Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeda5477-0c8c-4360-9fa3-10665655a225.roa
File: eeda5477-0c8c-4360-9fa3-10665655a225.roa (raw, json)
Hash identifier: SSDe5MmGH99wA7iLxPnMB8IILrhnQ12C678rqaJfbGU=
Subject key identifier: 29:D6:DA:DE:E0:04:91:C6:AC:CF:26:F3:40:15:CE:B0:C7:F6:22:10
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06D9246BBB5C191AE55DB8E97D731C83C0EA22E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeda5477-0c8c-4360-9fa3-10665655a225.roa
Signing time: Tue 08 Apr 2025 00:51:22 +0000
ROA not before: Tue 08 Apr 2025 00:51:22 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.82.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d9:24:6b:bb:5c:19:1a:e5:5d:b8:e9:7d:73:1c:83:c0:ea:22:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:51:22 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=afd3fc480da8332ddcf587a6391da9ea15b88eb964a3f1220fba12ca4f847f0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:40:30:3c:49:88:e2:af:09:4c:7d:a3:83:e0:
52:01:17:97:77:93:cd:3d:2b:de:cc:dc:6e:6f:f6:
1d:03:48:39:2d:95:2f:f4:28:34:27:8d:d7:1e:b9:
4a:b6:c8:ff:76:af:53:2c:0a:64:04:92:11:29:92:
0c:8f:98:75:3c:4a:bd:cd:55:ec:28:14:90:dd:6c:
5d:76:df:8c:b9:5b:ee:f8:da:9f:39:43:c3:dc:e1:
85:96:4d:0c:a1:d5:a5:8f:09:42:8f:c5:a5:cf:8f:
6e:28:f6:88:f3:0b:ef:bd:2b:70:b1:e3:ef:ce:04:
c4:59:3d:f8:36:43:9c:41:86:52:2b:0c:fb:a7:68:
36:a6:aa:19:bb:b6:ed:b5:44:72:f0:86:b9:49:cf:
9b:a7:ea:c4:27:b7:c9:3f:aa:d4:68:24:ac:63:eb:
94:b0:ab:fc:98:91:fe:89:f7:86:01:ae:1a:a2:27:
35:b4:92:76:09:be:6e:28:d5:99:a5:d7:8d:30:20:
3c:04:87:ca:d9:58:de:d2:1c:f9:4f:da:94:0f:62:
45:1a:98:45:d6:5e:9a:85:aa:76:b0:4b:b3:47:5b:
d2:f0:19:2c:ee:03:ec:aa:73:1d:34:bc:ee:77:35:
bd:1f:97:da:e7:38:af:b0:77:e8:8b:3a:25:df:e5:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:DA:DE:E0:04:91:C6:AC:CF:26:F3:40:15:CE:B0:C7:F6:22:10
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeda5477-0c8c-4360-9fa3-10665655a225.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.175.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c0:8f:c2:0a:19:55:b3:8f:97:fc:22:3b:8b:9f:15:6c:99:
de:c2:46:97:c5:60:ca:96:d4:38:79:73:ec:73:12:63:06:b4:
53:a2:1d:48:aa:bc:df:d4:13:00:01:c9:1a:5e:73:8d:64:39:
67:c2:68:d6:94:bd:ec:22:bd:0a:97:3d:d1:8b:0d:0d:e0:ed:
f8:b3:77:7d:c4:d1:a3:b7:f7:b3:7f:33:6a:8b:ea:c2:5b:c2:
3f:ce:5b:d9:96:cd:58:0d:d5:06:99:0d:b5:5f:01:60:75:0f:
95:93:5c:b4:89:55:dd:4d:93:6f:50:c5:b7:ea:72:ee:18:02:
e0:32:42:46:9c:6f:0f:ed:3d:c0:b7:45:e7:49:21:6a:5e:ca:
22:00:d3:57:23:65:a9:b3:d4:59:22:b2:aa:89:ce:3f:04:87:
a7:10:81:cb:7d:48:02:b5:4d:e7:71:b0:2f:86:4a:78:c9:0b:
77:67:3b:f9:37:59:0b:7b:5d:a7:c3:b7:5b:8f:20:af:10:86:
9a:75:68:55:a1:27:66:15:ab:e1:ea:69:fc:c8:80:dc:00:dc:
7e:7a:b4:a3:59:a6:4a:f2:88:dd:70:3d:0a:36:1d:22:a0:2b:
e2:5d:4e:26:6e:bf:67:52:5f:8d:a1:23:00:d2:4a:94:06:1a:
a5:ee:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:25 2025 by rpki-client on console.sobornost.net