Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d38cbc-8e57-413b-a607-243ebf7b63e0.roa
File: 73d38cbc-8e57-413b-a607-243ebf7b63e0.roa (raw, json)
Hash identifier: /xr3GjXLphkark56H8diOFQ7NM4ZSQcXb5Q+EsJpFis=
Subject key identifier: 66:49:A7:40:67:1A:DF:F8:12:A4:5F:1C:44:B4:B1:9F:FF:60:30:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66EFC4A7A306CCD648CAD7C0F6D65E2CDE6EEEEE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d38cbc-8e57-413b-a607-243ebf7b63e0.roa
Signing time: Tue 01 Apr 2025 00:07:05 +0000
ROA not before: Tue 01 Apr 2025 00:07:05 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 210.56.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ef:c4:a7:a3:06:cc:d6:48:ca:d7:c0:f6:d6:5e:2c:de:6e:ee:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:07:05 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=7f1ed894825e9df634b389280dcdbf3a337fa1be85e29cfeaa598dc3087f4e74, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:46:37:30:34:63:c6:9b:28:e6:de:b0:3a:
e0:56:ea:bb:38:29:6d:58:4f:e6:85:09:23:80:f3:
05:37:98:bd:90:1f:42:05:8f:95:ac:e3:73:4c:1f:
40:79:b7:2c:92:ff:5e:6d:f8:21:ba:4e:bb:52:5e:
02:f8:5e:a4:df:05:11:41:ca:95:db:58:99:f3:4e:
16:2f:6a:bc:74:68:9d:aa:8d:3f:37:69:43:68:97:
b4:07:fc:23:58:a5:c5:af:f4:7e:d4:91:76:29:c3:
a8:b6:bf:03:8f:70:6f:64:40:f2:13:2c:1c:4a:ea:
bd:79:4d:ae:e7:20:bf:10:28:12:cc:e9:aa:4e:94:
ef:ba:e1:e6:4b:c4:cd:73:0b:fa:1e:19:25:ef:21:
ff:ab:bf:e8:a4:5b:30:0c:1e:a7:55:8e:7b:d6:68:
8c:2d:41:68:1b:7d:2f:bf:a4:8a:91:61:8c:3f:bd:
2f:47:68:b8:9a:93:4c:3c:f1:fa:47:d2:99:7a:38:
d8:5f:57:95:6e:b8:f0:99:6c:a2:7c:48:94:b9:f1:
84:fc:9c:25:d4:92:85:66:3e:f8:da:e8:9c:ef:66:
70:d6:cd:46:2f:2a:eb:25:15:4c:7c:f7:cc:f8:40:
16:14:91:c1:5b:e0:2a:c8:42:8f:6a:49:c4:ea:c7:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:A7:40:67:1A:DF:F8:12:A4:5F:1C:44:B4:B1:9F:FF:60:30:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d38cbc-8e57-413b-a607-243ebf7b63e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.56.66.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:5d:91:bf:e9:6f:2b:46:5b:da:32:90:48:99:c8:a7:1f:90:
d9:fa:be:74:3a:13:1e:5e:a9:7b:1f:15:77:5f:cc:71:7e:d8:
d8:cf:3a:86:15:34:ea:29:b4:5f:3f:de:95:81:f4:bb:75:b5:
d5:6e:1a:c3:ca:3b:92:bd:cb:d4:f3:35:66:48:0a:85:34:13:
06:c2:f9:00:c1:a8:b8:0b:04:1d:0e:0f:d0:2d:ab:8b:af:ce:
d9:61:8f:68:27:ba:c8:45:17:f2:44:af:57:a6:ef:7b:29:42:
9a:9d:c6:d9:50:59:7c:93:98:82:08:e5:78:e7:a2:df:1e:b9:
bf:71:35:29:d8:56:ca:20:23:88:4b:b9:95:84:89:b8:f4:ad:
09:14:25:c2:b9:cb:29:73:2e:c0:9a:2d:56:9b:f3:6d:6f:87:
ad:a3:e8:9e:23:30:eb:13:4c:ce:b9:32:20:8c:ad:b8:56:23:
60:5f:62:7c:6c:3c:31:88:89:69:f0:ca:65:7b:7e:b4:72:26:
20:ab:6d:b5:07:00:88:63:9f:d5:47:21:1a:62:7e:af:5d:58:
c3:07:af:2b:ed:b8:3f:41:9f:a5:d8:72:e1:e4:33:a1:61:c6:
d4:c4:64:88:4a:84:e8:f3:69:01:1d:a5:ed:b4:22:a8:17:da:
19:cc:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:10 2025 by rpki-client on console.sobornost.net