Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa
File: 18e0cc1c-bcfe-419e-8a59-2910f188f118.roa (raw, json)
Hash identifier: pdEUoxDS9alibKBb41Nq8ciuoU9asLmdDLd/NzxTgV8=
Subject key identifier: 94:79:08:E1:C7:76:D7:AE:F7:D1:9F:A7:7A:F8:C4:76:2D:3A:23:4E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69008CC2A3E635FE50259EC9E0B71E131F000FC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:00:8c:c2:a3:e6:35:fe:50:25:9e:c9:e0:b7:1e:13:1f:00:0f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=5111b2d7752e5f996657a05aff754858e4b1acbb611536398dc4e8f9bf01ae83, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:68:f8:d4:6b:2f:e7:40:ea:e0:a5:68:2b:
6c:d0:bb:34:36:4a:39:6b:37:5c:61:8a:1b:95:82:
63:46:68:54:02:bb:2e:da:87:17:51:96:98:0b:85:
84:05:0f:09:29:57:18:77:75:d9:b4:18:80:03:ac:
d6:78:df:6a:0e:0f:2d:87:e9:fb:01:df:8e:83:3b:
dc:1d:3a:6f:3d:12:af:d3:b7:09:d1:0f:5a:e4:d5:
a1:ce:aa:89:3e:23:b9:3c:90:0a:02:b5:3a:04:d0:
2b:4a:94:e5:95:22:bb:f1:5a:f5:d5:ce:57:18:34:
9f:59:87:5f:8c:01:b6:7b:c5:75:39:1d:fc:b1:a3:
8f:c6:43:ef:05:d4:03:13:b8:8d:6f:21:20:49:cb:
0b:7d:b1:fd:70:f1:b2:58:c4:07:1e:15:de:03:77:
3c:8e:67:51:16:c6:47:3a:62:43:2e:38:45:c4:5f:
36:5b:3a:87:3c:d1:a4:72:a0:5c:08:8f:d1:9c:26:
4f:8b:5f:51:63:34:60:aa:02:06:b6:b0:86:f9:50:
92:d2:cc:72:58:f6:fa:8a:13:ec:e5:23:26:29:7c:
af:e5:4d:0c:ac:64:41:16:06:53:de:61:30:1b:a0:
bb:cd:b0:d3:56:f4:4e:a8:04:e7:b6:fd:c0:09:89:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:79:08:E1:C7:76:D7:AE:F7:D1:9F:A7:7A:F8:C4:76:2D:3A:23:4E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:47:fd:79:4e:0f:d3:4c:23:cf:e7:7f:e1:4b:a7:a0:77:cd:
9e:38:ab:04:54:f0:38:45:f5:e6:72:4a:dd:10:6f:0d:68:cd:
97:8a:6a:52:eb:a3:a8:6b:ac:d2:fa:84:f4:e5:67:bd:6a:68:
f0:df:31:10:33:88:88:fa:ce:d1:76:9e:0c:6c:05:c1:a3:bc:
17:6a:f7:5f:91:19:f6:8b:28:86:79:09:10:a5:a5:e4:1b:fe:
7a:a6:05:ba:fa:64:ab:d1:fc:57:1f:5e:8a:3f:d1:85:c4:be:
cb:82:7f:81:0d:c3:a9:7d:9b:05:22:d0:6d:15:d8:5b:bc:89:
23:77:07:df:a0:0b:e1:1f:ce:23:d6:8c:a3:9d:85:3e:6d:f9:
b6:60:30:a4:04:10:ad:31:66:9f:2a:04:52:34:f0:bf:e3:e0:
c7:04:8b:da:b4:3f:f5:36:66:c2:c7:02:d3:fe:4a:53:71:6b:
34:85:d6:52:42:65:3d:63:a3:1b:10:a1:55:88:1b:63:06:a5:
3c:9c:be:70:9c:a4:6a:a9:ec:4b:b0:02:70:0a:7d:41:b6:ab:
d8:b1:5b:9c:7e:28:83:b4:b9:e2:75:d2:48:a1:9e:95:f8:d4:
f9:8c:c5:b5:5e:72:a9:69:ae:08:fb:36:66:7a:49:44:81:a8:
2f:e3:27:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:15 2025 by rpki-client