Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb56cb92-b2af-486c-8e14-550871fce8cf.roa
File: cb56cb92-b2af-486c-8e14-550871fce8cf.roa (raw, json)
Hash identifier: Fciaol4ZbE2fZP1o1rriztEIVgjz0lIdp+SqEMHRuXs=
Subject key identifier: 89:C3:24:31:58:A1:02:56:9C:EA:67:E9:8B:7D:3C:18:FB:A0:FA:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53E242031D890B34798D41429812B4A07A6275F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb56cb92-b2af-486c-8e14-550871fce8cf.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.131.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e2:42:03:1d:89:0b:34:79:8d:41:42:98:12:b4:a0:7a:62:75:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=a1cf342afd2f38020c9ed1639873614bcc30fcf3958d8059af97b3f2cc48938e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:b8:04:a5:35:f3:a3:1e:0d:d7:42:9e:df:
0b:b3:f8:2d:28:8a:50:eb:c9:34:a4:e1:28:33:64:
78:6d:4c:ec:75:13:41:75:e3:41:1f:40:79:af:cf:
c3:d6:1b:9e:03:0a:e4:a5:4b:de:18:cd:82:c4:e3:
38:3d:9b:55:b0:87:7c:fb:56:54:74:3b:66:fa:e2:
10:7d:de:80:5b:cf:0a:0c:21:46:0c:ef:1a:55:8e:
0f:8c:29:80:17:d4:4c:e8:8c:bd:26:b7:a4:f5:dd:
f4:fa:7b:07:fa:47:b4:24:50:1a:c5:8e:18:6c:45:
35:3c:f0:2a:63:89:29:2f:a3:e4:44:87:11:63:e5:
78:00:01:16:cb:36:5d:9d:41:85:e5:e1:1d:13:7a:
01:c2:23:cc:2a:a0:9b:1f:9e:ba:63:c6:eb:dd:86:
4b:3b:ba:e7:8d:c4:28:c0:92:d7:2f:e3:85:65:2a:
dd:c5:7c:45:f8:22:ca:96:91:a9:94:ba:2b:3e:a3:
b6:ee:d1:b1:e5:1a:15:a7:19:93:1c:74:58:5d:f6:
08:22:e9:d8:56:88:c0:8a:a3:0c:48:b6:2d:b7:bc:
5d:03:78:54:d2:61:d5:59:f2:44:7d:f6:dd:75:12:
73:78:5a:a2:bb:0e:a1:16:e3:f3:ac:7a:b1:a0:51:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C3:24:31:58:A1:02:56:9C:EA:67:E9:8B:7D:3C:18:FB:A0:FA:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb56cb92-b2af-486c-8e14-550871fce8cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.131.192.0/18
Signature Algorithm: sha256WithRSAEncryption
49:62:bf:ab:81:39:00:be:2c:33:1d:dd:6e:96:59:19:9e:51:
d1:89:88:b2:ae:b8:6b:00:f8:18:35:74:c7:59:23:f0:a7:fa:
0f:24:1e:18:90:48:71:c4:5d:78:38:07:a1:0b:7a:a7:12:e0:
9c:6a:1d:d5:84:69:54:89:80:24:75:7e:52:de:8e:8b:c9:30:
35:a3:18:3f:61:a0:18:de:23:0e:3e:1e:2b:16:89:c7:02:17:
26:fa:3f:3b:e6:dd:dc:01:39:9e:5d:d5:d0:3a:43:44:25:d1:
cc:e5:c1:4b:54:27:6c:d2:5a:2e:be:15:71:fe:e9:53:93:aa:
15:37:b2:41:8d:29:93:fa:21:87:1f:58:99:bd:97:44:be:89:
e9:92:41:ce:b1:70:59:ef:b1:eb:4b:12:ab:1e:a1:df:39:8a:
ab:64:3b:52:63:7a:03:a8:60:e8:bb:05:30:f3:d8:01:03:37:
10:f0:24:9a:07:1d:1a:9c:e4:5b:ac:3e:59:b5:ac:c7:bd:93:
81:50:02:69:7e:d3:19:53:cc:75:a8:57:9b:79:bb:ca:a4:b3:
7f:bf:17:2f:f7:6b:b4:46:ff:15:27:f0:10:f3:77:81:c8:57:
3c:4c:96:fa:9b:c3:cf:02:d1:d9:37:28:6f:00:35:9d:8f:16:
9f:0b:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:49 2025 by rpki-client