Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b89e647-0f7a-4774-a3e1-1e23ea20f96f.roa
File: 3b89e647-0f7a-4774-a3e1-1e23ea20f96f.roa (raw, json)
Hash identifier: uxGBSaB9gie9akSaqiGev4S6KJptCLHAPKOpSWvHFuU=
Subject key identifier: 83:7E:BA:9C:36:36:40:69:7B:EE:04:BC:D8:5B:7E:95:56:E8:78:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 510D51B8098A61C571C654D8EA05B60E0187DAC7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b89e647-0f7a-4774-a3e1-1e23ea20f96f.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0d:51:b8:09:8a:61:c5:71:c6:54:d8:ea:05:b6:0e:01:87:da:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=a290955ad329d51a5a57ce09c184bea3198ba8c2cb1a54ff59f450b92fd6b277, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:62:70:53:bb:7e:4d:d4:3f:ae:8b:f4:9b:
41:41:74:15:0d:8a:2d:44:30:dd:f0:98:f6:69:28:
d1:e0:49:34:54:21:00:39:5f:bf:d0:79:6e:cd:dc:
fd:0e:21:dc:02:99:5e:98:2a:24:f4:bb:5b:ca:84:
14:3b:2a:e6:17:84:01:ca:df:29:67:bc:94:81:e7:
ef:b0:c6:15:3e:3c:94:17:85:72:ea:58:ad:c0:8f:
b5:77:c6:29:91:4d:52:f3:21:ee:cf:ed:f0:5f:75:
6e:45:5d:e3:34:f9:6f:2f:63:ea:ec:c4:7e:2d:20:
80:cc:dc:4e:d6:da:e1:79:63:df:6f:1a:fa:b2:fe:
0f:cc:f4:80:53:c4:b0:02:4e:32:ec:12:b1:ac:a5:
50:9c:d6:fc:b5:37:d6:e9:f2:62:1f:df:16:4e:ba:
63:9a:dd:31:55:16:58:26:77:fe:e9:96:90:cb:f5:
4b:4d:59:64:95:9f:ad:fd:d4:71:f6:c3:ea:60:f6:
4c:a6:7b:98:fc:72:6d:19:db:f0:44:17:e5:b3:a7:
31:19:16:ce:72:b1:dd:3e:97:64:5f:5c:1a:a8:d3:
a7:c8:3f:b1:68:53:2f:70:98:79:fb:73:38:16:28:
38:97:1d:c7:3b:42:fe:c7:b1:e6:ff:c6:1a:f2:8e:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7E:BA:9C:36:36:40:69:7B:EE:04:BC:D8:5B:7E:95:56:E8:78:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b89e647-0f7a-4774-a3e1-1e23ea20f96f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.212.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0c:d4:9e:42:30:a2:bd:d8:16:eb:53:20:e0:03:dc:00:94:
65:31:56:93:7b:0a:0e:d7:42:c1:e5:c7:85:fd:d0:91:e0:f2:
bd:5f:e6:b2:92:bf:de:7e:15:8f:06:17:85:53:1a:74:6a:5f:
de:55:42:ed:b6:5c:6c:b2:96:ed:1b:8e:19:92:88:27:62:82:
e0:f0:e6:39:c2:48:c7:7a:9d:96:b3:7c:60:da:bc:20:a1:0f:
c6:ab:3e:b3:80:a8:7b:79:28:c6:db:6a:31:56:08:92:4b:0d:
1f:1a:a1:cf:f6:3e:8a:1a:3c:3a:0b:34:e5:d5:b7:49:ee:d0:
3b:c2:84:37:4d:45:a6:2a:0d:ad:9b:6b:1f:bf:50:21:ed:99:
9f:93:0d:0f:23:6a:2a:0b:9e:09:90:49:2f:ca:a3:7d:9d:97:
09:49:d9:af:6b:ff:f2:76:be:dc:80:b4:1b:98:81:08:05:0f:
d4:1b:54:8b:66:56:03:8c:54:38:9b:8c:62:92:26:7a:29:8c:
1d:dd:e3:f7:06:5a:3f:d7:af:07:2d:cc:13:a5:98:13:85:64:
35:8c:22:87:5c:57:17:35:5d:5a:04:b9:31:62:61:d7:e5:dc:
53:dc:81:f7:52:c4:7d:11:93:f7:0a:02:c9:39:9e:61:18:b4:
ab:bd:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:31 2025 by rpki-client