Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa
File: 93717bbd-2280-4d38-95e7-0e0e917814f8.roa (raw, json)
Hash identifier: c575sUQjHH5r/Dr+AEG3xXxcJ5pTShJD3AsM08fPKw4=
Subject key identifier: FD:E9:1E:94:98:67:55:46:A8:04:77:82:47:7F:66:3B:11:93:C2:49
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CE8BBCEE7DA0D63F86E48D4A512A5BF3B8CF901
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa
Signing time: Tue 08 Apr 2025 00:41:13 +0000
ROA not before: Tue 08 Apr 2025 00:41:13 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 68.66.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e8:bb:ce:e7:da:0d:63:f8:6e:48:d4:a5:12:a5:bf:3b:8c:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:41:13 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=21643709542a2577a23e1019aa41ce535899c6ca8ac44cea56674c9cde1daffd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:03:3c:3b:6b:3c:0f:4e:8e:eb:e4:fb:9b:
50:01:fc:ac:55:8e:3d:20:c0:1d:42:cf:eb:0d:2e:
97:48:68:4a:9e:30:f6:c4:02:1f:1f:e7:19:8e:f7:
ea:5c:a1:da:6e:dc:d5:1b:39:fb:3c:c1:47:93:7c:
f2:da:30:c5:3e:1e:41:38:38:06:77:2a:cf:0e:3b:
16:38:8e:2f:c1:bb:4c:14:d7:05:ab:32:98:cd:c0:
38:48:af:3e:66:e9:a1:8d:13:ed:59:80:6d:46:cd:
6c:94:ba:b7:13:00:0b:75:5a:9b:b8:09:41:84:5f:
cf:76:71:7a:56:2d:2f:82:a4:20:f2:48:5f:c5:2a:
b0:61:ad:fa:4a:fd:8c:ed:63:3a:de:6b:96:1f:40:
a0:f7:8c:82:12:45:9a:af:52:f7:ac:4b:eb:5a:8e:
25:b7:40:52:64:b9:96:60:3c:9b:cd:b0:64:37:89:
22:ce:79:50:ff:99:25:fe:d8:87:31:54:94:4f:76:
4c:e5:81:31:23:ed:ff:4a:37:bc:e8:29:e9:90:fa:
c2:26:68:e4:64:02:22:58:cd:65:b1:db:9b:8d:57:
6a:15:7d:39:87:e9:c6:32:7d:f8:43:51:99:88:08:
36:f7:65:e0:56:f9:ac:48:3b:14:4f:78:79:fa:cc:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:1E:94:98:67:55:46:A8:04:77:82:47:7F:66:3B:11:93:C2:49
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
68.66.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:89:bc:59:a5:1f:53:cd:c0:6f:a8:61:de:85:f4:88:88:92:
53:36:5b:d8:d7:74:da:f0:be:21:ae:c9:8e:bc:1c:a2:a1:20:
da:8c:40:e1:96:30:da:9a:79:0f:82:3b:24:2d:f8:3b:b5:2c:
0b:98:d8:9e:ed:c0:3b:fd:90:58:8b:35:76:4f:c5:83:27:79:
ad:4e:f8:41:16:cd:e7:87:b7:93:79:b0:3c:ff:c5:ae:d3:f7:
b1:d8:b7:e8:a7:ae:dd:2f:7c:01:44:01:19:5c:8b:b0:07:ae:
58:b7:4d:00:71:03:4f:49:90:2d:61:78:26:c2:31:15:5b:96:
ed:f9:8e:dc:f8:99:e1:2d:bf:e9:8c:f3:d1:9f:a9:7b:d3:8c:
a9:78:91:25:5e:ee:b1:1b:a4:ad:24:a7:e5:db:a4:be:3c:6a:
b6:e4:11:00:02:7f:d5:91:11:af:ff:35:9e:c2:51:c1:a4:6f:
58:d3:8e:9f:51:bd:29:36:b2:2e:4d:c7:79:33:37:f6:51:c7:
a4:e6:f9:05:08:bd:cc:c2:08:ad:66:65:3b:1d:c7:23:f5:c2:
d1:7c:f8:15:72:b1:d1:10:a0:3c:2a:04:76:f9:8d:9e:a3:d8:
b7:01:9a:6d:54:bc:36:2d:66:c0:c6:b1:a8:ca:6f:af:71:c1:
bb:3d:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:13 2025 by rpki-client on console.sobornost.net