Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
File: 06bef077-f186-4620-b0e8-edae475c1fe6.roa (raw, json)
Hash identifier: htfhMdC8LMNvdofSrxSn9eYLyC6V9Vfx/QYri799fJc=
Subject key identifier: EB:F5:41:BB:2E:AF:60:47:5B:9D:A6:3E:5F:3A:3B:A6:68:0C:15:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53A20A1C9F2EB217213181542A8F8D129CA64FA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a2:0a:1c:9f:2e:b2:17:21:31:81:54:2a:8f:8d:12:9c:a6:4f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=44ed367ac6905d48267efefd4926dfbe363268afb990c48767b12b9feb3c8c61, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:d7:e6:38:7e:55:b6:25:50:03:b0:cf:1e:
68:8e:46:75:40:78:71:cd:ae:2d:5b:d1:6e:50:b5:
4e:2f:e2:70:4f:42:b4:1c:49:fe:33:21:1e:42:29:
68:c4:1c:a4:05:7f:f3:65:13:48:36:2d:6c:49:da:
d9:1d:9d:64:06:e6:a6:0e:99:82:ce:fe:c5:00:6d:
50:ad:2c:9b:5d:68:22:85:8d:9e:27:97:b4:d0:91:
f2:e1:7c:3c:aa:f7:af:5d:75:a3:b0:5a:0a:e3:8f:
25:9e:10:44:f4:04:2a:30:ff:af:92:b7:0b:d7:2c:
ad:3b:d2:b0:cb:d8:44:11:d0:71:0f:52:b0:b8:fb:
b5:fd:31:44:0d:28:6e:2a:e8:54:9d:8c:f3:bd:b1:
be:f6:f0:e5:b5:1e:cc:a8:c9:96:6d:7c:38:8c:10:
08:68:38:f6:8c:bd:88:8a:14:70:33:bf:5f:78:db:
c2:5c:97:99:44:a2:e2:f9:ea:6b:10:66:0f:00:ab:
84:ab:41:a1:5e:21:4b:71:20:9f:3e:a9:40:13:a3:
8e:ea:a2:c5:03:bb:4c:64:76:5e:c1:36:ca:dd:bc:
cc:f5:84:19:81:26:96:62:1f:37:67:c4:4a:8c:06:
75:8d:dc:28:0d:e1:b3:fa:e6:04:3e:de:ab:02:83:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:41:BB:2E:AF:60:47:5B:9D:A6:3E:5F:3A:3B:A6:68:0C:15:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:53:55:31:ac:81:34:a1:4f:bc:c9:c5:63:65:d3:9f:e1:31:
26:6c:0d:f0:bb:c4:2b:8b:eb:d5:56:3e:08:c6:06:82:ff:48:
d9:db:60:12:4e:a2:02:3b:8c:5b:d6:d3:d3:63:22:57:9b:d0:
b9:6a:aa:6c:4b:6f:d9:3c:00:87:bf:71:0c:ec:f9:88:7e:32:
a7:be:59:72:20:e8:f6:1e:b9:24:c7:22:ce:4b:09:d5:fd:d7:
dd:e7:de:7a:58:d9:0e:25:61:9b:36:33:fa:40:8f:19:d9:b5:
54:ca:ae:b8:d0:6c:ad:30:57:f1:7b:12:85:12:74:7d:19:66:
d3:33:da:df:b8:00:ad:ae:33:d7:97:1f:58:88:45:ce:2b:d7:
a6:ba:cd:8c:7f:17:5a:ee:c6:9e:1c:c1:76:e7:5d:b9:b1:a3:
3a:81:15:35:5d:65:92:83:de:3f:6b:f7:e6:55:d9:63:59:d5:
46:e2:6b:a6:02:67:73:08:cb:50:17:e8:5c:2e:4b:2c:10:1b:
ef:01:ea:d4:0f:1b:96:4b:dd:1f:52:16:bd:53:aa:8c:63:06:
ab:ce:22:7c:85:e2:c1:5b:da:bb:6f:dc:29:56:1a:01:0e:d6:
14:cd:51:92:a2:53:4f:05:bc:dc:8d:63:e3:15:64:bf:16:c3:
e2:91:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:05 2025 by rpki-client