Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa
File: 17428170-47b5-40b1-8882-bb95915d3ed7.roa (raw, json)
Hash identifier: KobKSmKMeGTbrhgppdeTGnQVkuhorLOP7s918MFFd/w=
Subject key identifier: F5:5B:15:42:4F:07:7A:7F:49:88:E0:16:74:11:3A:4A:C7:66:23:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D5D6712F252F1757DEED00945DF0889639CD65F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 66.109.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5d:67:12:f2:52:f1:75:7d:ee:d0:09:45:df:08:89:63:9c:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=34bb8d63f5fed9481180bf5f4b8fe9b1f19aca6f4cee6764868ac5e5be544e32, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:f9:6a:b8:de:13:3c:34:2f:4b:05:5a:03:
89:82:6f:fe:40:4b:d3:f8:d5:75:e0:5c:5f:47:70:
ee:86:69:f9:85:dc:61:df:8b:ff:17:df:13:b5:50:
9b:53:a4:db:a2:b8:59:60:c8:04:77:93:e6:77:20:
af:5a:59:dd:c5:da:e0:ff:a1:28:23:d7:41:14:1c:
34:3c:3d:12:5d:80:18:ec:f7:8a:8b:2a:d2:a9:ef:
00:44:75:30:57:86:f7:d7:e7:04:93:27:56:3a:f2:
70:f5:19:de:d1:c6:6f:34:5f:e6:71:31:50:d6:f3:
66:c8:dc:23:fb:99:1b:17:f9:62:5c:cb:ab:94:f4:
e3:b3:62:29:1c:1b:da:4c:f0:4e:60:61:03:b3:dd:
0c:e0:ce:03:39:5b:de:37:44:00:6c:60:60:1f:a3:
2b:5e:f8:33:4e:4e:6f:f6:56:dc:43:5f:8f:38:30:
7d:61:a2:c2:9a:20:e8:7d:8c:2c:ae:42:9b:9e:df:
0a:f6:ac:a3:b7:ee:a3:66:fb:27:21:66:60:89:94:
9b:7f:ca:15:7e:96:9c:e0:8f:20:0c:7b:ed:3f:6d:
92:54:cf:2e:21:64:40:41:77:03:f4:9e:6b:e3:be:
1b:5a:14:bf:43:a5:aa:3e:cc:19:0a:37:0a:da:52:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:15:42:4F:07:7A:7F:49:88:E0:16:74:11:3A:4A:C7:66:23:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.109.64.0/20
Signature Algorithm: sha256WithRSAEncryption
78:28:36:e0:cb:6d:d4:a6:d5:1d:fb:b9:5b:e2:2a:85:27:ef:
50:ec:d3:8e:e2:6a:d9:be:02:5b:76:06:ce:d6:39:76:4a:38:
59:e5:f6:1d:65:72:96:d9:82:45:f1:ec:9f:82:cd:e9:af:a8:
76:d6:4a:41:f8:40:bb:14:fc:aa:f4:1e:38:a8:b4:fa:5b:97:
2b:a3:8b:53:2e:d9:40:45:b4:49:ae:b9:dc:c5:5d:af:59:7a:
3a:dd:db:1c:0e:70:76:21:f4:6a:14:1b:e8:49:f0:c2:0b:0b:
8d:03:98:d0:5b:41:bd:bd:18:b5:7f:82:3d:44:6c:48:d4:7f:
3a:c2:28:6e:74:5f:e2:f6:8a:50:3a:65:a0:ae:4f:f7:0f:34:
4b:62:13:a8:ea:f0:8b:68:38:36:3f:6f:bf:37:62:e7:8b:eb:
e3:a2:c7:38:ea:ba:bb:4d:17:ca:42:b7:d3:a7:07:3d:be:59:
b1:01:67:5d:01:29:24:0a:c1:34:85:6d:62:07:28:b5:60:c9:
60:33:81:3a:ff:40:57:a4:9d:df:30:f4:be:73:07:d2:2e:95:
b9:81:5f:29:fe:3d:2a:6f:5d:cc:ee:1d:75:c5:83:9d:9e:d5:
cc:72:b6:e6:fa:d8:43:57:7c:5c:21:21:e9:12:9b:fb:ec:8e:
7f:d0:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:39 2025 by rpki-client