Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da27c9bf-316a-4fc6-8246-9d760f3eb66e.roa
File: da27c9bf-316a-4fc6-8246-9d760f3eb66e.roa (raw, json)
Hash identifier: 5mUgBHwLBt69/8k/xhqWPi1HxMFpVdoXddx7oMMijVI=
Subject key identifier: A3:81:A5:57:44:A6:B6:BE:91:4F:04:CE:BE:3C:19:50:EB:88:0C:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46CD9D3B86CDA4927B6D137BA7571876B263F050
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da27c9bf-316a-4fc6-8246-9d760f3eb66e.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cd:9d:3b:86:cd:a4:92:7b:6d:13:7b:a7:57:18:76:b2:63:f0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=c6648e4a020d8fb1d50158d24067bc0ab9e3f5b5550f08fe45810fb264d51c8b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:e4:f6:b1:89:f0:ee:85:62:12:df:c8:85:
fe:38:d6:26:e6:4d:cc:e2:e0:d4:37:1f:23:77:4b:
c9:2d:d7:70:72:54:57:73:73:f9:07:90:d7:e8:ad:
98:ce:01:34:04:f5:29:05:c7:c2:4b:09:69:9f:3c:
8d:82:8b:45:a1:80:63:eb:73:4b:be:93:8e:6a:2e:
f4:64:66:8d:71:71:35:f2:ff:e2:0a:bd:14:a2:b1:
2a:a5:c9:35:37:e3:9d:23:e8:2a:9a:1c:a9:8b:80:
5b:c5:ba:fd:5e:a5:d2:31:1f:df:ce:61:a5:a0:65:
c2:d4:8d:62:c9:b8:25:69:94:9a:ac:45:dc:e3:26:
29:df:fc:2d:06:c2:66:8d:8e:0e:a5:c9:48:d1:36:
ac:1e:bf:15:80:f3:bc:da:9b:66:59:65:ce:e3:f0:
b5:7c:0b:7e:e8:e9:07:69:98:e8:26:75:74:b0:2a:
23:3d:9d:de:df:1b:97:48:4d:b3:28:18:5a:cd:d6:
4a:32:f0:0b:42:b5:a2:86:53:1f:11:80:88:0a:c4:
c9:15:40:ba:c0:58:2c:44:d8:83:8b:f9:80:78:b5:
c9:89:8e:90:68:34:b4:eb:e1:6d:18:d6:a3:f7:a7:
67:45:21:ad:f0:d3:a6:31:d3:0c:d9:95:e3:fa:b3:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:A5:57:44:A6:B6:BE:91:4F:04:CE:BE:3C:19:50:EB:88:0C:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da27c9bf-316a-4fc6-8246-9d760f3eb66e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9b:a6:66:6f:a3:00:e9:84:98:89:f7:36:64:7e:12:0a:61:
c5:7d:2c:b5:47:17:e6:e8:3b:29:a4:73:7f:f1:95:3c:34:97:
53:a5:6e:18:89:47:21:60:8e:ad:5a:45:1f:aa:7e:19:37:8a:
6b:d7:7d:dc:6e:4e:7b:0c:88:99:e6:fa:8a:7e:01:b7:d3:e5:
7f:8e:4c:25:db:2e:27:32:7b:0b:98:bf:65:d3:e5:82:98:dd:
59:7e:b8:da:31:a3:38:2c:07:a1:82:ed:3a:84:e5:84:2a:f9:
0b:f3:5b:81:c8:98:3e:10:51:69:33:da:8c:ec:81:0d:56:e0:
86:24:20:e9:13:19:5a:18:2c:09:bd:d7:da:3a:f6:a4:34:ea:
d7:ef:77:5b:4b:42:36:85:2b:68:d7:74:4f:d0:fc:7d:70:90:
10:f6:24:3f:f3:fc:21:93:4e:a8:29:36:de:b9:c0:e3:ff:3e:
8a:22:84:e4:7c:f6:4e:51:d9:4f:c6:39:20:8f:e1:18:36:82:
5f:99:e4:af:3b:9f:c7:87:8e:0f:3f:69:8c:ae:b9:81:9c:54:
e7:c4:c4:52:8d:96:15:bf:bb:7f:d0:55:13:24:51:8f:e0:63:
4c:b2:77:3f:9d:7b:4e:cf:96:63:49:60:68:a9:66:20:34:5e:
2a:9a:97:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:12:59 2025 by rpki-client