Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49852887-b85d-4af8-8bfc-da07277cf0ee.roa
File: 49852887-b85d-4af8-8bfc-da07277cf0ee.roa (raw, json)
Hash identifier: W81TqfFQFcjG/qFT4LbOzeAtjnDjYx17+tJmVEh3ivE=
Subject key identifier: 74:8C:02:E0:62:B0:08:C1:26:F9:66:9A:8E:7D:92:00:5C:DC:84:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F5994F5D30DCC26CC13AB86E2C60425D91AF34B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49852887-b85d-4af8-8bfc-da07277cf0ee.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.8.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:59:94:f5:d3:0d:cc:26:cc:13:ab:86:e2:c6:04:25:d9:1a:f3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=bc99a16e069a28458525fe38a20bdcb5b90ca78904eef2692d0d167e4165e3b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:f5:d0:12:62:e0:3e:e9:0f:fd:ab:a8:d0:
51:a6:f8:f0:c7:9c:85:9d:eb:8d:c9:7b:e5:94:af:
4a:5b:05:d2:4a:6a:b0:9f:63:2b:87:76:58:1c:e1:
28:fc:bd:05:4a:37:69:c9:49:d2:ae:18:ba:0a:30:
55:b7:80:17:f5:26:85:2b:a9:0c:59:34:97:bf:41:
08:fd:6a:c9:66:94:62:a5:50:0a:c9:83:25:08:2d:
63:d5:0c:af:02:aa:7e:60:ae:37:d6:10:e0:5b:65:
f5:27:5e:ca:e9:c2:4e:48:37:ca:39:2b:ae:c1:04:
af:d6:1a:46:b2:92:a2:0d:bb:11:64:40:1b:dc:4b:
05:1e:94:0b:3d:9f:d9:e8:79:00:68:18:39:6b:bc:
fb:9e:2b:d8:a8:db:90:1e:d5:0a:76:60:ef:bf:23:
f8:fb:00:82:6b:cc:3a:7c:78:5e:69:4a:7d:93:16:
9f:8f:69:27:c9:c7:7e:42:99:3a:05:17:e9:34:ca:
da:a0:c2:d9:f2:51:92:37:a7:9d:4b:1f:fb:f1:82:
7b:27:a4:61:d9:6f:a1:71:94:a9:be:48:4e:53:5b:
da:34:aa:a4:21:64:2c:58:09:81:ec:68:29:dc:b7:
26:b3:e3:bb:c0:5b:80:30:84:52:69:78:27:0c:f6:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:02:E0:62:B0:08:C1:26:F9:66:9A:8E:7D:92:00:5C:DC:84:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49852887-b85d-4af8-8bfc-da07277cf0ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.8.192.0/19
Signature Algorithm: sha256WithRSAEncryption
74:bb:23:79:65:9b:5d:f2:2d:68:ef:b9:6f:52:28:60:17:da:
76:c0:32:8c:3f:1b:22:40:89:c3:ae:67:8d:b7:74:aa:93:e2:
4b:f7:72:74:41:28:1d:2c:61:58:5b:01:45:5a:40:4d:f4:84:
10:67:c9:59:64:f9:b5:19:31:41:51:30:72:ee:c8:27:58:15:
a7:bb:0a:71:94:7a:a6:0d:1b:07:71:7c:a5:9c:b4:e2:b0:91:
c4:d3:72:86:58:f2:65:d0:f4:df:96:73:fb:cf:b4:1b:76:b2:
ce:81:04:d3:33:8e:a6:f1:01:30:b7:3c:04:3a:97:d5:9d:88:
a7:6b:16:fc:0a:fd:55:ea:28:89:35:bc:ab:ed:9a:3d:47:5f:
7f:da:99:5f:a8:d5:b3:da:a3:cd:66:ec:9b:ac:ec:74:e7:51:
f5:b1:bc:a2:bd:ab:af:83:a2:95:75:de:77:e1:6b:03:d0:ad:
46:99:34:30:c7:ef:87:46:5d:99:74:73:34:6d:2c:6c:4a:ca:
25:6b:15:fd:30:6b:b4:8c:1b:22:d0:31:8c:66:ba:5c:c8:45:
c1:73:74:64:97:d9:04:90:ff:20:4a:55:22:77:0d:2a:ad:47:
75:8b:50:20:74:df:f5:6f:f1:89:28:6c:36:22:3e:45:58:20:
6d:80:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:52 2025 by rpki-client