Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fa260a2-2b05-4bd0-b5e8-e0ab47f3664d.roa
File: 6fa260a2-2b05-4bd0-b5e8-e0ab47f3664d.roa (raw, json)
Hash identifier: zh53BnNJGfgDyTs+NMTas99QtPBbrpAb/tP7rPyuTn8=
Subject key identifier: EE:06:B0:D1:E9:5F:4E:62:BD:76:CC:76:C3:E2:6A:E0:FE:B3:45:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 79CD886E269E195A5A0A2F62CBB30C3435755295
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fa260a2-2b05-4bd0-b5e8-e0ab47f3664d.roa
Signing time: Mon 31 Mar 2025 15:10:12 +0000
ROA not before: Mon 31 Mar 2025 15:10:12 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.39.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cd:88:6e:26:9e:19:5a:5a:0a:2f:62:cb:b3:0c:34:35:75:52:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:10:12 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=edd9e34899cd53dd51eaaf8666f3f912aedb90a02353cb69ea00c5467f16ecc7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:b6:40:23:a8:cd:55:ce:04:a6:ab:04:dd:
09:69:b2:a2:ac:51:e3:e0:30:db:68:c2:6c:93:d3:
df:2e:b1:aa:15:cf:77:3b:b7:c9:66:08:3f:18:0e:
46:a1:9c:0f:cb:78:0a:c3:31:87:8f:b7:79:72:eb:
a8:90:45:09:91:b5:03:25:0f:94:2d:1d:b4:5e:43:
3d:ff:b8:0e:05:4a:48:fd:40:61:98:c7:59:c4:47:
8c:c2:fd:59:09:42:eb:a0:5b:1f:b3:53:fc:57:a2:
46:47:c6:0e:d2:0d:96:6b:06:ef:4a:a4:63:d2:69:
5d:c9:99:e9:c2:e3:d1:16:50:a0:15:ed:78:a2:99:
8a:6b:62:cb:ad:9f:ea:89:d0:ba:7e:34:31:05:08:
f3:0d:0c:e4:1e:8f:e3:0d:0c:6c:ab:f9:78:f3:67:
23:8c:5e:f0:ad:c0:be:ba:36:5c:cf:35:33:e6:66:
79:da:7d:b3:86:cf:65:c4:de:df:10:c0:b2:c4:60:
3a:ff:b9:94:bc:41:5a:03:f2:6e:f6:9c:24:ee:9c:
a7:45:9c:4c:b4:77:60:39:5f:24:f5:e7:f8:bc:8b:
40:3c:9b:74:79:13:b5:f0:06:95:cf:11:9b:88:35:
4e:e2:05:24:61:d8:4b:80:75:c1:c0:59:5c:84:da:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:06:B0:D1:E9:5F:4E:62:BD:76:CC:76:C3:E2:6A:E0:FE:B3:45:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fa260a2-2b05-4bd0-b5e8-e0ab47f3664d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.39.152.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:d0:fe:9d:cc:35:fc:42:29:3b:07:21:84:97:10:e6:3b:df:
91:1d:1d:cd:e0:58:d7:94:4e:a1:62:4d:ec:55:34:e8:3f:5f:
99:1f:71:88:b5:a7:34:4b:9d:85:da:66:25:4f:82:12:81:23:
ae:b2:6e:ac:37:da:b3:81:90:86:2b:24:0e:cf:82:bb:e1:8d:
0f:fc:60:4a:f1:67:4b:2d:56:d3:e6:92:58:c9:eb:97:c4:cf:
40:cc:f8:41:d5:7d:97:7f:8e:45:9b:a6:00:24:c2:01:d8:b4:
2b:17:ba:b1:ac:00:67:de:70:08:a8:86:95:a0:70:5b:b7:08:
50:9f:b2:bd:15:c6:2c:9b:8c:d4:47:2a:b0:f4:2d:ab:78:10:
57:cc:45:61:19:9d:8a:5f:81:51:19:a5:00:8b:c7:70:95:4c:
b3:9a:95:53:7a:18:fa:6a:1e:0c:0b:26:78:79:07:71:1e:0e:
f5:1d:25:3a:15:9d:ec:4f:10:14:43:81:de:b9:8b:03:a9:72:
a3:df:41:8f:ba:af:2b:fa:9e:67:f4:ee:fc:fb:5b:97:de:fd:
e1:a9:0f:c7:2a:47:92:5f:3b:81:b4:07:d1:64:9f:10:27:bf:
32:c9:54:89:ef:c1:d4:d8:13:11:4c:28:48:56:06:8d:9a:7a:
4f:82:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:09 2025 by rpki-client on console.sobornost.net