Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f71b618-591d-482a-9df3-5520aa5a280d.roa
File: 8f71b618-591d-482a-9df3-5520aa5a280d.roa (raw, json)
Hash identifier: lzluBFGySllrZA9n1Rwa2B1HAhs1qc70svM8yQTok6g=
Subject key identifier: 0B:8C:0C:CA:7A:D7:C1:08:B6:C8:50:4D:BC:AC:61:E9:4E:1C:D2:96
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CC57C06F8C3C6DE60607D3F025061D2AAE276E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f71b618-591d-482a-9df3-5520aa5a280d.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.54.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c5:7c:06:f8:c3:c6:de:60:60:7d:3f:02:50:61:d2:aa:e2:76:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=2a56b05375adfc7cce97f853143c53378c328abff09b22fe7ded8fff4063415a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a9:a3:68:ce:ab:60:8f:20:94:9d:5a:49:94:
e1:ed:9c:96:53:8a:b9:38:32:33:28:ab:f0:c2:c9:
6d:c9:42:b7:ec:2c:f9:85:e7:db:83:20:73:0a:3b:
7f:fa:98:d1:73:c5:e7:28:65:46:68:5e:29:04:4b:
ab:b9:3c:6e:b3:48:a2:78:13:bf:57:1a:db:a2:5f:
90:ff:e8:4f:8c:6d:e4:b6:39:04:89:0a:4c:22:a2:
ca:12:bf:32:a6:20:78:60:9b:49:0d:1f:f4:01:5b:
1f:cc:d5:3b:21:f0:f6:a3:61:52:5e:5c:58:45:50:
7b:6a:00:5a:9e:bd:82:4c:9e:c1:78:f5:10:b7:f6:
29:f0:bd:d4:2e:52:9c:21:1d:b6:ea:8b:0e:68:b9:
e7:82:3d:67:53:7f:85:2e:e5:4e:18:06:9e:2e:82:
ff:ac:cd:cd:35:2b:48:de:48:59:07:8a:bf:5d:9a:
a6:e0:9b:3d:ba:e0:65:24:e5:c5:5c:20:7f:11:1b:
77:3d:59:34:96:ec:0e:42:00:bf:ee:88:a4:7d:cc:
4c:42:16:59:54:4b:07:11:ef:57:b6:b4:92:9a:69:
20:84:fc:1b:56:b1:b4:d3:84:75:48:30:62:6b:71:
53:e4:2c:69:5c:f4:65:4e:b4:c7:be:90:b5:7a:7b:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8C:0C:CA:7A:D7:C1:08:B6:C8:50:4D:BC:AC:61:E9:4E:1C:D2:96
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f71b618-591d-482a-9df3-5520aa5a280d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:89:46:bf:01:f0:4f:10:ff:c8:fd:28:df:09:49:d2:44:1e:
cd:b6:08:e6:25:26:51:c3:4d:9d:26:e1:cb:f8:16:f2:a9:13:
6b:41:97:23:d8:4c:08:26:49:20:c8:d3:6f:3c:0e:86:44:70:
a4:5f:67:0a:c4:94:65:1d:24:8f:00:c0:e3:6a:35:a4:df:99:
8c:6e:e0:f2:19:df:ef:63:1d:1b:f1:be:72:ed:6f:b9:d8:4b:
e7:99:19:c3:46:31:60:47:a2:8c:57:8a:e8:20:f7:54:8a:96:
50:ca:c0:c3:e9:3c:68:db:fa:c1:65:27:74:4d:3f:07:0e:6e:
e5:82:56:57:a5:84:f6:41:2f:1e:34:e0:9c:7c:03:db:2a:88:
db:77:13:4a:d8:8c:35:c9:8a:e9:f7:5f:8b:c6:bf:bb:8a:9c:
ca:dd:0f:09:bb:6c:e1:0e:15:af:a7:27:a3:b8:08:b1:d7:5f:
ff:17:9e:8b:fc:df:1f:3c:83:8d:72:c7:40:2a:c7:1c:a3:02:
91:a3:5b:2f:83:e3:32:ba:51:54:29:0d:56:5c:71:27:bf:86:
f3:00:97:fa:2e:66:21:86:55:71:99:b9:6d:68:e1:2a:a0:58:
ce:7a:15:24:e1:d3:be:37:b0:5d:03:ad:b1:93:41:59:79:91:
9f:8b:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:01 2025 by rpki-client