Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fc1f7e0-ff38-4af4-846d-335830fa159e.roa
File: 9fc1f7e0-ff38-4af4-846d-335830fa159e.roa (raw, json)
Hash identifier: 2Ul4nRyB47ydcjlXQqjqeQ6SKcL8DUCyZ2VhM8IgJnk=
Subject key identifier: 6E:B5:AF:F4:94:0F:0D:18:5D:D8:DE:E5:8D:E0:8F:96:DA:C9:E5:D2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F45E2823EDDBC5E5EDFBAFB66A618908C61590C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fc1f7e0-ff38-4af4-846d-335830fa159e.roa
Signing time: Mon 14 Apr 2025 15:01:51 +0000
ROA not before: Mon 14 Apr 2025 15:01:51 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.18.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:45:e2:82:3e:dd:bc:5e:5e:df:ba:fb:66:a6:18:90:8c:61:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 14 15:01:51 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=2f630707205574a6e921aeffaf9216008dfac77b3504c4c91756d150cbc8c912, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:d1:4b:44:48:9e:f0:e8:cf:aa:2e:27:8b:
84:fd:ea:10:f5:b8:e9:83:a1:e5:96:c3:f4:8d:e6:
de:05:31:e9:db:40:ca:79:c8:8e:42:73:c0:41:44:
b6:c6:9b:b3:76:b9:82:06:b2:39:2f:00:73:0f:22:
e0:ba:07:39:7a:42:c4:2b:e8:00:38:1b:63:dc:b2:
64:cf:26:0d:75:77:7e:d6:5e:bb:d9:88:3a:a8:38:
ed:f5:6a:77:53:2b:67:83:cc:74:f4:ab:8a:c4:9b:
6d:d6:ee:d4:ed:e0:b4:cd:af:0b:f1:b2:01:2b:52:
02:bf:07:b6:e6:cb:ef:3c:17:7a:ea:4e:5d:c1:51:
ca:93:89:a0:55:52:08:d5:27:3a:23:f8:47:2f:fd:
f9:75:08:84:ef:fd:2f:b6:c7:41:b5:c1:1e:b6:e6:
e4:ee:73:1c:00:6b:09:aa:ee:3f:48:44:01:85:45:
80:5e:0b:6b:13:cc:dc:76:b5:72:ba:11:0d:17:a7:
6e:32:c2:67:a2:87:eb:6d:92:ce:df:e8:85:3e:d2:
ec:30:c0:34:98:c0:d4:b4:ab:0c:bf:fc:12:16:0f:
59:18:88:2d:59:6f:0e:5d:d6:86:c4:d0:49:42:54:
32:89:3f:65:92:5e:32:2c:e9:62:e1:59:50:4e:aa:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:AF:F4:94:0F:0D:18:5D:D8:DE:E5:8D:E0:8F:96:DA:C9:E5:D2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fc1f7e0-ff38-4af4-846d-335830fa159e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.132.0/23
Signature Algorithm: sha256WithRSAEncryption
84:16:3f:db:89:e8:5a:27:e2:f6:66:ea:88:e7:7d:9a:f8:c4:
50:dc:90:79:8a:39:99:40:95:9e:6f:e5:4b:db:8c:67:a3:0a:
57:02:3a:fc:76:82:a6:a7:c3:bb:9d:eb:3c:60:16:5e:9c:c3:
e1:2e:23:4c:cc:aa:cd:68:21:ba:e4:7f:07:fa:33:60:68:6c:
b6:74:d6:f8:89:58:e8:97:2d:f9:b5:08:ef:99:b1:66:df:01:
15:ec:23:ea:bd:1d:8c:79:af:dd:d3:7b:37:f8:f5:43:11:7d:
e9:4c:bb:66:3f:4d:d8:52:94:d2:2e:75:90:82:9f:32:f5:4a:
3c:67:57:c2:9f:f1:15:4a:7f:20:51:67:93:96:47:df:3d:ac:
e7:a6:34:91:48:8c:2c:69:18:6f:a5:9c:5a:32:63:0e:b9:d3:
72:e5:14:f2:81:e7:1e:05:bb:f8:fa:4b:be:55:cd:a3:44:2f:
4b:a1:f6:19:b4:eb:e0:0d:7c:45:bb:8e:65:10:ae:2d:fa:ab:
66:20:7c:98:d3:3d:73:59:1c:e6:b2:3e:37:e8:53:88:2d:59:
19:0c:8d:7c:20:a0:6b:5f:a7:04:16:05:ed:4a:1c:50:f6:c7:
3c:af:1f:45:eb:11:4d:a2:de:ae:1c:87:76:3c:f7:ba:6b:54:
ca:a6:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:15 2025 by rpki-client on console.sobornost.net