Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa
File: 68598716-8ef3-4659-8c2a-ea94e7225c46.roa (raw, json)
Hash identifier: jkVrZ/WbNNGX35rt5eZ6xI8X8ErYl6XED5bRTEioW2k=
Subject key identifier: 26:40:AF:8B:15:3B:20:DB:7A:BF:CA:4C:2B:64:D1:1B:72:C3:66:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4ABF33CFCB16210D874754AEE4897EAC70042E23
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:bf:33:cf:cb:16:21:0d:87:47:54:ae:e4:89:7e:ac:70:04:2e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=2020147eeebf7a0d65c01e1e79e0596d816e2c4a3b5e7faad306b5a84045945c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:0d:3c:e9:43:5a:3a:34:6c:5b:35:b1:7c:
8e:29:04:a0:22:bf:2c:2d:dc:d0:6c:8f:a7:0f:4b:
56:19:e6:be:b5:7c:81:30:78:da:53:02:11:e5:84:
33:6b:c5:50:39:57:82:28:00:6c:a4:56:0d:99:34:
24:4a:a0:18:4a:ae:29:50:70:a3:7a:d6:6a:6f:84:
89:5a:e4:9d:0b:d3:ca:dc:b9:f6:78:6c:e3:8f:e1:
6e:5c:09:67:00:23:ad:d0:68:8e:75:a5:df:4d:e2:
09:fb:ba:28:64:75:75:e0:57:dd:1b:ea:99:0f:b3:
8f:a5:e4:10:41:a9:45:dd:52:04:7d:95:0e:14:82:
13:9a:c8:1f:d7:78:92:a5:0f:f4:29:68:d5:01:60:
43:29:3c:7b:93:c0:77:94:85:7e:12:3c:d1:5d:26:
f0:48:bd:0f:57:a6:43:cf:64:c3:71:e4:40:98:ab:
0a:a8:74:ea:2b:07:1e:a2:8d:00:8d:96:65:84:f6:
24:34:18:ba:94:d0:60:39:5f:5b:41:4a:55:a3:8e:
75:79:16:42:f2:2a:e0:39:86:e4:3a:b6:33:c2:72:
e8:04:c9:a3:cb:1a:4f:6c:da:03:fe:ed:24:f7:f0:
73:33:58:82:ac:c3:4c:08:e8:85:21:27:00:06:be:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:AF:8B:15:3B:20:DB:7A:BF:CA:4C:2B:64:D1:1B:72:C3:66:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:f7:90:cf:c8:ff:53:d9:7d:32:34:e7:72:f6:47:ff:2b:d5:
5b:da:b3:94:31:d9:2a:c4:41:e3:f1:c9:90:04:df:5b:75:70:
08:23:5e:f7:6b:67:3b:44:2e:b2:92:c9:4e:d3:d2:40:f0:07:
d3:11:fa:de:35:0e:00:9d:a7:73:d7:8d:1c:ac:c5:7b:40:98:
fb:e6:8c:45:d6:68:5a:1e:97:30:60:af:e8:a6:e2:18:ed:24:
7a:9c:6b:3d:12:8b:6b:73:2d:76:d1:da:0b:10:00:f6:50:53:
32:08:ec:d3:42:88:65:fd:56:5a:58:eb:1c:d6:b9:1e:86:02:
50:db:94:b4:3b:a2:0f:ea:5e:7b:e5:47:19:bc:97:58:8a:1a:
d4:eb:35:34:a2:37:3b:0f:a8:3a:69:af:6a:42:88:e4:ca:7c:
d2:8d:5e:5c:18:70:54:89:96:3e:e1:cb:bc:46:5e:36:c7:9a:
28:4a:49:b6:b4:2a:81:57:cf:dd:10:8d:5f:8f:a5:7a:8a:98:
c1:fe:c8:1c:c6:41:46:76:0f:19:54:8e:2b:14:c3:0d:3b:f9:
8b:ad:87:99:b4:c7:22:fb:8c:fb:94:f0:bc:d0:4d:ab:aa:16:
91:66:72:0a:c5:1d:f7:04:2c:52:04:8a:d1:46:e9:27:2d:39:
7c:ac:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:46 2025 by rpki-client