Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa
File: 815dbd30-4974-4c77-9a27-6ac45a9fb646.roa (raw, json)
Hash identifier: JIuK8tby59YlBloSvviE60/9Q0PC6rKMvGzPf+OY5yU=
Subject key identifier: 00:19:E1:93:48:BA:2D:8E:5D:93:B4:08:9A:CB:D4:4E:B9:91:A1:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7824B57A1DE1F76CA17D2B88B64A87101EAAD830
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 22394
IP address blocks: 162.208.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:24:b5:7a:1d:e1:f7:6c:a1:7d:2b:88:b6:4a:87:10:1e:aa:d8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=b6dc64ce708f7b863658e01084cef9266cc0c9591d8575b4b06969568800026e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:eb:24:0f:33:f4:8e:c5:d8:5f:f9:9c:81:
76:87:bd:9d:8b:c4:45:8c:62:c6:f0:24:d0:05:f8:
1b:7b:8e:11:31:aa:9c:69:27:95:17:c7:21:2c:48:
e8:bb:69:b6:20:f0:00:02:5b:69:74:b9:3e:b9:9d:
3f:7f:20:8b:73:fc:b4:df:1c:04:32:93:e9:47:69:
1d:6c:57:62:eb:19:20:05:48:d1:05:88:5a:b0:1f:
ae:85:f0:00:e0:b6:39:14:22:40:c8:d4:e3:5f:03:
9f:69:d0:e0:c8:64:fb:14:c4:d1:92:5e:2f:06:88:
27:e1:11:72:cd:2b:dd:04:4a:aa:fd:16:c8:d7:11:
48:9e:e9:56:49:18:ce:3a:3d:e5:3d:c9:05:b8:73:
ab:0f:da:68:ab:d2:18:f4:2e:71:f5:90:da:4d:5e:
38:5d:ce:f9:99:81:00:54:3f:2d:7a:23:e0:a5:a7:
29:5d:78:ae:1f:1f:30:35:2d:5d:87:d6:69:ad:b6:
bc:c1:8d:2f:a7:56:2d:a0:fd:57:c6:0a:79:54:42:
f3:b7:77:a2:77:11:0e:77:8c:90:99:b5:87:e0:5f:
bf:1c:0c:1d:42:b4:b8:a7:dc:83:45:19:c4:0c:b0:
60:45:35:ad:20:4f:58:dc:7e:f7:fc:9e:d9:3b:7d:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:E1:93:48:BA:2D:8E:5D:93:B4:08:9A:CB:D4:4E:B9:91:A1:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815dbd30-4974-4c77-9a27-6ac45a9fb646.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.208.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ca:70:78:e4:a9:f4:21:ad:c8:b3:c5:c6:9c:8b:cb:43:81:
b8:4e:eb:30:fc:4c:81:56:7a:56:d8:26:ca:e3:77:9c:b7:90:
04:91:58:19:80:b1:41:d8:61:7b:33:09:bd:fa:81:5d:ab:ac:
72:9a:7f:b0:91:3e:86:f2:43:d8:41:df:76:9a:09:9c:b7:db:
c4:2e:15:32:6f:b0:b0:96:a2:5e:4c:4d:8f:c2:6a:fb:8d:44:
ab:a8:60:67:cc:d0:0e:00:90:60:05:cf:c3:bd:e9:e9:26:35:
bd:0f:66:f9:a7:25:31:36:e2:94:97:37:7c:3f:c0:12:43:f3:
af:a7:2e:47:89:17:88:3c:91:d0:c1:06:6a:f7:c7:6d:75:da:
eb:e1:f1:ae:12:59:5b:b7:69:c3:90:81:2e:37:81:b3:4f:59:
a2:06:ac:49:28:50:1b:c9:15:85:53:4f:26:a0:b7:43:c0:76:
b3:4f:56:69:ae:3f:68:33:a5:04:65:b8:fb:ff:fd:17:eb:fd:
d9:ed:21:02:fb:86:84:81:04:0e:c3:9a:f2:e3:3c:00:4d:38:
f1:a0:e4:8c:4a:01:e1:b4:1d:40:f3:96:3d:f1:01:a0:e9:44:
66:d8:8c:d2:98:c9:8e:3e:cc:b2:62:5c:8c:25:bd:52:e8:68:
41:45:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:46 2025 by rpki-client