Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa
File: d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa (raw, json)
Hash identifier: 3HVMWqYt2DlBxOEUyhPfocmvi2gBrtmZhRdlGqhZmig=
Subject key identifier: 0D:A1:94:C6:51:2D:67:E7:1D:D8:ED:90:C1:4A:C5:3E:2E:43:D0:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11F02E709409D295FBE541F17D5B06A5F280D57E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa
Signing time: Mon 07 Apr 2025 15:01:34 +0000
ROA not before: Mon 07 Apr 2025 15:01:34 +0000
ROA not after: Mon 12 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 144.168.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f0:2e:70:94:09:d2:95:fb:e5:41:f1:7d:5b:06:a5:f2:80:d5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 7 15:01:34 2025 GMT
Not After : May 12 23:59:59 2025 GMT
Subject: serialNumber=3a9e18a7006fe122985033f12df3dad4488a54e1e1fc466f925fdeb433108f0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:8b:02:72:79:16:a1:1a:c0:ed:ce:4c:e0:
a6:12:21:d7:c4:36:e4:2e:ad:33:1f:37:0c:3d:72:
d3:5f:c5:63:19:a6:1d:29:02:3d:2c:45:65:be:48:
f8:5e:66:93:ff:37:1e:6c:f5:30:37:36:3d:c1:40:
29:6c:24:53:7d:b5:31:09:14:01:d7:8f:b9:ee:d7:
3b:c0:4e:cc:c0:2a:74:12:36:29:09:71:bc:f4:ca:
3f:13:37:c9:1e:18:24:70:43:65:a2:2f:1a:13:48:
2a:2b:45:5d:71:6a:69:98:5d:92:fa:d8:1b:d3:ec:
a1:75:b3:f0:37:8c:e5:32:e0:47:19:a6:9d:79:4f:
f7:a9:2c:d9:4c:a3:d3:35:3f:00:19:67:cc:fd:c9:
47:be:89:75:9a:00:b1:d3:aa:41:dd:7d:17:64:5c:
99:d2:ee:59:8b:13:78:9e:81:03:ce:8b:f7:87:b0:
2f:c5:0a:c9:29:22:7d:0a:79:2f:62:54:55:66:0c:
be:09:8e:ba:14:c7:49:2e:2d:ce:61:41:d1:28:50:
2a:e2:8b:dd:6b:88:58:43:d2:87:ad:dc:38:19:44:
7f:3f:11:95:cc:12:ea:38:ee:7d:8f:6a:a8:2f:1a:
0b:1f:b6:79:2e:77:ab:91:94:49:d3:7e:d8:53:9d:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:94:C6:51:2D:67:E7:1D:D8:ED:90:C1:4A:C5:3E:2E:43:D0:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4f:92:5d:97:e6:ba:28:a6:74:16:2b:e2:60:c3:79:95:93:0e:
6c:ba:0f:56:10:54:b2:93:5a:33:c5:5d:15:09:3a:84:e3:50:
8e:93:42:38:40:e1:dc:7b:dc:1a:90:21:01:7a:34:f3:5d:ca:
03:87:7c:13:b1:a2:a4:7c:eb:58:c8:50:05:c4:ac:26:3f:29:
72:60:07:07:76:b3:16:b4:da:4a:33:c9:3d:fb:94:a0:ec:cb:
0a:12:3c:fb:d1:81:74:3f:e0:2b:4c:04:52:ff:6d:1a:f5:69:
6e:37:86:e8:3a:23:5b:bd:72:8b:89:2d:c1:8d:cb:ee:68:6b:
4d:f8:2e:bb:01:fb:83:71:f8:5d:5a:1d:6b:f0:39:bf:4e:2c:
2a:19:82:48:16:89:1d:30:66:8c:29:a6:72:28:8c:7a:42:5c:
fd:3f:ae:41:fa:ff:63:1f:05:33:7b:fe:98:01:5d:4f:fa:3e:
9b:4f:d1:d8:78:36:11:20:2b:3c:fc:05:b5:22:7c:05:0f:27:
a7:4f:e9:40:de:88:12:b1:4f:f9:97:c5:19:21:d6:b2:59:f7:
a2:1e:7d:34:1c:2c:b2:99:bb:f5:bd:77:0a:8f:e4:a7:21:93:
70:6c:9f:32:0c:43:dd:5c:bf:46:97:df:86:a9:a7:49:c5:02:
2b:62:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:23 2025 by rpki-client on console.sobornost.net