Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa
File: 0022bd1b-6926-4965-8a67-25901363fca8.roa (raw, json)
Hash identifier: BM1m7qOkHWYDVXHFirze4RQYvYVmqgwhAv+eHQxUPRc=
Subject key identifier: EC:01:5D:F3:5B:22:91:82:65:5B:DC:9D:EE:B4:B6:9A:65:11:BF:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B1E8BC5327D7180267099DCE1A0EB59ACA15F73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1e:8b:c5:32:7d:71:80:26:70:99:dc:e1:a0:eb:59:ac:a1:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=a1533e526096728d2ab3b98a44f081868f5f5d52c659390326f7b91efa32cbc6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:58:84:e0:b4:8a:fb:34:49:bd:a0:ec:cf:
5c:61:af:2d:6a:88:50:70:9f:33:75:8e:24:e9:47:
52:50:39:aa:b4:a4:8d:b4:48:64:6e:b2:25:17:61:
77:b5:41:d3:61:77:bb:de:dd:01:f4:a3:8b:6e:ae:
94:40:62:71:b3:f2:ef:72:38:b2:1a:d4:ea:bb:6f:
3b:87:f0:5c:ca:6b:fa:9b:ec:9b:98:b4:c2:93:25:
9b:04:7d:16:15:16:2b:96:bc:e1:e3:5c:4e:e2:f7:
88:5e:f0:8f:c9:49:a3:7c:7e:b2:10:4b:10:17:fe:
2c:bd:67:1d:7b:9e:62:4b:e9:a4:36:fd:7c:31:13:
bc:45:6e:03:03:c8:ec:f3:c3:7a:01:eb:c5:f6:fb:
0e:0e:4f:e2:bd:57:cb:a5:85:a7:de:a0:7c:b8:e3:
0c:0f:80:f4:f7:21:7d:37:16:5c:c8:5e:ff:da:c1:
ea:ff:cf:98:82:9e:75:08:14:ec:8e:b4:b9:f5:9f:
b3:26:53:d7:5a:2b:f0:89:68:18:a6:16:b9:de:bc:
23:05:45:91:3c:2b:53:4f:09:ad:9b:e1:a9:71:ff:
2f:e4:fa:cb:c8:10:3b:43:8e:ac:b3:59:6f:85:2c:
63:78:c4:ba:d4:ed:4e:8f:d5:50:bf:54:89:97:5b:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:5D:F3:5B:22:91:82:65:5B:DC:9D:EE:B4:B6:9A:65:11:BF:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.104.0/23
Signature Algorithm: sha256WithRSAEncryption
22:d1:f6:c3:41:55:38:12:82:c7:9d:38:8b:fd:76:c0:83:30:
19:c0:01:69:8a:23:04:60:c2:19:2d:6a:21:1f:a3:1e:3a:fc:
f8:ee:fd:cf:3c:ba:24:44:80:25:d6:60:8a:f4:f6:68:19:a6:
fb:a9:13:31:9b:17:c1:dd:ac:e7:d9:7b:70:33:f0:4e:0f:f5:
12:c9:5c:ee:14:56:dc:5e:cf:4e:21:84:84:0c:97:94:94:54:
f3:f9:41:a5:ef:03:5c:37:c4:69:90:43:3a:63:60:4c:0b:ba:
57:9e:14:ec:45:4a:ee:15:cb:fc:04:3b:8b:bb:03:7b:88:cd:
69:5c:7e:d8:48:19:b2:9c:91:0d:63:fc:8e:0a:5f:05:79:c9:
31:c0:96:88:90:18:4d:df:a9:e6:ed:15:6c:16:e2:87:a8:f3:
d2:87:0b:59:84:89:7a:6f:05:e9:0e:af:dd:f3:7e:41:f6:39:
96:d2:6a:24:de:96:ff:4c:58:a2:92:91:98:4b:e5:5a:a6:04:
87:17:75:3c:ac:a8:ac:b3:a4:12:c2:f0:3a:ae:c3:4a:ed:bf:
8e:a6:3b:3f:99:0b:6e:87:d9:2b:85:8f:3f:14:b2:aa:85:27:
8b:ec:61:f4:a3:e9:00:aa:f0:df:da:75:eb:b9:8e:07:61:d2:
ec:cc:98:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:26 2025 by rpki-client