Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c892754a-62b6-4554-aef5-f62fabca2d48.roa
File: c892754a-62b6-4554-aef5-f62fabca2d48.roa (raw, json)
Hash identifier: vJuhFrNJHSkWZ0BnvdSRdby/zEPX5NKnMmVUcCGlyn8=
Subject key identifier: 7B:6D:1B:70:1C:9E:C6:69:BF:E0:41:22:12:92:B7:A8:15:34:A6:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 67747CC84A54C90CFB4E51BE555EA85A304B9B96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c892754a-62b6-4554-aef5-f62fabca2d48.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 192.251.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:74:7c:c8:4a:54:c9:0c:fb:4e:51:be:55:5e:a8:5a:30:4b:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=de45e03bd2dff5ddb1b79323db4791266211a62a742fe57c372add094966a0b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:13:f4:0a:46:66:4f:6b:eb:f4:50:af:7a:
92:aa:11:06:59:73:2b:e2:9d:d8:d8:8a:6c:71:30:
c5:18:a3:8c:32:a0:bd:ba:da:f0:ce:eb:67:6d:43:
57:40:ee:5d:6f:8b:28:57:3f:47:5b:ec:0e:7f:aa:
82:c3:e3:04:33:10:e0:ab:86:2f:9b:25:98:c8:ee:
eb:f2:c7:49:a0:4a:dd:7f:dd:d3:ea:89:a7:d4:de:
99:84:94:cf:c4:91:a1:9f:45:3e:4f:38:ed:72:f7:
08:76:0a:1b:7b:1c:62:43:48:52:92:1e:69:08:8c:
cc:52:1e:5d:b0:31:f6:6f:f9:30:d1:42:9d:52:62:
c4:40:6b:3f:70:31:55:fc:e7:64:41:16:f7:3d:fa:
0b:34:28:a6:8a:26:f1:bd:f2:fe:f9:38:5e:8d:8b:
71:93:92:3d:30:4d:e9:d2:38:0e:ef:69:b5:ae:27:
7c:44:cc:f6:a4:c4:51:8c:55:d8:5c:53:4d:20:62:
88:1f:fe:ce:40:ad:a9:21:85:e8:5b:8c:6e:16:e1:
32:af:90:2a:9e:e4:3b:bd:95:ba:62:6f:af:a5:c2:
d3:19:83:74:1b:f2:f9:d1:f5:20:98:23:47:14:d6:
38:fe:f6:c8:e7:3f:f0:a3:ff:e1:42:14:e1:f0:62:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:1B:70:1C:9E:C6:69:BF:E0:41:22:12:92:B7:A8:15:34:A6:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c892754a-62b6-4554-aef5-f62fabca2d48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.251.142.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7d:06:0f:a4:9d:e7:20:ac:87:3d:78:7e:bf:6f:c8:2e:24:
49:93:1e:83:25:6b:c0:49:d3:7a:3b:b0:4d:c5:e7:7d:0b:2f:
ee:3e:a6:9d:12:c6:1f:83:da:01:d6:cf:1e:80:e0:08:75:e7:
b6:be:98:8d:82:ae:50:f7:4d:e5:7a:ed:b8:b9:b5:95:12:cb:
07:09:d8:55:68:51:39:ee:21:9b:f4:09:03:cf:fd:28:5e:dc:
1a:79:01:a6:29:f7:2d:a5:51:2e:a6:51:da:47:25:3a:3b:13:
cf:0a:5f:2f:07:bc:74:6a:19:b5:fe:78:32:c7:0f:6a:21:bc:
46:7b:b6:60:64:47:cb:16:1a:5e:cd:47:90:f3:42:c5:47:3d:
e2:db:2b:af:83:d4:96:e9:c5:62:b6:1e:6d:43:c5:ca:22:5f:
d3:89:ee:e5:06:f8:db:b3:6c:e0:18:4a:f7:26:e3:55:f7:6e:
85:60:20:3a:33:2b:07:9a:1b:6f:b4:3c:4e:0b:26:4a:3b:42:
a1:2c:42:a0:64:90:d9:27:c2:95:cc:d0:f8:f4:2b:a0:fe:eb:
c1:23:20:17:84:e5:08:71:1d:f7:a7:e3:a6:a0:35:b7:f9:fa:
d4:73:b1:9d:de:b4:00:be:23:81:66:98:ae:24:49:78:a4:0e:
c5:14:6e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:30 2025 by rpki-client