Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0bc25ae-b7e8-4043-88dd-a2ba431b3e0d.roa
File: d0bc25ae-b7e8-4043-88dd-a2ba431b3e0d.roa (raw, json)
Hash identifier: zskwzuTW7zOHGzu7F7IvNRh0Yk8r+eXS2ZiXBIp16zQ=
Subject key identifier: 70:93:36:97:54:6B:06:E1:7F:31:F0:FC:34:56:DF:FD:51:8E:9E:4B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C34B14981DC96858EDCB069F84756625233E065
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0bc25ae-b7e8-4043-88dd-a2ba431b3e0d.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.224.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:34:b1:49:81:dc:96:85:8e:dc:b0:69:f8:47:56:62:52:33:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=12c91b2dd0c800e82dc7ef6a52e2f85d47a6eac33f6dc6ca071f4e6fb23c7591, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:c4:dc:29:6b:d9:3b:3c:4d:89:13:d1:cf:
ff:cf:7f:6b:56:24:fd:82:e1:a6:b4:5d:14:25:62:
9a:24:29:b9:12:78:91:a2:8a:c7:48:8e:21:56:51:
7d:ad:c3:f5:d1:17:a0:01:b4:84:f2:fb:a7:89:c2:
9e:c1:be:1f:59:71:fb:3a:ab:03:40:b6:97:88:4e:
59:9f:e6:7d:ff:bd:a4:3f:d5:69:c8:2c:b8:c3:37:
a4:4b:89:bd:7b:a5:d9:6a:b9:9b:31:e7:2a:e8:9a:
e4:f1:a1:a6:19:4f:31:7e:02:bf:f2:05:ad:f3:5f:
fc:ed:23:34:4b:2e:0f:8c:b4:9e:fc:d5:db:24:90:
ce:cf:0e:88:37:99:d3:dd:e3:a6:b3:a8:53:18:58:
a9:ea:3d:f0:50:ca:85:5d:c6:02:28:7f:64:8c:9e:
fe:ee:e7:82:88:14:57:26:60:89:fc:02:11:fb:b3:
54:61:71:7d:37:24:b0:3d:00:f6:dd:1b:79:c7:8f:
00:56:43:97:a6:e2:21:2b:c3:a8:4f:98:a8:a8:c3:
a2:39:d6:da:0b:b4:9d:e9:58:4c:e9:4a:19:89:d1:
14:84:2f:a8:8c:f5:2d:63:28:31:a4:d6:dd:76:30:
e5:fe:13:2c:ad:96:29:6e:d7:5d:54:5f:cb:fb:2e:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:93:36:97:54:6B:06:E1:7F:31:F0:FC:34:56:DF:FD:51:8E:9E:4B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0bc25ae-b7e8-4043-88dd-a2ba431b3e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:a9:9d:95:04:0c:47:0f:ba:8a:f4:15:6f:22:7a:a1:5f:4e:
be:d8:80:58:66:71:60:b4:2a:1b:58:87:c1:8a:7a:3f:a5:13:
86:6a:54:c7:a3:79:2c:89:48:6d:68:a6:09:78:37:0d:26:6d:
6e:9f:f3:96:82:25:d3:cf:e9:89:1a:20:16:6d:9f:5e:39:e3:
21:96:d8:81:27:4d:d3:8a:e9:49:00:dd:16:21:63:ff:92:35:
a0:d3:7e:d4:ae:8b:44:fd:2f:e7:5d:5b:a7:e7:0d:26:36:60:
b8:02:95:73:24:50:83:f0:4d:94:52:26:4b:ee:4a:9f:63:3c:
5f:d4:bd:77:b5:0e:5b:3d:3b:df:5e:0f:d7:47:72:5e:f8:15:
fb:1a:37:12:8a:9f:06:46:f6:f6:93:41:2f:03:ca:1d:f0:37:
76:35:91:96:98:ae:ce:29:1b:b0:bf:5b:64:24:81:32:84:63:
12:e8:2a:49:cf:de:36:16:c1:69:b2:d5:c4:52:b3:c6:cf:49:
f2:b8:99:47:bf:98:2e:a9:7c:86:96:ff:0d:ca:99:65:22:7f:
1e:5e:fc:2d:d7:d2:c0:55:21:78:4d:42:d5:b3:d9:59:f2:88:
7c:07:8c:e6:e8:82:d8:ac:ab:98:a4:f7:0b:70:bd:48:6b:4c:
d6:6d:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:37 2025 by rpki-client