Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa
File: a3551575-fda8-40cd-a012-2dd98f54a35c.roa (raw, json)
Hash identifier: T5TteX5d2I42Konfv/LwXTJp3cK7OnR/Ww6JFauKsP0=
Subject key identifier: 03:37:3D:BC:8D:4B:3D:6E:5D:12:CB:BA:C5:E9:7C:A1:28:38:93:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22266AAC3D4DC7898ED204C86A08364186F43B9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 198.13.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:26:6a:ac:3d:4d:c7:89:8e:d2:04:c8:6a:08:36:41:86:f4:3b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=a9fd0b9b4179ae435b119b225aa56d902dcf13e009bffc07b02351c7b2b9be51, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:fc:8f:fb:69:e2:17:ab:3d:8e:74:c9:6b:
41:fc:4e:0c:f9:bd:b7:04:fd:cd:c3:47:c8:4e:a5:
24:15:b4:6d:e0:56:31:63:7c:b8:4f:0a:9b:4a:81:
c3:99:5c:7e:43:b3:be:60:f6:11:c9:48:53:76:81:
cf:e9:96:d5:82:fb:7b:19:e7:85:4a:a0:5f:4b:f9:
dc:98:9c:31:f4:05:41:e0:35:11:05:76:aa:18:53:
ba:ce:4b:40:6d:15:59:d1:e4:38:bc:3d:90:b2:91:
9c:f8:fb:7a:67:05:3c:c6:4c:87:c4:8b:a0:4d:b7:
83:a0:2e:fc:c2:f3:e2:6b:3b:bd:c0:87:ef:4a:3b:
df:ac:99:cb:0e:16:e6:74:4e:39:60:88:4c:d7:08:
89:8a:85:58:96:aa:9d:0b:24:48:39:f1:05:b3:52:
bf:50:5f:c2:ac:66:dd:23:e7:84:b4:46:31:e4:be:
4d:50:cf:e8:0c:bc:91:9e:8b:c8:f3:44:a0:4d:ad:
4e:5c:d8:f9:6d:6c:d6:45:97:57:92:19:5c:65:c8:
8f:b1:9b:e4:b3:b7:5d:e3:62:ed:b9:77:86:5e:1c:
f2:78:ca:3e:d9:ac:fe:6d:3a:0b:50:56:ec:61:a2:
5a:e6:b4:4e:cd:d9:80:80:83:36:fb:25:4b:4e:5d:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:37:3D:BC:8D:4B:3D:6E:5D:12:CB:BA:C5:E9:7C:A1:28:38:93:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.13.96.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:20:1d:21:e4:7f:53:79:b4:fe:d2:97:98:3a:d9:57:48:64:
21:9d:e2:87:f8:84:d7:23:36:d3:4e:f6:14:fe:01:85:0d:49:
2f:e1:31:1a:cd:8e:7a:47:d3:58:99:ba:87:c6:0c:8e:c6:f7:
c7:6f:9d:53:c1:83:b7:93:0c:87:d3:01:72:b4:f9:91:ad:01:
53:05:9b:de:2d:b0:ec:54:bd:c7:e0:1c:04:9b:5d:25:9b:7d:
ec:ce:db:5e:77:3b:9a:f6:04:e7:78:b0:d1:86:ea:d2:04:66:
02:d4:0c:63:10:81:06:7a:ea:8a:1c:80:42:65:2b:d5:66:eb:
9d:76:a6:6e:0a:cb:73:6f:5b:8b:a2:10:89:38:fc:42:d3:b2:
3f:f6:9e:05:fe:69:61:77:86:b2:10:d5:fb:dc:f3:fb:21:24:
99:71:ef:4e:64:88:d0:09:23:b0:eb:e0:1c:28:ba:01:3c:19:
7d:61:df:58:94:b0:43:5a:f2:95:82:2a:5a:d1:15:14:0e:e4:
f6:ed:3a:c8:56:f0:f2:ad:54:dc:cc:0b:41:3a:8f:64:d3:2c:
bc:17:3f:e3:74:9f:04:3b:c9:a3:4a:00:0d:07:fc:1d:eb:87:
31:1e:7e:eb:78:cc:c9:0e:a0:39:cf:a3:95:3f:6b:ae:c9:9d:
ce:cb:5b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:14 2025 by rpki-client