Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1970fdae-d81d-4d44-bdc0-2931ee225a83.roa
File: 1970fdae-d81d-4d44-bdc0-2931ee225a83.roa (raw, json)
Hash identifier: nyfVWIV9+qwBS0vXegia1XkAEV+TXLdYzqMRdwFoypQ=
Subject key identifier: 4B:A8:C5:74:39:15:90:73:70:F4:30:62:CA:D5:DA:6A:70:3E:95:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B3357439C29DEB977DA9A773E7ECF1A9379CC66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1970fdae-d81d-4d44-bdc0-2931ee225a83.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:33:57:43:9c:29:de:b9:77:da:9a:77:3e:7e:cf:1a:93:79:cc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=f488d67ff6cd00de0ebf213476bdb1f34312489d3553c2af8d63b76e7ded91c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:14:41:05:93:f3:9d:29:34:c2:5c:65:62:
63:ed:17:8f:c2:7b:cd:b0:fe:de:42:df:d8:60:f0:
28:bd:f2:d2:8f:19:a4:af:f6:b4:6e:f5:92:2e:85:
1a:f0:26:f9:51:90:e9:28:9e:8c:a7:c3:95:76:c3:
6e:a7:f8:ad:43:84:d3:7e:5b:eb:0f:45:50:5f:a0:
8a:4a:fc:03:a2:58:60:11:e6:a4:9a:83:1f:a8:e8:
bd:36:27:68:7c:90:94:f6:91:03:17:84:92:a4:e4:
1e:91:f4:4a:36:78:bc:a4:ce:c2:6c:9b:df:0a:bf:
62:d7:da:78:db:6b:5b:98:d5:0d:b4:aa:0f:18:ed:
9a:ec:80:4b:f5:14:02:78:e8:a1:ab:bf:39:76:d5:
ea:a6:a0:bb:e9:58:4f:f8:2d:01:a1:a3:b0:50:8c:
1d:54:04:8f:80:ea:9e:e1:03:ff:42:ae:6d:79:9c:
8b:6c:e8:3a:4b:11:06:54:c5:42:fd:63:64:3a:ba:
34:7f:64:d6:3b:b4:49:8a:a4:02:9a:75:d7:9b:41:
ad:30:e2:20:a1:8e:a4:98:85:96:6a:c2:2e:67:74:
39:84:f3:ba:ad:a0:d0:ba:4b:77:a1:c7:b6:08:b2:
84:c3:a7:a3:b6:07:b7:4e:f4:1a:a1:00:66:f8:7c:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A8:C5:74:39:15:90:73:70:F4:30:62:CA:D5:DA:6A:70:3E:95:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1970fdae-d81d-4d44-bdc0-2931ee225a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a2:30:67:ed:23:c8:2c:ae:6a:80:47:d6:bb:5f:6a:78:9c:
59:8c:eb:94:6b:12:f7:e0:1f:85:48:59:11:74:8c:11:ff:b5:
8c:b8:30:7c:af:67:4e:8a:a0:9e:fd:98:a3:a6:10:d8:74:9f:
ad:94:8a:84:aa:7a:03:21:f1:01:34:92:33:d5:5c:1a:69:92:
1c:b4:fe:25:72:1a:1c:0b:ce:2f:a5:d5:fd:72:8b:c3:9e:81:
67:20:64:1e:3f:5f:f9:b7:08:cf:5c:a1:e7:16:ff:11:9e:cc:
d1:ac:5a:cc:96:0b:c9:9a:a2:3d:05:78:b1:ab:2d:71:fb:59:
d0:5d:e5:fe:70:28:78:4b:fd:aa:1e:d0:da:66:65:15:be:eb:
1b:67:c2:a9:4e:76:db:aa:73:25:5d:53:40:18:6e:e4:e3:da:
a3:3f:59:73:40:b9:71:78:31:66:7c:89:24:64:4c:1d:9a:e2:
85:d8:d1:63:a9:c6:57:8f:b6:d0:bd:9e:95:2b:0c:6a:a0:a1:
83:5d:0b:44:ae:57:6f:91:32:e6:42:44:b3:48:c0:2d:e6:36:
0e:b1:4d:0f:cd:3e:d5:74:82:a5:34:32:19:2b:a0:ed:4c:a6:
6b:c4:65:85:2e:82:ba:75:2e:7d:cc:bd:f2:a7:3d:0f:8a:b9:
c2:78:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:56 2025 by rpki-client