Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d892466d-c02f-45c4-85be-dbde337ce172.roa
File: d892466d-c02f-45c4-85be-dbde337ce172.roa (raw, json)
Hash identifier: vux89JiEK4bB9R1QOYIBYLmd4VOXaITGZnbxiI46/6w=
Subject key identifier: AB:28:93:0B:3A:EE:20:C9:72:21:EC:89:63:9D:ED:C0:FD:A9:E5:EF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 702CC988DAFBEB1CE389FD88CDF6CE31938518C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d892466d-c02f-45c4-85be-dbde337ce172.roa
Signing time: Tue 01 Apr 2025 00:01:44 +0000
ROA not before: Tue 01 Apr 2025 00:01:44 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 167.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2c:c9:88:da:fb:eb:1c:e3:89:fd:88:cd:f6:ce:31:93:85:18:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:01:44 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=25ffd3f8d8aa131532e49d22f2097bdd392a7f3baf802bc7cb9425c3a2d08877, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:0c:07:3f:9b:ff:8c:2f:c0:03:77:e5:bd:
f2:e0:f4:5b:61:1a:92:cb:82:e2:7a:ce:63:48:c1:
e6:08:0c:e1:a9:f3:56:73:59:f5:ff:82:62:d1:b8:
e2:ae:a4:41:6b:ab:c2:40:57:18:b5:35:0f:fb:75:
8e:ae:79:9b:31:0b:c1:4a:db:56:14:d2:06:a2:a1:
fe:93:cf:31:c4:f2:b2:db:3f:62:9c:6a:66:0c:6d:
ab:b9:e1:9c:cd:32:a9:b8:98:39:b2:a4:fe:b7:d8:
33:bf:eb:b8:49:a1:33:01:1b:72:11:39:af:08:46:
db:b1:68:e0:c9:f2:dd:1c:ee:ef:19:f6:f8:3d:1b:
e7:a0:4b:b9:f1:25:c9:0e:db:af:09:73:f1:84:f6:
ea:c5:7b:42:00:1f:c0:c0:de:28:de:d9:6d:b6:3e:
fb:3c:2a:9d:c9:87:08:50:4d:86:ab:fb:9c:67:01:
e2:54:34:3a:6e:02:50:fc:f7:ad:e4:93:71:a1:9b:
d5:d1:30:5d:dd:20:50:1c:7a:be:e6:44:dc:80:fb:
56:a5:2c:e4:e8:90:47:7b:55:bd:67:8d:d8:e5:30:
70:b1:34:26:9d:23:47:09:f5:33:3c:f4:fc:9f:2d:
9f:a0:9a:a3:cf:99:e9:89:5d:d8:10:ea:7a:52:50:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:93:0B:3A:EE:20:C9:72:21:EC:89:63:9D:ED:C0:FD:A9:E5:EF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d892466d-c02f-45c4-85be-dbde337ce172.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.241.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:62:bc:05:9d:1f:f7:99:80:6a:47:90:8c:30:08:02:e2:e1:
02:02:5b:19:0b:0b:e6:69:8f:a8:11:05:69:40:cc:4e:f9:a8:
83:8d:06:d3:d1:70:09:38:f3:a8:1b:ae:11:68:e5:78:4f:57:
01:e0:f1:6f:90:af:1c:f6:a0:3d:d9:42:48:f0:21:a3:da:ad:
ee:0f:80:4b:55:7e:96:82:9a:5f:22:91:a8:1e:b5:89:b1:a9:
e3:7e:d9:28:49:5a:b3:6c:4b:d4:30:65:bb:8c:a7:34:b1:e0:
98:cc:5a:93:7e:c6:65:d4:53:92:3c:4a:5b:9c:ac:9f:7d:ba:
ad:e4:75:0c:f8:81:b6:5c:2a:39:22:3d:1f:d2:fd:88:a8:db:
71:40:31:52:46:e9:7b:99:33:b5:0d:7d:77:e8:74:e4:fa:2f:
c2:7c:42:0d:6b:a7:38:9e:59:86:a0:e7:1b:af:62:e8:fb:35:
8c:99:b8:e4:b9:32:ac:07:9f:20:59:1b:9c:e6:17:0e:0d:4b:
e8:f0:9a:8d:38:47:ff:24:75:47:2d:b0:24:14:83:ae:1f:85:
ff:80:d6:2d:75:87:1a:86:27:0a:ce:cc:8a:7a:41:46:a2:43:
72:ee:51:a9:a4:83:cc:14:ab:a5:13:50:bf:c9:5f:63:0d:a1:
b5:8a:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:23 2025 by rpki-client on console.sobornost.net