca:af:b8:56:ec:4c:ed:9a:1f:40:ed:de:11:f1:f3:
55:94:3b:64:34:2a:b5:ee:dd:77:4d:37:a3:31:ad:5f:c4:19:
93:b5:b6:ca:34:d2:b6:11:a1:6a:08:a5:c5:1c:da:24:71:85:
c8:2c:ce:70:e4:11:40:97:a9:d9:3e:84:29:19:8e:6f:a3:2f:
27:1a:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:58 2025 by rpki-client on console.sobornost.net