Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa
File: 18e0cc1c-bcfe-419e-8a59-2910f188f118.roa (raw, json)
Hash identifier: UtP9HbfiIujkE46wDKyH4Z71UcfA+wLX4ZTw0RjSLNE=
Subject key identifier: 19:F9:D1:4B:87:77:84:A2:97:BD:7C:5B:4D:52:A8:53:9D:9C:F9:9B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DFAADAB5BCB14BFBAD4B60BE14330CB578D7714
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa
Signing time: Tue 15 Apr 2025 00:41:37 +0000
ROA not before: Tue 15 Apr 2025 00:41:37 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fa:ad:ab:5b:cb:14:bf:ba:d4:b6:0b:e1:43:30:cb:57:8d:77:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:41:37 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=0cb59bbb92c432897a67438dc43f36d0ce1e70523ded35bcfe335e2c17df9c36, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:b8:73:74:44:8d:01:83:67:db:ae:63:c8:
96:31:ec:07:33:83:48:4a:2e:11:4c:5d:e1:8d:9d:
79:c3:7f:8b:29:69:3f:fc:fb:63:7f:ce:e1:34:fe:
df:de:a0:4e:6a:2a:b0:d0:e8:2a:8a:08:37:6d:a1:
7d:ae:d7:9a:fd:88:49:1c:a1:a9:65:2e:65:f2:04:
76:68:5e:df:4c:ff:17:90:a5:d0:b0:bf:da:f4:51:
ae:b3:1d:40:99:b7:41:8e:6f:cb:25:4d:19:0d:12:
20:f3:f1:cb:76:12:24:c8:c6:6e:17:4a:59:25:bf:
c1:68:1c:25:6c:b5:ba:61:a0:38:10:2d:cf:20:66:
c4:c4:4d:bc:91:2d:ce:94:d7:f8:e1:e3:b4:7c:a2:
96:9a:5c:09:fa:d8:c8:c7:9e:52:17:a1:09:4c:d8:
60:a9:71:13:44:93:f1:31:ba:6d:90:d3:2f:f8:b8:
e3:2b:ea:86:bf:a4:7d:29:93:91:8b:63:33:0f:17:
57:cc:9a:44:cc:2d:49:a4:b6:03:c9:4c:95:58:f1:
f8:0a:4f:c4:83:16:62:de:5a:45:31:fe:99:89:1b:
b3:3c:10:e2:76:71:bd:1d:18:55:14:4d:cd:ea:fd:
88:91:c4:f3:15:1c:8f:48:8a:56:2d:fc:0b:25:81:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F9:D1:4B:87:77:84:A2:97:BD:7C:5B:4D:52:A8:53:9D:9C:F9:9B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.168.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:23:11:b5:3d:42:a4:8a:0a:1e:df:67:a4:7b:c0:8b:6e:3f:
29:1f:b1:c4:87:d5:ac:08:86:ff:a1:a4:cb:bf:69:8c:99:af:
a8:62:79:62:2b:42:c0:da:40:6c:c0:b3:bb:53:7b:d1:d2:e4:
93:c9:38:a1:77:59:3c:ab:79:fa:cc:0f:81:1f:e2:b1:8e:c0:
42:4d:fa:31:c7:d3:8e:31:09:51:a8:0e:b3:9c:c2:03:c6:38:
8c:8c:4e:61:35:d8:47:99:71:24:8c:25:d2:b9:ee:23:cc:a5:
b3:8d:57:fe:c9:e1:fe:fc:eb:ae:40:eb:bb:67:c1:33:58:d6:
af:fe:49:f8:42:23:ea:0c:0d:8e:ab:c5:d7:9c:b3:1c:ee:58:
21:64:b0:82:f7:ed:b7:56:dd:40:1f:aa:71:ab:b1:a4:37:e2:
33:8c:8f:43:33:70:0d:2c:d1:38:bf:58:ce:e0:8d:ee:7c:bb:
4d:dc:8e:f1:f2:c8:49:96:b4:a4:ba:f5:99:42:27:c4:29:17:
56:0e:59:9f:9e:1b:53:50:cf:6d:69:6f:2e:bf:5b:5f:a7:c9:
b0:a1:64:7b:b3:1c:b4:d4:78:ef:8a:d9:98:a0:c8:d7:41:59:
5e:d1:c1:aa:3d:6d:19:ec:63:8e:ff:6a:d4:d7:fa:b6:f5:9c:
f5:d1:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:58 2025 by rpki-client on console.sobornost.net