Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9374b6-a99c-47fd-8f47-972c148f3e8b.roa
File: 4a9374b6-a99c-47fd-8f47-972c148f3e8b.roa (raw, json)
Hash identifier: VB5fHypU0xdEHQIZhslGSpHVVVoLvstCvIPn/4uluUQ=
Subject key identifier: 45:E9:3E:7F:2B:DE:B3:C6:B5:31:A7:2D:F0:05:2F:4F:06:10:A8:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 481855BE12B8A79DBC20DEFCAF0BD9B87AB305DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9374b6-a99c-47fd-8f47-972c148f3e8b.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 174.129.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:18:55:be:12:b8:a7:9d:bc:20:de:fc:af:0b:d9:b8:7a:b3:05:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=6e590e8a14eb9e82c50eb3c309c0063b7057b9a782b3b1ec5ce4f83ffb9371ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:6f:f9:cd:d1:3e:01:81:b4:78:66:3e:f4:
7e:13:65:f5:5e:ef:3b:f0:20:80:43:80:26:91:a8:
a7:f6:f6:fa:68:cc:22:1e:01:a3:70:97:78:7a:ad:
39:f9:42:d6:4f:f4:0e:ac:20:fe:a7:ba:19:d5:ae:
0f:1c:60:ab:c5:43:2f:04:75:b1:98:cf:a7:54:79:
06:7d:30:96:9d:9b:05:17:36:90:63:72:b0:19:b1:
7c:51:4c:aa:26:93:25:92:f9:42:d2:61:9f:28:7c:
04:18:2d:24:c6:ee:c4:bc:a6:77:14:6e:81:e5:8f:
ed:9c:dd:c9:b6:39:7a:27:5f:79:ab:c8:e9:f3:56:
f0:3b:42:d8:ab:d4:73:8f:c1:8a:af:4c:16:6f:87:
75:fb:9c:1d:9f:c3:07:ee:2e:20:fc:d5:dd:15:e3:
2b:da:59:cc:9d:31:59:5c:e6:c5:8a:4c:55:2f:78:
18:11:ef:41:98:ff:d2:4d:02:7a:1d:80:41:f7:e6:
99:2b:14:a4:d3:38:39:89:1c:09:e3:29:98:73:3b:
0c:e4:b2:61:a9:6d:ab:6c:93:9c:49:90:59:77:0f:
14:2c:81:4e:61:85:01:b1:76:60:28:8c:fe:30:dc:
dd:40:a8:b4:a2:f2:13:c8:48:e8:de:63:a9:4f:0e:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:3E:7F:2B:DE:B3:C6:B5:31:A7:2D:F0:05:2F:4F:06:10:A8:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9374b6-a99c-47fd-8f47-972c148f3e8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
174.129.128.0/18
Signature Algorithm: sha256WithRSAEncryption
45:63:a2:51:66:91:21:4e:4f:a6:0b:09:e1:72:9c:2b:82:91:
0e:09:70:52:b3:7e:a9:b6:11:b1:04:c3:18:1e:0a:1e:40:82:
86:7d:4f:4e:3a:7f:cb:24:42:6c:ef:3c:7b:fd:b8:df:14:76:
3a:3a:50:1b:34:6c:26:1b:f6:1e:b9:cf:0c:c4:bf:60:c5:6d:
01:6f:d0:44:53:2d:0d:94:b5:3e:45:ab:e6:fa:62:00:11:7c:
c2:56:7c:37:59:e8:4a:29:27:34:56:ee:07:29:f8:1b:c1:73:
49:a3:01:54:ce:a2:3b:41:00:b1:2f:76:9c:89:d8:82:12:e3:
0a:73:51:6c:20:cb:5d:95:a9:5a:d1:28:15:8d:fd:cc:3b:3b:
91:bd:cf:dc:39:68:55:d8:5a:b9:f3:ac:15:79:8a:14:75:21:
5e:0c:9b:5b:bd:c7:02:de:04:b7:0b:b9:03:70:80:ee:19:41:
c3:f4:42:91:09:27:9e:fa:5e:cf:2f:0d:7e:e0:57:2a:ef:e2:
9d:3c:ad:c4:18:01:98:cb:75:bf:a9:ea:5c:b4:aa:03:88:02:
dc:7b:2e:6f:2f:fc:f1:7a:90:36:da:75:8f:9d:45:ae:2f:a0:
59:ac:db:90:34:40:c9:26:2a:df:21:9e:fc:df:ed:85:60:e7:
d1:99:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:36 2025 by rpki-client