Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d4de716-6e60-47a1-bd6f-dd1df49f06c5.roa
File: 4d4de716-6e60-47a1-bd6f-dd1df49f06c5.roa (raw, json)
Hash identifier: kG+/TTSE0VRO+lshtFNYDJ9LwQs7EsA6JL9RTNZVFQk=
Subject key identifier: CC:AF:53:83:84:81:87:79:42:F6:64:9B:A9:D3:58:CD:61:65:BA:F9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31D846FDF627F5E5E31CFE9932EB1DC56378A8B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d4de716-6e60-47a1-bd6f-dd1df49f06c5.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 107.20.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d8:46:fd:f6:27:f5:e5:e3:1c:fe:99:32:eb:1d:c5:63:78:a8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=29727321ea4de9610d75c3fa6b3c1d64666081c16a40f4d1a31663de1828a845, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:c4:9f:7d:ab:18:11:1d:20:bc:a8:ec:7d:
55:e6:e8:a5:9f:c3:03:4a:8f:e2:ff:1f:4d:a1:0e:
51:8f:53:37:d9:a9:0c:91:dd:de:47:48:95:48:d6:
a5:11:b9:2d:33:dd:9a:7b:b3:13:21:b5:e2:10:d1:
dc:39:9c:13:a2:bb:99:39:6b:95:55:af:d4:f3:30:
b5:4b:e3:76:5f:48:b5:43:46:ef:2f:0a:7e:26:43:
32:81:8b:27:23:b7:6f:45:c4:f3:cb:c2:56:af:de:
d1:00:31:45:9b:49:a3:66:ca:80:62:14:b7:1d:5b:
c8:0c:d1:ff:73:b2:76:b8:09:dc:e0:ff:37:cf:0a:
8d:76:4a:e7:14:34:d1:1a:4a:c7:2c:5d:12:90:e8:
1a:c7:b1:c2:3c:9d:86:f1:cf:56:64:65:cc:64:53:
63:ba:04:61:99:a9:fd:fa:f9:fc:d7:b1:51:0c:00:
6f:cc:5a:eb:ea:d0:8a:92:f8:cf:2c:2d:c8:5f:c0:
f5:dd:5e:44:d0:ea:31:1a:dd:98:5b:1d:68:b7:72:
4a:30:96:c5:3d:43:1f:30:5c:1c:ae:ee:af:7c:02:
3c:5c:97:62:48:c7:e6:41:cc:0e:b0:fb:e8:f7:32:
da:dc:f3:03:f5:df:48:73:3a:31:67:55:3b:cf:e3:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:53:83:84:81:87:79:42:F6:64:9B:A9:D3:58:CD:61:65:BA:F9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d4de716-6e60-47a1-bd6f-dd1df49f06c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.20.192.0/18
Signature Algorithm: sha256WithRSAEncryption
37:92:dc:bc:fe:8c:2d:f8:95:3f:4d:cd:b3:c1:39:56:06:fd:
e3:0f:77:74:fd:ab:49:3e:39:84:b5:d0:66:88:3f:8a:ac:2a:
5f:4b:e0:5c:08:66:b7:b1:3f:73:86:36:8a:8e:49:90:53:80:
8b:1a:eb:d8:74:67:3d:65:97:4d:30:65:ec:e9:57:16:b1:0b:
b0:3c:f6:81:77:81:15:a5:60:16:33:3d:5d:f4:5d:4a:7d:c1:
ee:12:47:d5:38:51:73:22:63:81:eb:5e:8d:92:cd:7a:89:82:
3e:64:0a:d3:6c:6c:ed:e2:5e:a1:a8:2e:3c:55:59:5f:d8:8b:
60:db:10:97:59:51:24:ce:5a:b0:17:6d:54:7b:dc:58:8c:eb:
37:3a:a9:d9:ea:5b:95:e5:e9:76:ce:07:65:94:64:5c:ee:8f:
70:2d:b4:16:e0:99:4a:80:12:b2:18:0e:a1:e4:ca:db:e4:cd:
cc:ec:06:6b:67:21:96:2b:23:0b:71:52:ce:ab:ab:ce:a2:bf:
16:2b:00:df:0e:eb:81:5a:eb:7e:d6:06:f0:2b:1d:b9:28:14:
50:59:02:10:da:68:e7:8b:8e:1e:d9:d2:d3:1b:33:94:be:6b:
ba:99:8d:39:de:43:16:64:8b:3d:ce:71:68:e5:3a:62:a4:e0:
27:33:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:42 2025 by rpki-client