Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa33094c-fc6e-426d-8a0c-c3010af5cd56.roa
File: aa33094c-fc6e-426d-8a0c-c3010af5cd56.roa (raw, json)
Hash identifier: O6jh4Dg8mfHT81142YfdciSDmXtignvPZMGF3vSc9pE=
Subject key identifier: F9:CA:95:F1:15:09:55:39:D8:62:D9:D9:C7:C3:5A:DA:08:5E:72:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C13C06DDE8BABF217E6537230270069FA8177C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa33094c-fc6e-426d-8a0c-c3010af5cd56.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.148.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:13:c0:6d:de:8b:ab:f2:17:e6:53:72:30:27:00:69:fa:81:77:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=36a8682d71f7a9bcae882b58310909d2bf2290150a5d03a62cd8e5e920a2ae3f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:7e:39:1b:b0:d4:73:ff:eb:54:2d:3e:e6:
e3:85:6e:a4:70:59:17:36:04:db:a1:3a:5f:a9:c7:
c8:4a:e8:c0:e7:ba:6c:62:42:d8:c3:3b:bd:26:74:
8d:e7:5f:a4:1c:49:21:aa:a3:fc:34:95:0e:fd:2a:
db:fb:8d:77:2b:1a:83:67:38:ec:a9:38:7d:bc:37:
af:da:ef:db:d5:c7:83:ec:5b:ee:db:24:13:49:f5:
1a:b1:be:71:30:32:81:1e:c0:d8:54:e2:77:38:5e:
49:0b:72:e5:fc:f5:71:ad:fd:67:a5:42:91:24:4b:
e8:98:63:1e:fc:76:85:ff:77:15:6c:a0:88:75:da:
fa:4b:fb:ae:c2:43:43:7a:fd:0f:dd:fc:23:c6:24:
75:fb:11:6d:c7:6d:7c:d4:8a:32:9b:ed:7f:6d:e0:
d2:0f:10:c8:2e:da:76:8d:6a:bd:00:67:b5:13:cf:
01:ce:bf:78:f7:6e:85:31:64:2f:be:f1:df:41:ec:
98:44:c4:57:68:6c:8c:6a:97:f9:f1:d4:da:ef:2e:
6e:ce:13:0e:d9:11:b8:85:2c:13:11:ad:05:17:ba:
70:84:9c:81:ea:ff:8a:b9:a4:8c:82:a5:cd:1c:1f:
f7:e6:83:cc:f4:b0:3b:39:c5:e7:eb:15:52:d5:8c:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:95:F1:15:09:55:39:D8:62:D9:D9:C7:C3:5A:DA:08:5E:72:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa33094c-fc6e-426d-8a0c-c3010af5cd56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.148.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:60:61:1e:1e:36:fc:9a:a1:f5:6a:54:79:79:c2:71:d6:58:
19:0b:f0:f7:77:ab:bc:08:a6:9d:d8:c4:28:d7:db:76:f7:30:
66:01:05:01:ea:12:c2:9a:4e:76:dd:aa:b3:76:43:ba:a7:a2:
da:b6:08:c5:ce:35:2e:d1:c3:7b:10:a9:37:74:fe:19:c1:90:
a5:75:4b:31:37:2c:37:c4:65:ad:9c:a7:86:08:28:18:7c:f0:
4b:67:61:7a:fd:23:bd:8a:af:9c:c1:30:e6:46:3f:3d:3f:e0:
4e:fb:5b:2f:a3:63:3a:c1:0a:7a:21:0a:06:86:89:97:30:03:
a8:c9:c5:0e:5c:12:06:86:92:4c:48:da:b4:c1:21:06:e2:f8:
ee:12:0f:0b:37:80:3f:4e:09:33:13:22:0c:34:4c:79:30:85:
81:8f:64:fe:46:05:43:06:d8:9b:c7:e1:bb:cd:9b:f6:5a:da:
0a:e3:ba:a6:00:76:de:83:b4:a7:a4:23:ba:fb:1d:d8:4c:da:
29:42:c8:61:13:55:10:71:aa:ee:db:a6:48:f6:85:52:aa:c8:
b0:ac:5e:45:e2:39:8d:b5:4c:f0:17:1f:5d:df:0d:a4:01:79:
83:85:20:b1:e1:28:6f:20:32:22:a6:df:8f:99:f2:bb:c1:46:
ff:98:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:57 2025 by rpki-client