Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84e6874c-07ac-4922-884c-207aa2ad4b6b.roa
File: 84e6874c-07ac-4922-884c-207aa2ad4b6b.roa (raw, json)
Hash identifier: RlcxvCBu/2RpItql7geMZxJZ2GIE/iQtFXWMHmaYroE=
Subject key identifier: EE:D2:5D:D3:59:B7:71:79:2D:7E:D3:0D:B8:49:F6:A8:5A:B2:DC:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 42965430C3A90FB7E1DF846D9E6AD13F7597B1E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84e6874c-07ac-4922-884c-207aa2ad4b6b.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 184.72.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:96:54:30:c3:a9:0f:b7:e1:df:84:6d:9e:6a:d1:3f:75:97:b1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=493362b6c0a579b792ac95657d2b80792165b7a886c173778d82cd931ff4adfb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:15:54:29:bd:39:30:d9:c5:ab:c0:e2:40:
19:b0:e2:b6:e0:fb:e0:5c:b8:51:ce:55:7a:93:9a:
95:a4:e0:f8:66:12:5d:12:16:e2:8e:71:75:4c:06:
14:84:2a:1b:b1:6b:7c:fa:f9:b9:92:ef:ee:ec:c0:
d8:c7:2b:ed:bc:38:db:a1:2a:ed:a9:ab:b7:a9:27:
47:72:d5:2f:ad:14:dd:0e:16:1f:ae:a5:a2:a2:a3:
39:81:20:84:d8:5f:0d:42:39:08:7b:5b:24:6c:52:
48:6f:7e:c7:e8:ae:7a:47:d5:34:50:3a:34:20:d7:
3c:97:e6:12:d5:cf:36:9c:ff:7c:12:0b:ec:14:b1:
c4:7b:0c:8b:27:de:bb:85:c7:39:1c:e7:86:2a:c8:
e9:ed:74:eb:90:8f:3c:80:1f:72:df:96:5d:b0:b8:
6c:ea:dd:8a:46:15:26:62:44:a8:6c:52:4f:23:c2:
9e:55:6b:7b:a4:9b:be:d4:44:22:26:98:02:9f:5e:
16:31:21:e3:a3:02:c1:5b:1c:37:36:09:6b:84:8b:
0d:6c:df:ab:75:ac:2f:db:54:5c:07:d2:eb:02:a9:
51:cd:b8:a8:47:62:16:db:1f:33:5a:42:4f:79:6f:
0b:db:27:56:c8:3e:54:20:e7:db:09:d7:af:b9:5c:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:5D:D3:59:B7:71:79:2D:7E:D3:0D:B8:49:F6:A8:5A:B2:DC:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84e6874c-07ac-4922-884c-207aa2ad4b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
16:20:ae:39:40:4b:18:5e:71:6f:1c:e9:22:28:6a:2a:e9:d2:
91:b4:81:8c:0c:ba:b4:15:b9:4a:1f:84:56:86:06:40:d2:7d:
f6:df:5a:64:a8:af:dd:e0:35:07:b1:7f:ad:79:76:46:2f:0e:
13:85:a1:66:43:0a:c6:59:cf:c2:7d:c4:1b:7e:67:10:96:c9:
53:5e:ef:b2:a1:56:91:be:a9:e7:b3:f5:fd:a1:77:b4:fd:d8:
aa:79:27:9c:1f:b7:42:c6:71:74:76:11:0d:e5:f5:af:13:55:
c8:7b:a4:d4:e8:68:6b:40:9f:6e:f5:04:5f:72:a7:ae:91:08:
45:df:0c:7e:5a:4e:fe:fd:b1:3f:64:b9:4b:03:d0:75:1a:98:
f2:f0:ab:d4:b8:e0:85:43:11:97:3d:9d:7a:3a:44:25:9d:eb:
f4:00:c9:2b:6d:a2:1b:c4:2b:d1:30:1a:f4:d2:ff:bc:cc:36:
b5:24:99:f8:e2:63:a3:99:83:e1:15:dd:f7:7a:e0:b5:ed:aa:
cd:39:91:58:f3:da:6f:08:e4:20:a1:8a:84:d8:df:97:b1:b9:
27:2a:d3:15:01:66:5a:45:cb:8d:9c:6c:23:a8:03:98:3f:06:
86:57:04:d5:e2:0c:f0:7d:15:08:5c:c6:5b:04:b5:6d:83:c8:
5c:00:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:19 2025 by rpki-client