Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2796caa1-61d5-4482-ab4f-0768d89e60ff.roa
File: 2796caa1-61d5-4482-ab4f-0768d89e60ff.roa (raw, json)
Hash identifier: d7NH96mqRoVV95tUvqOouskTpNHkfbhQuRtVLAAG1e8=
Subject key identifier: C3:DA:F8:A0:C7:82:29:20:2D:20:CE:B6:79:EA:72:32:B7:76:6C:77
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49F1829D3CD4EAAC4B7774DD079154E67B5668D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2796caa1-61d5-4482-ab4f-0768d89e60ff.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f1:82:9d:3c:d4:ea:ac:4b:77:74:dd:07:91:54:e6:7b:56:68:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=ae36cdcc30e9d5793a8b62d74e08ed958981e60d4f0c7c42ffb4b297994fa45e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:37:df:0d:a9:5f:c6:dd:84:42:aa:5d:23:
fe:a4:54:cb:f1:13:3c:a0:25:45:4a:1e:26:8b:bc:
12:70:d7:b7:3f:9b:bc:76:ae:02:c6:d9:ec:bb:7a:
a6:6e:e9:ce:73:9d:20:9d:03:ef:38:b5:99:30:85:
75:25:3a:47:dc:f0:6d:ca:d3:06:30:c8:98:ca:15:
5b:ee:5a:80:8a:b2:5f:b8:24:7c:cf:0d:ae:6a:4f:
38:13:c8:c4:67:6c:f6:7a:e2:ea:18:73:49:ed:4a:
ca:3d:f7:e0:9f:95:d9:5d:64:75:cc:b1:75:c1:2a:
2b:03:72:42:98:48:f5:4a:5a:f8:27:d9:61:96:53:
cd:03:e7:a1:f9:d8:9e:b5:d1:44:1a:57:9e:a0:62:
a9:09:a6:5c:bf:13:91:96:b8:64:bc:85:b7:d3:f3:
e0:51:d9:8f:5f:7e:62:35:3f:d6:62:5f:ca:39:50:
d5:d3:07:02:64:44:15:5f:60:78:64:cc:07:c1:71:
13:ea:52:95:e3:5c:89:a5:e5:f4:7f:b6:54:90:35:
0f:43:9d:a9:27:f1:b0:cb:29:77:b3:d6:a2:15:45:
5d:0b:aa:37:51:86:d4:63:2c:cf:25:3c:9a:25:17:
3e:ab:43:60:45:d5:35:96:67:52:93:9c:bb:07:d7:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:F8:A0:C7:82:29:20:2D:20:CE:B6:79:EA:72:32:B7:76:6C:77
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2796caa1-61d5-4482-ab4f-0768d89e60ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:c1:02:84:4e:8a:58:d2:c5:77:fa:9d:ac:53:1e:f0:47:13:
67:64:fe:24:e1:c6:52:1f:d0:be:21:ab:db:19:6b:44:db:64:
e7:fc:03:de:e6:37:46:87:d8:eb:87:10:2e:07:5b:96:fa:f7:
6d:1a:93:fa:9f:dd:26:63:74:84:c5:22:e4:c7:46:4a:68:02:
22:51:67:4b:1b:75:2c:ac:82:9d:47:d9:78:df:dc:57:94:62:
01:89:9f:9d:fb:e8:40:a4:8f:28:bb:d7:0e:25:5f:41:7c:06:
7a:1c:1c:84:e0:8b:d5:94:98:36:e0:52:96:df:11:5a:7a:e6:
c3:77:a3:c1:fe:bb:d2:f0:a2:f7:cd:d4:5c:68:80:dd:34:39:
e9:fd:9c:8a:55:16:26:95:a3:7b:5c:26:58:7c:2a:72:0c:95:
25:df:51:3a:71:e9:7d:f4:d4:7e:a8:65:99:7d:56:0c:bc:0e:
98:06:cf:d6:5e:94:46:4b:0f:a3:54:9b:62:32:8f:3c:85:0d:
4b:6c:b4:90:2a:b4:42:fc:da:10:3c:62:cf:9e:e9:f1:bc:a1:
b3:05:2d:c1:da:41:a3:97:5c:20:a8:59:14:48:9c:46:fa:45:
fb:db:67:68:13:df:de:93:f1:f9:5b:3d:5f:70:49:e6:37:62:
ec:a1:fb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:20 2025 by rpki-client