Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa
File: 41a012c8-f13b-4d84-8fb0-ec582723cddf.roa (raw, json)
Hash identifier: oA6laBUBIdBOqQwUzl1IRSVxnSn+6pxmwirx6h87bH0=
Subject key identifier: 7F:4A:69:4A:77:7A:2A:EC:9C:42:17:9F:65:99:12:C2:23:83:B8:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1044E2EC2FB88B5D47FD1D9E2D071ACC7440AFB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.77.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:44:e2:ec:2f:b8:8b:5d:47:fd:1d:9e:2d:07:1a:cc:74:40:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=2342c1d84af437a60a1078e726f47bc9287a66673df698fff191b084c4e1fbac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:7f:8f:8d:02:7b:39:48:dd:17:37:02:ec:
55:13:0b:79:01:87:0d:78:51:05:a3:6c:a0:33:fb:
09:ff:3e:bf:25:9c:66:74:1d:9d:ed:f6:af:e9:09:
56:e6:8b:33:db:55:f8:65:01:0d:01:00:08:86:84:
5a:de:04:de:a2:82:85:d0:1c:ad:44:f5:ba:5c:87:
74:78:4b:84:b6:2d:ea:81:4d:b9:05:21:48:d3:7a:
a3:86:e4:37:74:61:27:53:28:86:c7:fa:fb:d7:67:
73:6f:d4:4d:c6:3d:d5:97:cd:81:50:f1:7f:b0:70:
19:85:91:96:78:ae:ea:04:34:49:a9:62:97:da:ba:
65:31:75:6f:d1:0f:16:a9:89:ed:c2:5c:94:8a:b0:
3e:06:05:cd:b6:b7:f7:52:b5:20:2d:e1:18:bb:cb:
42:81:d0:90:27:72:31:41:f2:78:ff:ed:bb:d4:06:
46:6b:b1:c7:78:c9:45:9a:1a:46:46:fb:8c:8c:c6:
1a:70:d2:ff:4b:22:6e:32:df:84:ef:db:b4:07:84:
1d:f1:91:a4:a9:c9:47:3e:ea:0e:08:a6:aa:f7:79:
6b:64:33:51:49:9b:3d:0b:fb:79:5f:3e:a1:38:43:
21:2a:83:2d:3e:d3:09:08:95:56:37:5e:a0:b3:92:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4A:69:4A:77:7A:2A:EC:9C:42:17:9F:65:99:12:C2:23:83:B8:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.254.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ae:a2:7e:96:f0:b9:47:76:00:c7:36:29:07:8b:f3:4b:82:
12:42:79:a9:2a:e3:1f:f8:d2:69:e5:79:ca:dd:0f:37:5b:5d:
65:bf:08:7b:65:fe:7f:c9:f5:12:86:2c:32:2b:76:24:eb:2b:
03:9a:29:4d:c5:72:c7:ab:25:78:de:28:16:43:a0:24:c1:71:
03:e1:6e:f5:6d:6a:63:b2:d1:bd:ee:d8:6e:aa:9c:e1:1b:77:
7c:ee:ae:d5:9c:26:76:78:cc:37:21:db:00:db:02:3e:92:3a:
4c:9e:ac:d6:ae:35:00:37:05:72:b3:f6:b0:1d:37:05:7a:01:
f4:b6:0c:44:ae:b6:fd:4d:fd:0c:8b:1f:f3:81:47:ad:85:af:
17:0c:c6:d8:47:f9:e5:6f:80:68:3b:dc:67:9a:54:ba:30:d0:
c0:a9:96:0a:e3:d5:d0:ee:c2:ba:57:1c:bc:57:dc:45:d7:e7:
5b:65:72:43:5a:04:0d:f6:73:f3:09:cf:2f:f2:77:cb:aa:97:
b3:4c:69:d9:20:5e:71:6b:ca:f1:f4:b2:b4:8f:b5:61:93:ee:
2a:1d:c0:94:7a:05:aa:d7:66:8e:67:8a:39:08:8c:c1:10:af:
ca:b9:56:d2:94:ae:67:41:40:ee:5e:56:3b:d1:63:4c:57:13:
92:a6:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:17 2025 by rpki-client