Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa
File: ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa (raw, json)
Hash identifier: /u3r5osMAondx9E/ql8LyfPJybtqOcod2eX/4hdFHFs=
Subject key identifier: B0:DE:B1:01:3B:77:55:B4:CF:F2:C8:AA:CE:0E:DA:5C:A2:BA:23:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 08008AA7B1CFF2CE6E32D6EA67304109EC6E37CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:00:8a:a7:b1:cf:f2:ce:6e:32:d6:ea:67:30:41:09:ec:6e:37:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c59789bbd84baed6b32770dfa9039ecd16d4412957b355d6c186a657fcb2c73a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:e1:94:66:4b:ac:06:cc:65:64:46:3f:12:
bb:6e:45:78:f1:97:b7:cb:c0:5d:62:99:e0:1a:d7:
7b:3f:35:c4:ca:57:ff:2f:f8:0f:f3:ff:56:5e:b4:
f4:fa:e5:34:db:5c:17:27:bb:2e:6d:b7:23:54:52:
93:28:27:be:f4:8c:4f:0d:8c:eb:a3:98:9a:5b:ba:
57:f4:f3:22:73:86:a6:c0:87:0b:d8:1a:d5:e1:0f:
52:3e:7a:45:79:63:18:03:d0:95:7d:c2:ec:75:ce:
ce:d8:e2:1c:f4:d0:c8:cd:4a:bf:e2:e9:26:62:f9:
4d:fa:4c:df:6f:e3:96:ad:16:90:20:2b:56:b2:8a:
62:f0:db:d6:52:d8:0b:0e:d2:7c:96:3f:27:a8:a6:
ab:fc:2a:67:03:64:96:c2:af:5e:56:f6:29:07:ad:
59:22:e1:7b:06:e3:f1:56:03:04:fa:95:5e:ef:8b:
95:ed:9a:f5:ae:c4:0c:5d:68:13:b9:85:a5:39:c3:
f6:64:4d:bf:b1:64:f6:f0:e6:31:76:7b:09:02:e9:
12:cb:69:f1:af:4b:7e:a5:97:af:b7:4e:db:b7:3e:
e4:44:69:67:31:88:10:b6:6d:72:21:58:83:31:5b:
00:b2:62:10:5c:81:e2:6d:30:ec:bf:85:a2:82:ef:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:B1:01:3B:77:55:B4:CF:F2:C8:AA:CE:0E:DA:5C:A2:BA:23:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:6a:70:8f:1b:29:fe:ac:7a:27:21:46:a5:bb:84:de:82:2e:
30:2e:c9:02:bb:d5:78:ab:48:41:56:ec:04:17:a9:0a:b3:9a:
54:2f:7c:dd:af:c5:2a:70:77:4c:8b:e3:e1:cd:36:fa:2f:24:
ba:be:af:25:1e:47:90:5e:8f:23:f8:5b:4f:2e:f1:f2:ed:78:
e9:2a:5f:28:0d:b3:d1:7b:be:40:c2:c6:49:c0:d2:90:3a:ea:
30:c1:95:f2:36:57:d2:86:48:5a:f5:f3:0d:55:c2:f1:a2:34:
82:9e:1a:81:a8:a7:80:dc:69:ff:64:58:76:a4:e6:50:0b:d5:
cd:3a:dc:4c:57:fc:a2:9d:68:50:df:4a:4f:6a:0f:d4:a9:64:
ff:96:6b:32:92:27:25:02:39:a2:d4:97:86:69:72:71:9f:ad:
63:c9:91:51:f5:b0:b6:96:0b:5f:fa:c2:8c:93:b5:fe:a4:30:
e5:f9:8e:53:6a:7f:a8:09:20:a8:6e:b3:79:2d:2c:9a:5a:8b:
e3:96:2d:35:51:31:ed:11:cc:8f:89:fb:42:b6:86:33:be:68:
e5:60:a9:6e:af:1c:f5:68:73:2c:d4:b9:75:ca:9c:70:a0:63:
34:ed:fd:71:e5:f4:d7:00:23:53:88:96:ef:7c:f7:e4:f7:13:
42:c2:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:45 2025 by rpki-client