Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa
File: b7a02b21-64a7-4629-8149-a98f47ed09a5.roa (raw, json)
Hash identifier: o9mnu0qwxvNI50ngdQm2jEuqp6LgE680EWoY6rpi2RQ=
Subject key identifier: 20:6A:58:9D:61:BA:E7:B9:C6:A9:A9:9F:5C:A1:38:94:79:30:FA:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D6C892C86B685B62DC9D214A0156B073E4828B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa
Signing time: Tue 08 Apr 2025 00:41:11 +0000
ROA not before: Tue 08 Apr 2025 00:41:11 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 66.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6c:89:2c:86:b6:85:b6:2d:c9:d2:14:a0:15:6b:07:3e:48:28:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:41:11 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=78cf87446ed5f0dd2b2820fddd3345d0d73aff2d4758dfa9ed4bc3b55ff3e533, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:d9:1b:f0:ff:8b:11:d7:d5:f3:bd:9b:bf:
81:5d:35:e3:85:02:dd:a4:bc:11:1a:11:c4:78:e9:
31:9d:a6:c7:d6:0c:7a:e5:ed:67:ca:5c:cf:f6:38:
33:c0:61:85:39:34:a8:83:2c:c6:2e:16:2b:5e:6e:
38:15:4d:54:5c:ff:88:9a:0c:65:af:7b:0a:cb:a8:
94:ee:34:97:fe:d7:9c:d2:7a:18:72:86:31:83:0b:
b0:ac:f0:9b:9e:a2:de:04:66:86:a6:7f:94:02:39:
fe:23:1f:f8:bb:e8:8b:b3:4d:db:14:8f:7d:7f:dc:
c4:73:bc:bd:eb:f0:97:25:55:2e:2f:c6:4a:71:ae:
a4:92:ff:cf:60:91:13:0d:2e:da:7a:c3:30:f0:f4:
bc:12:00:80:9a:71:06:18:88:ca:a7:10:7f:9a:d2:
05:aa:fc:92:a5:8e:67:ab:d4:dd:e5:22:a6:61:c3:
68:7c:aa:dc:a7:57:80:a2:e7:16:35:60:7f:19:f1:
85:71:cb:6a:f7:10:9b:7c:59:c0:3f:60:0c:37:65:
94:e9:7f:83:52:31:af:2d:bd:38:71:45:25:93:35:
db:af:1f:0f:9d:13:4a:9f:73:b3:66:7a:e2:b6:2f:
ae:0b:45:16:d4:03:76:9c:32:09:b6:33:2a:4e:f0:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:58:9D:61:BA:E7:B9:C6:A9:A9:9F:5C:A1:38:94:79:30:FA:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:2c:2c:2e:be:f6:30:7e:6d:0f:9b:8c:bf:c8:91:6e:3f:a1:
a9:1d:17:9c:a7:58:f3:07:69:8e:8c:7f:fb:a4:43:f2:0f:69:
11:46:ad:dd:e0:44:a0:ca:42:1e:92:75:b8:1a:7b:ed:f6:ed:
cd:22:e8:a3:be:6e:ee:31:ea:4b:da:da:5d:3c:9c:5d:88:03:
9d:20:5b:83:02:90:83:62:d8:74:60:11:3f:3a:a4:bd:3d:c7:
c3:8f:cb:02:52:03:28:2a:7a:40:3c:fa:1d:d1:54:0b:c3:40:
6b:9a:dd:53:9f:75:f3:25:37:fb:9b:88:94:c8:93:b5:12:2a:
b6:26:7d:65:74:79:de:35:1e:48:3e:38:6d:23:e3:4e:18:c8:
e4:df:fe:78:01:73:04:9c:88:e9:36:c9:4c:38:73:4e:e9:86:
1f:15:eb:08:81:8a:e9:4c:ae:86:26:88:bf:a3:e4:07:95:c7:
49:cb:7f:ba:4b:90:a7:71:05:28:33:28:1e:84:42:b8:79:2e:
5e:bc:1f:d4:6d:c6:d2:9e:7f:d1:20:37:1c:7b:66:42:58:f3:
f1:fe:dc:98:8c:25:89:d1:78:04:d4:16:e6:59:08:13:9e:4a:
d9:de:98:0f:0e:fb:9c:6a:ce:c6:82:45:8b:11:34:a1:fb:97:
88:b7:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:19 2025 by rpki-client on console.sobornost.net