Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb04be52-0a94-4148-a196-c6ebf466a304.roa
File: fb04be52-0a94-4148-a196-c6ebf466a304.roa (raw, json)
Hash identifier: L2UPjq1eUsPmMuaC54NDzNN7IDgm6sW23V1zCQcK+vM=
Subject key identifier: 36:6D:EE:0A:CE:07:DD:16:B9:5B:E2:28:39:77:1A:1F:B4:B6:0D:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E58176C65074FB6C74BE3170930FB98A4A1D086
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb04be52-0a94-4148-a196-c6ebf466a304.roa
Signing time: Tue 08 Apr 2025 00:52:03 +0000
ROA not before: Tue 08 Apr 2025 00:52:03 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.252.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:58:17:6c:65:07:4f:b6:c7:4b:e3:17:09:30:fb:98:a4:a1:d0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:52:03 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=e28f4e15131aa27de3b8884607da00212576f1b22ef7d3aa47a508c614009dd4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:14:d0:4d:39:89:7b:64:61:01:23:94:b6:
2c:e1:8e:62:04:39:37:07:8c:bd:fd:e7:93:3b:5d:
3b:75:7d:0e:68:f7:7f:be:b2:ef:b5:38:4f:98:bd:
45:e6:92:a8:76:76:3e:9a:8b:01:61:e2:27:a8:b0:
57:59:08:09:9b:9c:8e:36:7f:6d:79:72:3c:9f:ff:
88:31:dd:f9:d1:0e:db:1e:45:b7:09:3a:69:c1:a9:
9f:bc:76:5e:06:19:c2:2c:ce:7a:a8:61:26:8a:d6:
7a:34:d8:54:d4:3a:cc:3c:8f:bc:e6:ad:41:2b:03:
e2:c1:b1:ed:b4:86:16:b7:9f:47:37:c3:51:c8:e9:
9f:17:e3:19:57:5e:e6:df:c2:78:e5:ac:8b:54:49:
cf:c9:c1:a2:5f:90:d8:3f:ca:15:be:32:c9:21:75:
1d:a3:44:9a:2d:06:bc:09:e7:40:fb:92:47:4d:92:
21:48:79:56:15:20:16:75:3f:9d:41:3e:d8:cc:11:
aa:4f:01:bc:f0:90:0a:df:29:23:08:64:3c:8c:03:
3b:51:4b:50:47:07:49:23:48:03:f5:d5:77:8a:0f:
a2:82:ea:54:29:0a:bd:d8:6f:6b:01:3b:90:04:3a:
48:56:2a:0a:85:22:a3:a9:11:e3:36:02:e3:87:ea:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6D:EE:0A:CE:07:DD:16:B9:5B:E2:28:39:77:1A:1F:B4:B6:0D:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb04be52-0a94-4148-a196-c6ebf466a304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.252.0.0/18
Signature Algorithm: sha256WithRSAEncryption
77:a9:c7:2d:49:21:b8:60:80:b0:1f:db:f2:4d:27:a4:b0:6d:
a7:8b:a9:68:8d:35:47:ac:c0:b2:7b:b0:4f:05:a2:79:3e:f9:
fd:05:64:df:43:e9:4b:26:c8:16:4e:7d:2a:18:99:ef:77:ce:
9b:b2:25:9d:ec:ef:05:7a:ba:54:3c:11:49:8e:cb:0c:b0:f2:
a9:a4:72:99:db:80:c6:76:18:6f:cc:aa:a2:84:56:06:db:2d:
d2:ef:52:4b:2f:7a:9e:05:ae:b0:ab:21:60:e1:78:51:89:1c:
88:7c:94:6f:f9:09:bd:b5:f8:cc:c5:58:e5:6e:e5:47:d7:61:
cc:a8:b6:a8:25:e9:69:76:87:7a:56:59:96:87:47:51:76:65:
ee:6d:7a:51:67:a1:4a:e3:af:4a:48:bc:f2:5d:7b:46:39:9d:
46:ad:c0:f0:8d:d9:d6:8d:c2:ad:d6:ac:ea:74:20:65:96:39:
7e:1c:5a:c2:08:c5:26:44:24:ac:0e:5e:21:7c:d9:9d:c4:ad:
7b:21:77:ed:43:9a:77:14:9b:87:4b:86:ec:ae:c1:f0:0b:94:
73:50:3e:32:42:f7:02:8d:bc:7f:b7:34:42:20:a4:2b:14:77:
ce:b2:1e:d4:2b:d1:bb:2b:57:db:05:70:30:3a:f5:a5:6e:c9:
d8:06:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:26 2025 by rpki-client on console.sobornost.net