Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a41e5-dde6-424c-b8ee-427d2be83488.roa
File: 225a41e5-dde6-424c-b8ee-427d2be83488.roa (raw, json)
Hash identifier: +I2azwSAKwWQHFwCtUI4ZOAOfzZUG7GtF2lqXzVLIRQ=
Subject key identifier: 6E:78:9D:99:47:40:F2:2C:4D:E2:FB:21:95:85:CE:8A:A4:AF:AB:09
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F1FA9D38A0DDD6B8D8830DD18C9CB33525F9CA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a41e5-dde6-424c-b8ee-427d2be83488.roa
Signing time: Wed 09 Apr 2025 00:40:20 +0000
ROA not before: Wed 09 Apr 2025 00:40:20 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1f:a9:d3:8a:0d:dd:6b:8d:88:30:dd:18:c9:cb:33:52:5f:9c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:40:20 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=79aa42d17fc232c549a633bae5a613746ef95597fac8066e5e93e580c3247d1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:51:d0:e8:76:7b:d2:b8:d9:f5:d9:0a:28:
d0:fd:1f:cd:af:3f:7b:bd:71:01:be:96:25:1c:00:
4e:d8:55:5a:9c:3a:8b:a0:7a:f4:39:32:e4:15:e3:
2a:ca:d7:2a:22:5e:21:8d:1d:a8:a9:96:39:be:2c:
27:5d:d3:09:b7:f1:06:bc:48:ee:ed:38:e5:74:e1:
4e:b3:1c:cd:b0:a3:a4:0d:80:03:d5:bd:35:d4:0f:
f1:8f:0b:30:87:83:09:c4:78:8d:e6:fa:5a:ae:2d:
54:a7:9f:97:23:ba:10:a8:fc:14:0a:6a:69:36:8f:
8f:df:8e:22:89:8e:5c:1b:6e:52:cf:59:41:21:7a:
cb:a2:8d:19:92:2f:74:e8:32:d3:5d:93:6b:66:05:
df:d6:ef:3e:d3:78:97:b3:f5:60:72:11:ca:49:01:
53:09:1c:cc:c2:2d:f5:96:97:65:64:0b:69:e9:a5:
b7:75:34:b7:34:74:d6:7f:ad:c4:c9:f8:ab:6b:70:
14:5c:c5:9e:e8:cd:38:e0:fb:b0:e7:d1:98:b6:26:
41:a4:55:af:dc:03:38:04:22:df:36:2f:71:4f:3d:
c0:fe:74:66:0b:1c:7f:b3:99:98:d9:ef:74:f7:29:
d7:11:fd:11:56:5f:ff:40:2e:4d:ab:6e:4c:79:fa:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:9D:99:47:40:F2:2C:4D:E2:FB:21:95:85:CE:8A:A4:AF:AB:09
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a41e5-dde6-424c-b8ee-427d2be83488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:17:30:49:91:be:78:6c:f1:76:f1:be:6c:f9:2c:50:e1:80:
52:b8:7c:ae:84:b3:df:a3:7d:a0:92:bc:6a:8c:2f:38:1f:99:
3a:7a:03:54:6f:77:4e:88:a4:44:bd:b3:d4:0e:fb:73:72:eb:
53:1b:6f:0e:54:d3:5e:74:a6:f5:02:81:d1:d7:e2:6d:6e:85:
dd:07:19:f5:62:b7:5c:63:55:15:72:72:b9:e8:a6:58:c7:ad:
21:a6:db:ff:a7:d2:27:74:85:13:a1:ef:56:61:c1:f7:14:00:
a7:e5:52:dc:39:91:f8:d8:c5:2b:5f:d8:44:19:8c:69:86:d3:
a1:ef:21:42:69:f0:de:ef:10:f1:74:31:ea:a4:b0:98:c3:08:
a1:c0:4d:60:da:20:6d:1e:63:c2:80:7b:23:5a:b3:23:5d:97:
d2:86:85:29:5f:d7:31:69:51:a0:ce:9b:66:7e:7f:fc:db:0b:
05:12:93:eb:0a:13:4d:31:bf:ec:69:6a:0e:2e:60:dc:30:28:
ab:2f:db:22:84:35:ed:9b:b1:b5:33:06:4a:cd:d4:76:b4:c2:
a5:4d:1a:aa:90:73:f3:cf:43:0a:fb:4b:51:a5:a6:7a:34:ec:
0f:a3:a8:a8:e5:ca:4e:30:4b:ce:3a:2d:15:60:5e:4d:1a:63:
f6:51:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:59 2025 by rpki-client on console.sobornost.net