Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa
File: 2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa (raw, json)
Hash identifier: oYhjfrUJ04Scuxgklxpc0d2A0LBy4a3lT0/92M3IDqQ=
Subject key identifier: EF:C2:77:21:EE:50:17:BC:8A:D6:43:E1:EF:A8:C7:70:A9:31:37:8D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76F260502EEE890142F027E06702B1CD69DCB8A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.113.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f2:60:50:2e:ee:89:01:42:f0:27:e0:67:02:b1:cd:69:dc:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=62ccc70975ba02b2bbdf8c93e8d4fc140a3f07925b5cfcac9aa3421a33ade8da, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:8e:5f:11:5d:5a:00:92:7a:59:bf:18:95:
a7:4f:ac:9c:da:c4:14:21:b3:97:2a:f4:1e:14:9c:
89:b2:25:a9:21:e0:43:80:e0:cc:83:b3:e5:57:1e:
bd:3d:80:66:6f:10:99:18:dd:e7:79:da:b3:47:d2:
d5:98:41:51:e5:7d:0a:07:5f:35:4f:3f:6e:7e:20:
5c:6a:51:7c:d5:ad:cd:ad:68:4c:eb:a4:fc:30:f2:
55:47:70:35:63:a7:2d:7e:4b:12:0f:ff:6c:af:1c:
94:24:cb:9d:c5:72:ec:da:51:56:47:f8:ee:20:a4:
c0:54:68:4b:b6:c5:65:4a:d4:fa:51:70:f8:b3:ff:
6a:8f:09:bb:a9:4d:ad:bc:6e:da:e7:0c:0b:8a:46:
c0:17:d8:ed:40:e0:70:78:ac:3f:f8:c7:74:1d:1c:
b6:00:06:c7:2d:43:60:ba:3d:93:0c:ce:80:bd:2c:
f6:c2:68:2a:54:55:db:1b:87:17:7a:ac:ab:9b:c0:
1f:85:d8:ec:b5:0e:70:67:c0:7e:1e:cb:26:82:e0:
cf:99:bd:0a:fe:6a:13:52:d7:ad:65:43:98:e7:8a:
aa:27:a9:00:a9:1b:71:9f:da:ef:eb:c7:ce:46:22:
0c:e5:5a:08:f9:66:8f:b9:28:dd:16:2e:f2:21:6d:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:77:21:EE:50:17:BC:8A:D6:43:E1:EF:A8:C7:70:A9:31:37:8D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.113.192.0/19
Signature Algorithm: sha256WithRSAEncryption
08:87:fc:a2:3d:ab:61:bf:c1:58:2f:67:0e:ea:14:ef:18:83:
1f:ee:aa:06:61:00:7b:f7:e0:63:07:86:c6:dc:49:9b:d2:13:
82:37:c4:bf:b9:9a:5b:3d:b6:69:0f:8e:4f:90:fa:e3:d0:7e:
ac:a0:fd:8c:b0:70:50:90:1a:21:3f:42:04:e7:c9:3f:80:65:
4b:27:4b:2e:11:46:49:3b:8a:6b:84:fd:cf:40:96:04:1b:11:
ce:d0:27:bc:6d:be:16:40:f4:f2:ed:98:d1:e0:05:f7:ca:50:
f6:4e:ca:7d:5a:48:75:29:87:de:65:93:c1:df:88:ae:b0:51:
87:40:33:43:0d:b3:ea:c7:d5:35:dd:9c:e9:6c:bb:61:03:2e:
ca:6f:d3:ee:66:91:5c:d3:c6:2e:20:19:a1:0c:0d:a0:3d:05:
2b:73:d4:17:a4:fa:60:26:9e:3c:f9:80:e3:be:51:71:c5:69:
9b:b5:31:12:69:d4:f2:0a:77:10:f6:3f:c0:49:e8:41:03:77:
3d:cc:d4:b9:8f:10:10:57:83:d1:c2:52:97:e2:fc:0d:ae:9a:
e4:db:c9:cc:40:ad:b8:84:67:8e:e9:4d:f6:32:1e:a0:04:71:
57:8d:6e:97:5c:4b:0d:bc:b7:fe:38:88:f4:71:6c:aa:8a:97:
37:6b:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:06 2025 by rpki-client