Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dd31679-fe85-4b81-8fdf-700ab18fc529.roa
File: 0dd31679-fe85-4b81-8fdf-700ab18fc529.roa (raw, json)
Hash identifier: S7XlXVNx4GTo/v35VyIj3WfgWRl8uVwWglg6iYHwwHs=
Subject key identifier: 12:6E:0C:10:AE:64:05:84:5E:94:F8:36:61:43:96:C7:5E:EB:88:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77F9301F37F199C3026B5286475F20D50BF44B53
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dd31679-fe85-4b81-8fdf-700ab18fc529.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f9:30:1f:37:f1:99:c3:02:6b:52:86:47:5f:20:d5:0b:f4:4b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=bd19e9238def7dec0931f0d8cbb6d035beffc3c6853de60fafb6350c84affc50, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:b8:64:66:29:6b:48:f1:c9:ff:47:cc:0d:
5b:54:96:59:fc:23:d5:6e:a3:cc:76:95:14:e0:ab:
52:ad:6c:8f:76:42:2a:af:13:ab:91:6c:f4:20:c1:
85:c9:50:c3:ed:4b:0c:17:e4:8a:07:7e:7a:aa:6c:
0d:d2:41:d1:e0:f2:c3:db:7c:56:2f:5b:36:32:75:
18:0c:5d:fb:70:2d:1e:07:b7:03:71:32:32:0b:96:
03:8c:02:c4:28:2e:2b:14:bd:b9:24:6e:ba:78:f7:
a8:2c:c9:f6:c3:f1:1d:ea:71:22:ee:a0:76:25:46:
fc:f8:f1:0c:de:15:27:45:f8:15:f4:24:73:af:d3:
e6:7a:ba:af:29:76:ce:57:12:7d:4f:a2:59:62:c6:
65:47:3a:c1:66:dc:2c:14:bf:bb:b7:3d:c9:c6:48:
0a:09:30:e3:6a:76:75:4f:dc:39:a9:9c:0e:0d:5b:
99:6f:72:39:1d:7d:78:6e:a8:ef:6e:2e:42:eb:be:
68:18:01:5d:4e:6c:08:8a:18:ff:65:cc:74:f5:08:
12:cd:e8:04:03:6f:39:49:24:89:44:90:62:28:1e:
a3:d3:82:65:56:d7:d0:c7:46:ee:dc:b4:42:dd:1a:
b9:84:67:52:4c:1c:42:95:15:0e:ce:05:e8:3e:5c:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6E:0C:10:AE:64:05:84:5E:94:F8:36:61:43:96:C7:5E:EB:88:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dd31679-fe85-4b81-8fdf-700ab18fc529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.197.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b8:b3:4f:8f:73:b8:f3:53:3d:1a:57:cc:ee:a2:5a:85:61:
8e:2b:6e:90:2d:e6:e5:9e:8b:18:0c:bb:d9:fb:06:c9:54:cb:
aa:77:f4:db:f6:a1:57:6c:d0:2d:8d:77:66:38:df:c1:6e:b8:
0a:9c:d6:e2:56:6f:39:29:ee:1e:b5:aa:13:ca:d5:ca:66:41:
d4:1a:10:a5:3d:a7:a9:f2:90:fe:a2:50:ae:91:f9:61:1c:aa:
65:c5:07:98:86:59:18:1c:05:40:02:df:b3:89:ee:b6:2c:11:
56:6b:83:71:4e:11:0a:62:5b:28:f7:fb:47:b0:06:2f:34:72:
5b:ea:91:ab:c2:b9:8d:fa:89:aa:de:8b:1a:b6:65:7e:2b:f5:
a3:20:fd:5d:b7:fd:f8:24:2c:f4:90:02:0b:13:38:2a:ac:51:
7a:14:0c:cb:dd:d9:db:ee:d2:d5:29:c6:11:7f:19:a6:e8:f9:
db:45:09:c9:6d:3c:a8:d9:50:ae:36:48:fc:0c:69:95:e1:10:
19:03:5a:e1:66:7d:9c:f0:db:60:e7:f7:9f:97:f0:90:c3:95:
7c:5f:9a:7c:d9:f5:c8:c9:37:50:59:1d:8b:50:09:91:aa:01:
83:83:49:73:b7:a9:d7:81:97:26:c3:63:de:b9:9c:c2:44:f4:
a0:89:3b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:13 2025 by rpki-client