Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a4b8157-155f-49b1-815b-a783006f50ed.roa
File: 8a4b8157-155f-49b1-815b-a783006f50ed.roa (raw, json)
Hash identifier: adHk2mGHBjEwL8h0Ps90aP0ZGYEqz3mmt5zqUKnZI1g=
Subject key identifier: D2:EE:D6:C5:D7:7C:E3:38:75:8C:DE:82:3A:89:8B:E7:5A:41:44:F9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7443E920709665C10E62815B17FFA1DD4528AE71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a4b8157-155f-49b1-815b-a783006f50ed.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.18.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:43:e9:20:70:96:65:c1:0e:62:81:5b:17:ff:a1:dd:45:28:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=e04116cf48a0225b1269f5b922209bb922c2f1c4ebba65353d923c38eecf6784, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:8e:2f:ea:d0:90:bf:93:ce:23:ea:58:3d:
65:8d:c1:63:3a:3a:b7:cb:fc:a6:d5:ce:93:da:69:
ec:19:4d:cc:cf:51:6e:e4:16:2d:89:9d:30:7a:7d:
fa:e2:d6:9f:df:97:a6:1b:63:25:8b:31:02:f4:18:
3a:22:9d:91:e1:58:5c:a5:00:0b:21:97:9d:76:3e:
8e:9e:ea:da:22:74:18:74:a5:c3:69:d1:ff:46:f7:
59:7d:3f:6a:0b:30:25:2c:d6:b2:3d:b6:b7:2c:99:
37:62:bf:54:7b:8e:2d:e7:2f:f9:3f:ab:7c:87:28:
17:c8:71:1e:19:4e:9d:95:b5:68:ab:da:df:5e:68:
50:d3:07:dd:b2:7e:ab:9e:40:6f:eb:4c:89:b1:21:
b9:69:79:45:13:d9:ee:c4:44:00:d4:f3:2f:83:37:
8c:47:a7:66:e9:57:19:ee:79:07:7d:05:a1:e7:68:
9c:6d:e3:ce:5a:39:2d:23:55:db:3f:fc:94:3a:3e:
e5:6d:0f:0f:2f:28:d0:72:22:7e:98:66:c8:66:f1:
b3:6a:36:e2:0b:10:4a:56:d5:9d:ef:22:2b:62:3f:
1a:5b:fc:08:09:f0:01:64:7e:86:4c:b3:f3:93:2f:
b8:63:77:ca:59:43:fa:12:b8:4c:4a:86:b8:e6:fb:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:D6:C5:D7:7C:E3:38:75:8C:DE:82:3A:89:8B:E7:5A:41:44:F9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a4b8157-155f-49b1-815b-a783006f50ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.128.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b1:d5:b4:4f:85:44:c4:59:f1:e4:37:13:96:de:c5:1c:e3:
ca:7f:3a:df:2a:7a:06:27:e6:b6:11:d1:b5:b8:06:db:be:e1:
d3:63:46:56:e5:ef:ca:9e:bb:4e:ba:db:99:3a:c6:25:54:8e:
47:17:0a:57:15:6c:9b:b6:bd:a8:c3:fd:b9:19:93:ca:97:12:
b6:bb:e3:3a:cb:1f:65:23:bc:49:20:14:fc:48:d4:87:01:31:
11:7e:da:7e:3f:1c:0a:9f:2a:23:3d:29:82:53:93:55:04:8d:
8d:cb:20:d0:9c:f6:26:d5:65:3b:73:56:2e:3e:1f:cc:a6:45:
55:95:1a:17:6b:16:a3:a5:99:59:6e:20:a3:dc:14:93:73:23:
f8:49:b9:e9:ca:26:d2:74:ba:43:d7:7b:bc:d0:ff:cd:f8:6e:
b6:ca:67:58:bd:28:69:92:98:91:87:f8:56:30:6a:f9:37:79:
49:7f:bb:8d:c0:62:36:de:a2:3f:4f:85:f8:03:a2:c7:ad:96:
8d:46:41:33:bb:62:d4:9f:f3:3d:eb:ed:39:c9:a4:bf:48:89:
8e:a7:b2:ec:c0:c4:0c:9d:b9:30:4b:18:96:28:f9:ca:28:80:
68:a5:12:fb:09:ca:7b:85:34:fb:19:c8:be:ab:eb:ab:32:7c:
54:1f:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:27 2025 by rpki-client