Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa
File: 6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa (raw, json)
Hash identifier: LJspA9KNF+hwkerfg+1MVObptQj0tbPlDgitoDL/Cns=
Subject key identifier: 9D:8B:8E:A8:90:16:A0:24:9D:61:10:E0:5B:1C:C7:08:7A:97:82:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A6AC8E2917EB9CC55BD84E5E1F122091C2AF01E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.8.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:6a:c8:e2:91:7e:b9:cc:55:bd:84:e5:e1:f1:22:09:1c:2a:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=7b6b8037cfeda7d930c5a3004d384e05103706ca77245e75de9db72e6074f81b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:9e:23:d0:b6:2b:0d:10:18:e7:ed:f5:68:
6d:9e:ff:78:21:71:1e:f4:35:65:50:3a:46:4a:06:
26:be:19:28:b2:17:72:16:8e:bc:da:79:93:3e:50:
0c:27:64:98:10:db:d5:48:0f:c7:81:10:78:c2:82:
25:02:84:c8:0e:74:52:35:a3:4c:82:79:d7:2a:3c:
23:d7:ad:f0:27:ab:ad:6b:0e:39:57:8f:a2:86:04:
4f:b2:24:dd:11:80:48:3a:f0:ac:ab:ab:f4:89:5e:
ce:be:3a:cc:9f:e9:64:cc:0c:d6:aa:59:88:0a:ed:
62:12:1f:bb:fd:13:ef:15:69:50:c3:80:2f:9a:b1:
01:cc:a6:1b:22:aa:b9:ea:6f:f1:a4:0e:64:d3:6c:
06:af:58:a8:b3:55:ff:af:6d:59:35:09:f5:62:93:
63:5b:d2:70:64:f0:d9:85:e0:33:3e:cc:d8:30:60:
a9:ce:31:90:78:3f:2d:7a:54:10:fe:0e:4e:8e:79:
34:8b:70:2c:44:0c:9c:ed:4f:6d:d8:64:7b:a0:3f:
e9:60:08:e2:a0:35:fd:c7:3c:16:db:b0:15:1c:7a:
d7:14:99:51:dd:79:31:15:5b:9a:13:b4:1e:5a:bb:
f1:5e:5d:6c:f8:9a:e2:25:2e:ea:69:0b:2d:96:a0:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:8E:A8:90:16:A0:24:9D:61:10:E0:5B:1C:C7:08:7A:97:82:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4e:82:2e:78:af:19:2b:09:17:f3:0c:df:0a:9e:3a:45:d0:ff:
36:25:2e:89:2c:c7:6f:9b:ce:2b:ce:d9:f8:88:85:0a:9f:23:
a0:01:eb:67:85:2a:7f:65:a0:54:57:a4:11:9c:ca:01:c2:4d:
cd:a8:27:e7:9b:68:00:18:2e:61:ac:94:08:b1:d3:db:ae:90:
2f:34:58:47:2a:48:ca:2d:d9:31:3f:a9:f1:92:07:c6:8e:87:
75:1f:cc:90:d2:72:c8:5f:40:77:fd:b0:0f:c0:78:4a:20:c5:
bf:14:a4:eb:87:45:e0:8c:e2:d6:d9:cc:14:66:19:69:a3:d8:
41:a8:f9:32:66:b5:b6:3c:d7:58:d3:5b:54:21:7c:9e:c0:71:
11:17:16:ca:37:a4:d2:b4:2f:45:21:0c:10:54:85:2f:cb:4e:
e5:0c:3f:27:3e:e0:8d:19:2c:96:c0:0a:cd:53:dc:be:89:65:
e8:33:ae:54:e3:2e:4f:2d:99:91:09:4e:e7:c6:8b:b3:e3:b5:
c3:57:bb:ef:cf:48:3b:b4:08:92:9f:6b:7b:65:8c:9a:ac:57:
ce:e5:58:2d:57:44:18:79:94:11:ee:69:ea:01:8b:f5:61:7f:
3b:bc:00:dd:d6:4d:2a:82:17:5d:e1:62:d5:57:4f:b2:95:3f:
a3:04:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:40 2025 by rpki-client