Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa
File: 7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa (raw, json)
Hash identifier: 95yak8Ja0wpyr0/mzYm+kvd/lY/ZYwoMykE5ESo1KGM=
Subject key identifier: 29:A4:09:CA:C1:96:61:AF:1D:9A:97:67:5D:B7:BF:A7:7E:32:74:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A6DD0D879CCC9A074DCD408658329C8ABF349A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa
Signing time: Wed 09 Apr 2025 00:30:27 +0000
ROA not before: Wed 09 Apr 2025 00:30:27 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:6d:d0:d8:79:cc:c9:a0:74:dc:d4:08:65:83:29:c8:ab:f3:49:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:30:27 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=a5aa516dcbea28fe0a1bf14c2b02f0bdf9c085073d915a8433f0417ff550e9fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:41:03:bc:23:0a:97:75:07:15:cc:95:ff:
3e:81:96:e7:4d:3b:10:95:c6:ce:f8:1f:80:5a:74:
77:f1:6e:5c:c6:b1:a2:53:c4:04:32:af:0f:c5:e6:
6c:d6:f8:aa:44:68:23:47:8b:33:0b:2d:50:e7:b1:
a3:23:90:65:8b:16:77:35:09:3a:18:2c:43:35:1a:
56:91:02:7c:6d:54:b0:db:b0:e8:76:40:22:62:c1:
2b:99:b3:3b:cb:47:23:2b:f0:cb:a1:3d:57:13:e4:
3f:32:1b:a2:68:dc:ec:61:f5:e5:d6:2a:69:c3:0e:
a0:f8:1c:54:1a:2e:57:df:56:5e:79:f8:ea:e9:89:
aa:59:83:0c:0b:c3:f3:99:eb:f0:d6:57:10:50:8b:
4a:55:0e:f3:ed:23:07:24:81:87:22:2c:e1:93:67:
eb:ae:92:a0:41:51:e5:fc:50:82:84:ce:49:81:7d:
08:c1:a3:cb:30:24:83:6a:95:47:7c:85:3e:5b:84:
5b:8d:5e:c1:bd:0a:27:23:31:18:2a:4f:ca:32:71:
1b:a0:4c:fd:d2:ed:02:bf:33:b7:e3:44:b8:e1:e6:
ad:c3:0d:b6:38:4c:33:02:05:fe:85:01:ee:f7:94:
13:f1:54:7a:ac:25:7e:52:ae:3b:44:1f:f1:52:52:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A4:09:CA:C1:96:61:AF:1D:9A:97:67:5D:B7:BF:A7:7E:32:74:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.86.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ca:7f:32:f0:20:72:0c:f1:b1:0f:65:26:3e:76:6a:65:de:
d5:d3:f6:9e:2a:91:4d:f0:79:ec:88:a1:a8:f4:01:fa:7e:3d:
81:7d:17:69:d1:7e:2b:00:70:9f:07:6f:84:63:4d:eb:95:16:
bb:fd:65:87:72:2f:d0:bb:2c:b9:55:53:2f:cc:28:75:26:1a:
d6:7c:69:2e:ab:0e:bb:f8:50:77:8e:a1:a9:56:c1:a6:05:a0:
a8:cc:ff:93:8f:cc:1d:71:5c:9a:bd:d2:b5:72:99:7c:b4:f7:
95:4c:c9:a2:ed:d8:42:4e:32:4e:6e:55:7b:53:5c:79:c0:37:
95:09:f8:25:ce:75:a7:81:b9:c0:3d:0e:fb:ff:8c:02:d6:3a:
61:7b:af:53:c4:f6:cd:c5:bf:ed:e1:2d:79:e7:3e:89:28:34:
32:c8:89:b0:72:af:8e:55:dc:09:a7:f0:b0:17:6f:63:b7:5e:
d9:64:6c:c4:31:76:07:02:19:d5:36:5f:4a:34:19:7e:57:3b:
da:af:89:dd:aa:1f:3a:bc:0c:87:85:4c:c6:3a:78:63:e6:74:
a4:7b:94:de:49:15:89:fa:cd:e7:4b:85:05:5a:c9:f1:bb:64:
1a:b3:44:78:bb:fb:e8:7c:b7:1d:a3:4f:98:4e:fb:af:f8:13:
5c:ba:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:10 2025 by rpki-client on console.sobornost.net