Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa
File: 2300825a-8820-45a1-837c-e7e6b3f0eca5.roa (raw, json)
Hash identifier: PWJOzHgoLQpSoJCiT3YTdZgwIwwbPuMvQSkMh/yPF14=
Subject key identifier: 75:CD:5C:67:FE:0F:AC:4C:1D:59:61:8A:BE:F4:AC:69:04:1E:27:FA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2940DD9667A24780C0AC149D1D15ED6915D0E883
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa
Signing time: Mon 31 Mar 2025 19:38:02 +0000
ROA not before: Mon 31 Mar 2025 19:38:02 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 1.179.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:40:dd:96:67:a2:47:80:c0:ac:14:9d:1d:15:ed:69:15:d0:e8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 19:38:02 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=f57c7c002a9fabb8dfa0e16be71fda4d79514dd20de5df7ba0aaf428bcadf2d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:a0:9c:17:c2:c3:1b:43:ae:51:1f:70:4b:
c4:cb:74:a1:50:c3:ee:f4:c6:df:d8:c0:9b:99:26:
f3:c4:5f:09:98:74:26:20:27:eb:78:59:bc:75:1c:
47:cb:82:ba:fb:4f:50:59:28:a4:00:ee:0a:04:92:
26:73:f5:0c:0e:ce:4e:eb:e3:34:69:7e:8f:47:c0:
35:44:98:0d:3b:a7:8e:7e:36:50:4f:b7:2c:cd:7c:
c7:22:b9:3d:d6:ae:6a:9e:67:f1:67:c8:56:81:9a:
4f:a8:fc:fb:0d:1c:87:0c:73:67:a5:50:5d:3a:93:
f3:bd:f2:f0:17:0e:d7:c0:19:03:e7:aa:ee:f6:85:
ab:44:34:d9:1c:8b:c6:69:d9:b7:fa:bc:10:ce:69:
f4:e1:c2:1b:0f:da:82:b1:62:34:1f:04:5e:c1:95:
f5:69:e3:75:6a:1a:0a:4c:69:09:ee:c6:6b:dc:63:
12:12:72:12:06:f8:4e:8d:b6:b2:55:ae:fc:7a:64:
ec:0f:61:b0:88:6b:8e:e6:a9:10:7e:1b:4c:97:51:
14:19:33:57:b2:da:23:2f:1f:fd:17:49:69:23:f3:
73:4d:0f:15:ac:93:aa:e5:8c:4b:f0:1f:13:9b:5d:
3d:a2:03:00:6f:71:36:15:b5:be:b4:24:7c:1b:0f:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:5C:67:FE:0F:AC:4C:1D:59:61:8A:BE:F4:AC:69:04:1E:27:FA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.2.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:7a:7a:99:e9:35:5a:dc:53:3c:05:b5:42:26:c5:5b:e0:d5:
7d:f7:4f:e7:ba:a9:1f:81:6c:b2:83:a5:b9:05:09:0e:c4:49:
37:d4:b0:31:a2:fe:20:e7:1c:55:7a:ce:2c:30:ff:f2:69:f9:
bc:00:ff:01:e8:18:1a:1f:b9:21:4e:02:50:39:b0:04:b4:20:
1e:62:ba:65:a2:49:bd:c5:f1:da:21:3d:69:57:1e:73:71:69:
be:6d:8a:5c:74:12:45:3a:30:74:c0:0c:c0:cb:17:33:83:8c:
55:41:4c:96:59:7e:92:5e:c0:f0:e7:c9:4b:91:09:40:5c:e0:
02:1a:d1:f3:3e:c8:a6:b0:0a:20:b4:ad:cc:e3:91:24:4c:db:
18:02:0f:fe:ee:ac:f8:14:0f:4b:55:f2:c9:b3:f5:a5:dc:60:
d7:5b:16:1d:d1:c1:17:a6:a3:4f:e5:52:32:93:5f:84:22:48:
2c:90:87:24:5b:c7:45:e9:d2:15:c2:93:be:c8:77:f4:d5:97:
45:fc:3d:e3:b9:45:b4:a3:28:f7:0e:61:40:e5:58:1f:6a:a3:
c5:94:a2:8c:96:a5:e6:9a:44:07:97:3d:2e:de:63:2e:4d:ec:
f8:36:e9:d3:aa:d0:84:62:e9:48:67:67:08:7d:4f:d9:ac:1e:
c9:27:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:59 2025 by rpki-client on console.sobornost.net