Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f1a410b-4fcb-46b7-92eb-4e2730e01468.roa
File: 8f1a410b-4fcb-46b7-92eb-4e2730e01468.roa (raw, json)
Hash identifier: sv+Dzdhvt8LwnFu7F9jQqFVI/wZ6kesquEmpD/aQro8=
Subject key identifier: 8A:89:12:5A:2E:8A:9A:1E:1E:64:9F:87:68:11:64:E0:E0:60:28:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B4FBEB2B7985DD4EFA53003A41101E876C3769E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f1a410b-4fcb-46b7-92eb-4e2730e01468.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.126.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4f:be:b2:b7:98:5d:d4:ef:a5:30:03:a4:11:01:e8:76:c3:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=cbbf5c26f061e117a59e84e06cb60cc215afd3a88e480a769aee5de6eb7835a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:49:cc:1c:c4:e1:73:c6:5f:5f:f1:b1:1a:06:
1c:01:0e:b8:d4:71:c4:ed:63:58:a4:d8:c4:44:cc:
d1:75:44:d8:03:5d:65:82:01:54:fe:a2:48:4f:05:
c0:f5:a9:37:3e:46:5d:84:27:b5:d2:fb:8f:90:0e:
34:13:84:97:02:5a:2c:5b:c2:1e:b7:5a:b6:7d:fe:
f6:42:2b:7c:8e:80:7f:51:f8:df:b4:fe:85:d5:38:
41:93:ee:0e:49:48:42:f1:0f:08:72:6b:6c:45:73:
eb:e3:e4:4d:4e:80:22:74:e1:ec:bd:ab:b7:95:86:
76:47:8a:f2:99:63:b9:21:ef:bf:79:9f:ea:53:cc:
5a:9a:b6:2c:0d:67:7f:31:3a:f2:49:c9:9c:f6:97:
44:5c:9a:44:7e:e7:84:ea:dd:45:96:e5:15:b2:89:
ca:f3:3f:bb:74:69:7b:75:2a:00:cd:38:c4:b5:8d:
ef:8c:d7:38:41:ac:d2:8b:ac:93:df:f6:8a:d5:0d:
35:cd:13:ed:8c:56:8b:c0:42:db:72:63:d2:2f:df:
6c:fc:53:ba:4a:6d:dc:57:5e:cc:e3:b9:78:c8:a3:
34:0c:bb:67:44:bd:39:6e:78:30:c9:fd:18:c3:53:
47:f6:01:76:65:d9:55:e0:ee:dd:d8:28:f4:c5:c6:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:89:12:5A:2E:8A:9A:1E:1E:64:9F:87:68:11:64:E0:E0:60:28:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f1a410b-4fcb-46b7-92eb-4e2730e01468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.126.25.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d5:e6:c6:2e:f1:4a:0d:10:0c:8b:76:e0:6f:0c:94:99:bc:
e0:4d:c7:90:76:1f:36:62:1f:18:d4:c2:ca:45:61:8e:40:ad:
39:6e:e5:3a:04:58:2d:a6:12:58:41:f5:bd:32:0b:c6:33:3c:
15:6e:27:ec:b2:b7:37:95:8a:92:4a:c7:4d:42:90:a6:31:9f:
00:72:c9:1c:87:83:27:b2:55:22:1d:68:9b:05:b4:f8:5d:42:
e8:98:5a:68:c3:d9:70:c3:e1:db:c1:66:05:f9:eb:f6:e8:00:
8d:59:02:49:b9:75:ab:d0:c9:0d:b9:ba:15:2b:a5:94:24:30:
83:c3:cf:1e:ca:ab:29:56:1a:5f:19:e5:f6:d5:8a:b7:21:99:
ed:8c:13:6e:aa:5c:6a:eb:fb:e1:95:bf:c3:f8:e2:aa:a5:ef:
64:06:ab:23:5e:3c:9b:99:c0:7b:b7:02:49:a2:5c:45:22:23:
92:47:38:3a:f8:80:28:73:e2:67:6a:f4:9e:b4:a7:fd:74:af:
ce:cb:e6:e4:dd:57:61:1e:aa:1d:8d:a1:2d:a1:86:b2:0e:6b:
06:53:f7:6f:a3:e9:2d:70:b2:f5:8c:b5:50:82:3d:5e:4d:14:
1c:a4:77:2c:c8:f7:80:e9:c5:ad:de:a3:4c:d8:03:17:f8:79:
1c:6a:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:58 2025 by rpki-client