Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa
File: 04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa (raw, json)
Hash identifier: LJTShl+Q07d7EA2FahbUK9MUM8TDULBd6NBRmSkQVHE=
Subject key identifier: 3C:A9:AE:92:A7:B5:FB:5E:56:EA:73:6D:64:62:1B:0B:7E:8D:27:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3CFEBE9A9482A3EF745B6F4A9EF93C6C04E697BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 75.101.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fe:be:9a:94:82:a3:ef:74:5b:6f:4a:9e:f9:3c:6c:04:e6:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=fdb016e7ce7e5b6aef9a88d26dd6e1b3e555387419a25cfa924b28a7b75c36c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:50:f9:0a:98:c0:ce:7d:86:31:3d:3a:06:
ea:e5:bb:45:be:f6:c3:ed:49:39:1b:27:04:a5:c6:
2a:e2:7b:b6:97:16:70:54:95:4f:d4:28:37:3c:7a:
79:02:bc:ca:eb:62:0e:d1:34:a1:8c:e9:1c:ca:56:
44:65:7f:d2:11:9b:e1:a6:9f:07:b1:5d:0a:9c:14:
98:a2:a0:46:23:f2:c5:99:2c:15:f0:c0:13:ed:3c:
9c:0f:75:5b:ab:b9:1f:ba:22:a0:ad:a0:10:9a:9c:
ba:b7:49:c0:7b:4f:7f:5c:22:13:fb:32:a9:c7:78:
b1:14:a0:4a:df:09:94:42:8e:aa:9e:10:3e:03:d6:
a6:fa:23:bd:14:9e:f8:3f:33:d6:49:95:db:5d:7b:
04:ad:d5:6d:a2:de:28:8a:6d:85:bc:1c:5a:0f:ec:
e2:af:81:68:16:5c:36:9a:8b:01:ab:94:f3:bd:6a:
df:c3:c2:84:4a:bd:43:62:6d:11:43:17:1f:5a:21:
e6:81:98:42:ed:8a:2b:df:37:ad:61:06:9e:69:e5:
8c:6b:fa:9f:c7:2a:41:e4:5c:86:37:55:c5:ea:c4:
ab:7f:1f:43:ec:ab:5b:0b:4e:6b:98:c8:6c:3f:6b:
2d:03:72:4f:4b:36:27:94:c9:76:6d:0d:dd:6c:0a:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A9:AE:92:A7:B5:FB:5E:56:EA:73:6D:64:62:1B:0B:7E:8D:27:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.101.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:85:5a:fa:b4:e9:c3:ea:85:8b:b9:b3:18:32:6b:41:fa:27:
5f:9a:4e:0d:11:e6:d7:5b:ca:eb:5f:0f:c1:72:ef:19:bb:02:
7b:d2:62:6a:6c:63:bd:de:ad:63:56:d0:85:c5:f6:dc:8b:37:
3d:f0:9f:a4:20:2a:1d:34:ee:1c:8d:ff:a0:a0:7e:9a:65:fe:
58:12:be:43:7e:77:f3:bf:3b:c1:cd:16:6f:00:ff:74:5d:03:
b4:fa:4e:fa:44:01:7f:51:ec:af:ec:26:e0:8a:e4:f1:96:2d:
a0:66:33:c0:ea:af:2d:92:2c:84:8a:0a:8b:61:3b:82:0a:44:
3c:73:a1:3e:70:02:d9:3c:77:4a:f2:5b:18:49:59:ff:6b:cd:
bd:1e:6c:7f:e2:c9:3f:37:92:5b:ac:75:1c:31:33:3f:45:66:
ea:f9:ef:9b:bb:fa:ca:e8:72:39:8a:f2:55:13:0d:a0:d9:31:
72:3c:c2:de:ab:91:24:d7:75:dd:62:2c:31:c9:06:6b:5e:74:
90:c1:5c:3c:98:0e:db:21:48:c9:07:7b:4c:23:c2:88:52:ed:
e7:8e:b2:5f:7b:36:82:68:de:d3:c9:a1:c4:d2:7b:7b:92:77:
51:54:8a:84:1b:fb:3b:ea:09:f7:7a:3b:f2:2a:25:dd:f7:1e:
81:1c:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:28 2025 by rpki-client