Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ef58881-4ef4-452a-8846-08d42ca42c0e.roa
File: 0ef58881-4ef4-452a-8846-08d42ca42c0e.roa (raw, json)
Hash identifier: j7ohlHkBeeliEbtZE+9HYbR72FJ60CKCx+Qk4mQ9zf8=
Subject key identifier: C4:D3:7A:17:44:E9:61:FD:A2:A1:4A:88:B1:88:C8:00:5E:80:7F:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F299B5FFDFEBE9C02065AC63D5C32FD0D900043
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ef58881-4ef4-452a-8846-08d42ca42c0e.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.83.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:29:9b:5f:fd:fe:be:9c:02:06:5a:c6:3d:5c:32:fd:0d:90:00:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=db8686306ec7caad8f6b18b8d3af4a3f51bd64dd121ac4eb591699e1626ab5a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:17:d0:98:0d:98:ac:60:14:45:5f:2d:07:
ed:16:34:e0:40:f3:72:61:7f:75:9d:e5:bc:8c:0f:
a3:35:19:a2:35:02:71:63:b5:31:3f:2b:4d:93:3f:
41:05:2c:fc:71:58:7a:c9:58:56:97:a3:c7:6b:3b:
6a:8d:b1:82:ec:ea:f0:de:e1:e9:29:eb:c4:9e:f2:
ed:c8:2d:2f:8f:2a:4d:98:f4:4d:2d:70:50:72:7a:
b2:b1:60:bf:b5:1e:5b:71:9a:3b:d2:cf:06:26:90:
93:99:e8:0b:42:fd:81:dc:a0:c1:e1:8f:5c:8f:12:
aa:33:07:ff:ca:bd:9c:8e:11:d3:8d:4b:03:28:fa:
ce:56:d6:f4:d8:c3:86:22:de:6e:0c:52:57:25:01:
4e:58:77:36:70:2d:ef:49:20:da:10:8c:c2:b3:ac:
ca:0c:5f:b8:07:6e:1d:82:ad:52:87:f6:b3:83:5d:
55:c6:19:0c:af:da:a5:f4:84:3b:8c:32:1a:fe:12:
95:54:45:db:b4:60:43:58:d2:73:b4:43:b8:ad:b9:
f2:32:5e:93:8e:82:3e:40:ca:99:51:b4:0b:19:0d:
64:cc:0d:36:97:fe:be:87:27:83:93:ca:75:9e:68:
04:da:de:d1:1e:b3:6e:12:79:91:9e:e6:2b:55:71:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D3:7A:17:44:E9:61:FD:A2:A1:4A:88:B1:88:C8:00:5E:80:7F:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ef58881-4ef4-452a-8846-08d42ca42c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:7a:06:94:a1:48:6f:67:03:d0:25:83:92:e7:1d:2f:b4:67:
de:ec:65:9b:88:31:fb:4e:fe:70:72:80:50:f3:37:20:21:86:
f7:39:78:19:36:47:c8:e0:0a:a1:eb:55:81:0e:4b:c4:43:23:
a7:53:b6:2c:13:32:81:e9:e5:cd:93:e6:29:1c:e8:ae:23:b3:
7f:e6:6e:ef:2f:1d:53:88:42:70:52:c0:5e:b1:50:3c:a5:cf:
6f:e3:2b:5f:ce:e0:fc:b3:f1:53:11:76:d9:6a:ea:2a:32:b3:
6e:9d:9f:b5:f0:df:ad:26:e3:32:6d:46:20:d2:a3:d3:0b:28:
aa:6d:36:d0:05:11:89:34:94:97:76:48:24:20:f0:03:f2:42:
78:be:22:98:e0:3e:7e:3f:c9:aa:77:fc:42:a9:48:a8:f2:8d:
98:c3:82:1d:42:7c:34:5c:8f:a5:9a:e4:0a:67:73:2b:1a:15:
2b:a1:ce:11:56:2f:3d:a3:9e:16:72:34:ea:b4:56:31:94:67:
51:57:88:8a:73:98:d9:34:2a:b3:7a:3d:2d:94:cb:4c:4b:f3:
16:a1:9d:ed:90:e8:6f:cd:67:6f:58:43:ed:82:d4:ad:3a:71:
a1:b8:5e:e9:86:6f:2b:db:bf:41:fc:61:b1:1e:a9:da:09:99:
57:a8:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:41 2025 by rpki-client