Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb83b246-0a61-491e-ad32-31d7fc889bb2.roa
File: eb83b246-0a61-491e-ad32-31d7fc889bb2.roa (raw, json)
Hash identifier: dxPQi2SMFar+b/HdV+NhjvMbAWmgYfECwHyT0jzLgb8=
Subject key identifier: 51:4F:F3:16:9B:F5:C6:15:23:DF:09:BA:2B:FB:85:E9:AF:83:00:1B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FCA11473A2F112308800BE75AF4346DE3CA04ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb83b246-0a61-491e-ad32-31d7fc889bb2.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 182.30.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ca:11:47:3a:2f:11:23:08:80:0b:e7:5a:f4:34:6d:e3:ca:04:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=e6ace59fe87fe005f80525d552a1ef29c5fcbc023f30d6310c34f974bfcc327f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:43:64:c5:bb:63:59:56:ed:53:74:1d:f6:
18:2d:a8:d4:a8:bc:2c:30:de:3e:b9:4e:ab:60:17:
a2:fa:03:86:ec:0e:f6:be:0c:1d:22:b9:82:f6:bd:
9c:4c:49:9c:c6:dc:f5:19:dd:77:a1:31:3d:a4:a8:
a1:64:70:52:56:29:51:73:e8:42:aa:e3:ef:f1:8d:
3f:52:25:06:42:c2:80:57:ff:46:53:43:61:c4:d0:
55:71:04:ce:1a:53:49:43:f4:57:3c:bb:c5:13:38:
94:d9:a0:97:0a:5b:93:30:44:17:3e:49:aa:2c:3f:
89:76:6f:15:93:40:72:91:1b:45:c7:ee:2a:16:01:
a4:13:17:ba:37:36:4e:b2:26:6e:ba:07:aa:36:1d:
42:87:71:eb:e8:01:cb:6a:45:d1:a0:47:69:37:ae:
27:d4:2f:9e:71:b2:b2:75:34:16:d5:f0:11:38:71:
23:9e:dc:c3:9c:d6:6e:bb:55:7e:52:3a:84:25:16:
db:87:e9:f9:b4:44:b6:2a:99:fc:7f:26:37:6c:56:
c9:68:73:c9:54:b7:6d:ca:43:1c:f8:88:d4:25:eb:
35:5b:f8:ab:e6:af:ce:1b:36:f5:c4:05:06:c8:94:
79:cb:9b:97:67:66:b2:3b:d0:5b:01:5c:35:c9:e4:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:F3:16:9B:F5:C6:15:23:DF:09:BA:2B:FB:85:E9:AF:83:00:1B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb83b246-0a61-491e-ad32-31d7fc889bb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:91:2a:e9:63:1e:eb:5c:08:e2:4c:05:c2:22:20:3d:8a:30:
94:6d:11:b7:64:73:d8:5c:4d:f2:84:84:f7:f0:fd:95:24:e3:
a1:38:86:51:20:ab:e2:9c:ea:85:31:a8:07:21:ac:4b:96:2f:
30:f9:aa:bf:91:5a:42:b8:bd:a9:b7:8c:26:d1:98:b2:2f:39:
c0:a2:90:3e:12:21:91:22:50:b4:a0:20:48:22:77:10:2b:25:
92:71:4e:ab:51:c2:cd:d8:c4:fd:f6:d7:4a:75:de:ad:f4:43:
8e:e2:9d:8c:d8:66:b2:fc:7d:64:a8:14:9f:f4:65:51:42:fd:
fd:94:b1:37:22:bf:e6:5a:72:31:47:1b:79:31:fe:26:4a:2b:
b8:a5:40:cf:e5:d3:a4:c5:e2:3e:7d:8a:a9:fe:a4:8d:be:f0:
8d:47:5c:d6:9a:f7:ad:ab:15:08:cb:0f:e4:a1:a6:e0:17:83:
84:f4:5e:4f:7b:fd:95:d1:dd:64:d0:2b:b2:90:17:bf:97:47:
fb:57:f1:fd:e1:2d:3a:57:00:ff:b7:2d:f5:23:c5:18:27:c4:
a1:87:30:a7:b2:d5:2a:b1:db:e8:dd:68:87:b7:4f:e4:b4:f3:
8a:88:db:8b:af:dd:ea:cb:1d:5f:65:f3:d8:05:eb:ea:1c:d7:
27:ed:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:42 2025 by rpki-client