Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa
File: 5ef35af6-a704-4311-b43f-c62b39327200.roa (raw, json)
Hash identifier: 4o+SZ+gKfK+hnGrafvF/Q0H7Ca2DDZUBlPXEkug0Uzk=
Subject key identifier: 4B:9B:7B:63:61:BB:7F:97:91:53:CA:C0:FA:25:A9:B7:DB:EF:BF:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6DC76998D519E1755D1B0B4599D5A3ADCC0BADDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa
Signing time: Tue 08 Apr 2025 00:52:16 +0000
ROA not before: Tue 08 Apr 2025 00:52:16 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.105.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c7:69:98:d5:19:e1:75:5d:1b:0b:45:99:d5:a3:ad:cc:0b:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:52:16 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=8a6604492fcafa49de93dbe489286598bf28f5ccf568f50cae53efff1b989b3b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:66:70:88:51:c7:ee:fa:97:9e:41:0c:fa:
f9:11:1a:89:4f:72:46:32:50:71:50:f6:4d:18:c7:
d8:c3:b6:09:ce:e1:33:c7:ec:6f:ab:8d:13:08:ea:
17:7f:96:7b:2c:d5:e1:30:c7:16:33:10:ea:cb:18:
3b:ac:0a:ea:21:26:d0:8a:32:6a:79:25:00:7d:b0:
92:8c:46:10:9a:4e:07:ec:8f:fa:7a:cb:eb:7e:5a:
51:2e:8d:40:b7:46:d4:7d:fb:18:df:30:43:61:d0:
b0:c6:34:3a:d2:d2:7c:2f:06:27:2f:9c:a6:0c:be:
c8:ce:07:a3:a1:1f:55:5c:5c:45:a3:99:89:7e:5b:
e0:87:7d:02:26:90:36:3e:4a:0a:f4:16:11:48:2d:
7f:4a:8f:45:05:b6:9b:86:f1:50:26:65:d9:52:03:
57:5e:7d:02:aa:5d:3f:da:ec:0d:ba:b3:ee:04:88:
1e:97:3a:e2:de:58:d7:fc:44:5e:12:6b:11:69:55:
a1:c3:26:6b:2e:fb:e6:f6:16:86:6a:8b:9f:2b:19:
d3:70:c2:de:15:09:b3:6b:dc:73:db:d9:f4:9e:49:
3d:bb:fa:83:d6:d2:64:52:8b:e0:05:d9:8f:4b:92:
17:ec:7d:07:22:2c:5b:65:b7:d6:59:93:69:b4:4b:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:7B:63:61:BB:7F:97:91:53:CA:C0:FA:25:A9:B7:DB:EF:BF:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.105.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:78:7d:18:c4:21:87:ac:89:4d:4b:48:f2:77:a9:9b:da:54:
8d:8b:1f:e4:ac:8b:25:ae:5f:a3:06:7a:21:14:db:cf:9d:2b:
ef:62:de:8b:9b:75:34:7d:47:fc:74:50:9a:90:92:3a:a1:b2:
06:ee:d7:9d:b7:82:d8:59:d1:cf:a8:66:cd:70:32:5f:86:74:
b5:52:42:a8:2d:59:03:f5:31:6d:3d:36:fb:2f:38:8a:aa:56:
ed:08:72:e4:22:5b:e5:57:c6:08:30:78:fb:3c:3e:ef:ae:c1:
a2:bf:62:b2:07:d7:92:00:59:18:fa:6c:54:7b:c0:d6:3f:3b:
79:ec:84:f9:ac:39:74:7e:d1:9c:a0:f4:63:43:c3:f8:b4:1e:
b4:cf:cf:be:bd:d0:c5:38:6e:c9:d1:4a:89:03:21:2b:cd:9c:
76:c5:f3:1f:a1:ca:ce:b2:04:04:21:10:de:d5:ca:de:f6:fc:
8b:e4:5d:90:7e:d5:6e:33:4e:02:f8:06:f2:6d:0f:63:f1:88:
70:12:88:e7:87:c8:a9:bf:37:04:be:6b:46:82:ff:ef:4b:42:
80:27:3d:04:09:67:e7:81:62:34:d8:5a:b2:ed:4b:f6:1d:10:
04:8e:c4:1e:eb:08:3f:a9:09:72:df:d4:73:10:75:6c:75:43:
b0:6d:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:07 2025 by rpki-client on console.sobornost.net