Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1de6f4f3-5860-4ac4-ae85-b3680e2b30c3.roa
File: 1de6f4f3-5860-4ac4-ae85-b3680e2b30c3.roa (raw, json)
Hash identifier: FEuYTIaYOSGeEXZ/TdoDfQK78wLbrPN0q3Ta75MqEDs=
Subject key identifier: 99:51:44:25:B2:CD:23:37:34:3C:61:2F:E1:4D:72:DC:BD:DE:C1:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2EC366053B22475D3E5A5F101ED1FC9FA8D8FEEF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1de6f4f3-5860-4ac4-ae85-b3680e2b30c3.roa
Signing time: Tue 01 Apr 2025 00:01:42 +0000
ROA not before: Tue 01 Apr 2025 00:01:42 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c3:66:05:3b:22:47:5d:3e:5a:5f:10:1e:d1:fc:9f:a8:d8:fe:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:01:42 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=fee676fa36bd4731070a9207be71a792e17fcd55f3742e9221f0f4cb1d7e9b8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:a7:d6:ab:40:3a:6a:a9:15:c0:8e:ca:7c:
7a:ce:c6:12:ea:71:65:dd:0d:fc:03:bf:02:51:8f:
62:c1:1b:d8:31:36:64:a9:d0:ac:55:52:3d:55:28:
ca:28:c6:57:8c:95:56:1b:4e:e9:bb:ec:8e:0e:5c:
ee:0c:36:43:92:8b:84:e6:47:9c:d5:c8:dc:4e:e0:
fb:f6:58:aa:41:19:37:80:29:79:a3:37:a5:a3:fb:
e2:fb:3f:ab:98:a9:35:d2:2f:15:e4:52:cb:46:6f:
56:8f:ae:63:7e:b2:e6:dd:47:5f:a4:78:5b:a2:d6:
f4:51:9c:19:f0:90:5b:aa:2a:94:74:b1:82:2d:1a:
d9:02:23:ae:2b:a8:aa:57:c7:90:5f:3a:0e:91:eb:
11:0f:0a:2f:8b:7d:d2:fe:f9:31:00:a8:6e:d0:ab:
16:da:4b:85:20:75:fe:36:38:7d:24:6a:f5:6d:09:
9f:cc:ce:4d:23:30:be:2b:2f:a0:08:37:57:46:89:
f4:13:70:31:a1:b8:53:e1:14:41:2d:59:bc:e3:4c:
57:e0:88:f2:6c:e6:f5:8b:2e:b9:44:a8:55:46:d3:
0b:21:ef:07:44:4d:c6:82:d7:99:c9:32:66:56:51:
43:dc:be:08:a2:93:db:12:a1:99:b7:22:f7:49:de:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:44:25:B2:CD:23:37:34:3C:61:2F:E1:4D:72:DC:BD:DE:C1:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1de6f4f3-5860-4ac4-ae85-b3680e2b30c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:0d:36:8d:f3:97:ff:6e:94:80:d9:0c:54:a1:a6:17:c6:4e:
8f:3f:e7:53:42:55:53:e0:05:68:2f:2a:fe:0f:25:f8:22:2b:
7a:ac:d4:f9:aa:84:06:df:85:49:33:69:6c:60:58:da:b2:f3:
70:85:13:5b:2f:07:63:e0:e1:c8:dc:a7:dc:0f:50:6c:5f:c1:
ac:09:46:e4:01:03:d1:9f:72:e7:0e:56:27:96:1f:d9:bf:53:
43:98:ce:d9:c6:70:ef:3c:45:25:f8:6c:32:fc:e9:d0:cb:02:
53:29:3d:b8:2c:8f:a3:79:88:ea:3e:05:a0:89:e0:20:0e:39:
93:7a:f0:f4:38:f9:e6:72:1f:dc:63:f2:09:92:ba:64:7c:4a:
b2:0b:48:45:76:3d:f0:68:3a:be:61:63:65:6a:e6:0d:8c:fc:
6a:c0:04:a9:42:00:d5:65:06:c0:fb:50:fb:e6:c9:72:af:d2:
f9:5e:7e:eb:9d:8a:cb:f9:3f:19:f5:30:03:60:6f:81:4a:e1:
ee:5f:7d:c7:21:52:51:1b:eb:b3:19:93:74:c5:09:e1:c2:c7:
f7:84:63:36:b5:42:e7:09:02:8c:60:79:9f:e9:5e:c2:b0:7b:
cc:5f:08:d3:57:ca:13:a3:79:e7:66:f1:e2:ce:0c:f5:0c:5e:
5e:ac:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:59 2025 by rpki-client on console.sobornost.net