Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be34e915-cdaa-4fdb-8b63-ccc9c1f6b154.roa
File: be34e915-cdaa-4fdb-8b63-ccc9c1f6b154.roa (raw, json)
Hash identifier: gpnXyikEW2DECsnCgimB1aljyQVVpDq5hgXCqcEL4vg=
Subject key identifier: 72:EC:90:ED:0D:EA:51:15:97:FE:D9:8D:0C:2A:4B:0E:93:EE:9E:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63708C0B247C79476B3C64EB86386E51D0C57905
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be34e915-cdaa-4fdb-8b63-ccc9c1f6b154.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 398378
IP address blocks: 35.39.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:70:8c:0b:24:7c:79:47:6b:3c:64:eb:86:38:6e:51:d0:c5:79:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=7a8ec48cc4090e0c4973519ad54a57f2342c00fc9e40e47c612063c0afb87cc2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:d9:82:a5:7f:21:3b:cf:74:01:b3:0b:50:
58:da:55:6a:be:4c:0d:0e:f4:7d:98:6f:46:8b:8c:
53:c9:7f:6b:26:ad:3a:85:0e:8e:da:5f:d2:7b:bc:
7f:6b:f2:ec:7e:91:0e:47:ba:36:24:e7:f4:cc:63:
57:c7:45:08:e1:46:3d:cd:62:ad:ee:16:a9:00:10:
55:3c:6c:17:c9:a9:a1:4f:a8:f8:1c:8e:cf:32:db:
e9:99:8c:7e:34:b6:a3:cd:bb:af:54:d0:d5:56:0d:
80:9e:5b:6d:90:5f:83:cc:67:ff:79:88:74:7a:f4:
51:d6:cd:53:d7:99:b7:83:19:a8:5f:41:fe:fd:38:
4b:26:97:05:ee:f8:6e:6a:64:c3:50:85:60:c5:80:
9f:d7:31:70:2e:74:01:bb:ce:8a:7c:65:0b:58:7c:
13:ab:35:da:db:ae:79:4a:bc:43:6d:bf:06:ab:4c:
3f:dd:ef:a4:aa:29:8d:19:70:3b:49:d9:07:70:91:
f7:cf:2d:c8:5e:e6:a5:cc:66:40:32:98:35:a4:e0:
fa:aa:55:d6:74:10:d6:bb:4a:40:05:b7:80:1e:20:
7e:06:c1:a5:6b:dd:30:26:42:46:6c:93:09:c1:68:
aa:be:71:16:c6:0e:a7:ac:17:32:6c:bc:79:97:f8:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:90:ED:0D:EA:51:15:97:FE:D9:8D:0C:2A:4B:0E:93:EE:9E:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be34e915-cdaa-4fdb-8b63-ccc9c1f6b154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.39.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:0e:2e:de:f7:e0:b1:6e:79:1a:58:e2:e5:bb:45:b8:0b:ac:
c2:59:f7:b7:15:5d:66:ed:8a:45:f2:44:26:43:f5:1e:bd:ad:
a9:e4:2c:3b:ff:ce:67:49:5e:84:7c:87:bc:d5:97:5b:59:0e:
fc:84:5b:6a:af:a7:71:17:aa:15:a8:54:73:5d:2d:03:7c:16:
98:55:90:02:6a:ed:f3:38:2b:61:0d:e8:32:01:c0:ea:04:75:
45:db:b4:26:7b:81:d4:4e:7f:a0:99:cc:7f:4b:7d:4c:a2:d1:
f0:3b:8c:f9:61:91:ac:d0:11:44:8e:b9:54:d6:2d:0b:41:40:
94:32:63:09:5d:ae:61:c6:a8:a9:4f:22:b5:52:35:2d:d0:45:
4a:41:24:93:b3:88:90:de:45:bd:b5:7d:aa:98:b9:2a:8c:ef:
29:96:13:75:50:e6:41:bc:54:10:be:f5:f5:45:40:95:8a:9f:
8a:67:74:09:fa:b6:0f:36:62:e8:c0:9b:03:96:c6:58:7f:70:
f4:76:10:ae:ff:04:72:6a:11:3d:ed:87:30:e0:01:a9:0d:fc:
e5:bd:48:57:13:bf:30:a5:3a:81:bf:46:08:bc:c6:1f:3e:af:
d0:37:37:a5:06:8e:a6:56:85:6c:12:e3:99:41:30:94:83:dc:
68:dc:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:25 2025 by rpki-client