Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa
File: f619c54b-758f-439f-834b-535001e1dc31.roa (raw, json)
Hash identifier: RhLr1QZTFy1/5uRnY8Y+9JMgx80heJWIwprilY+4vd8=
Subject key identifier: 56:2C:9D:2D:9B:1B:1A:14:D2:CA:68:8F:04:6C:98:CA:A1:19:31:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1BBE80DBFDE2D03C83AB355F98E37C6AE791478C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:be:80:db:fd:e2:d0:3c:83:ab:35:5f:98:e3:7c:6a:e7:91:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=f5da7fbb10230719ec7a3121dcc97116e32e4950c48641b57c36d66fb4038bf2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:75:4b:7f:50:e4:2e:73:66:36:cc:7a:a8:
cd:f5:06:18:d7:a5:29:21:3e:7a:83:e7:83:78:44:
63:b0:8f:7e:fd:52:0c:08:8f:83:8d:d7:c5:9a:12:
f6:a6:7b:bd:16:87:4d:10:c0:57:4b:d8:af:4e:23:
b4:2c:df:9b:a3:73:4b:4f:d2:5e:b7:74:91:8d:5c:
2b:ee:94:aa:1a:90:29:04:73:90:d4:c4:c8:00:a6:
3b:37:34:b1:a9:c0:17:10:83:98:26:07:e4:63:17:
a5:f0:36:2d:9f:d3:8e:38:a8:7f:eb:da:66:91:c4:
3d:82:a1:8f:b6:65:31:48:fb:7c:21:cc:1f:c6:d5:
fe:e4:20:72:2d:49:e4:f6:04:47:91:92:b8:ad:4e:
90:26:45:b6:c5:ea:9a:29:2b:b3:6b:a0:8b:3a:14:
28:a6:8b:8d:d5:d3:4e:e6:1a:b5:3e:7c:2f:5d:1c:
40:b1:4e:ca:ae:2b:56:61:8a:7d:f6:6f:f1:52:fa:
8b:9a:9d:28:68:da:0e:16:9e:44:2c:bb:a5:68:c1:
ec:19:ef:65:c6:41:cb:8d:06:2b:ef:3e:e6:4c:d2:
c7:38:bb:0a:5b:4b:4b:f4:ac:0b:91:89:89:41:54:
01:4b:59:46:5d:04:92:40:b4:00:61:b9:22:64:35:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:9D:2D:9B:1B:1A:14:D2:CA:68:8F:04:6C:98:CA:A1:19:31:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:3a:7b:a5:10:b8:b5:74:c1:23:2f:5e:7e:87:c4:5c:dd:be:
6d:c0:ad:99:48:93:4f:d6:fd:31:a7:90:e2:2b:9b:e4:5e:c6:
e2:f2:a8:7c:d9:b9:72:7e:85:c5:e7:5e:e5:03:a7:17:20:91:
e8:c0:cf:ee:2e:fa:94:24:d2:58:19:4e:c1:a0:9c:a5:cc:69:
c8:8a:c7:53:38:36:42:97:af:92:0b:1a:59:39:9e:04:aa:bc:
b3:63:53:df:d6:f1:d4:4b:f4:7b:67:d9:12:63:40:6c:1b:22:
02:ed:46:7a:5f:99:b7:89:53:2d:55:b5:36:26:da:94:0c:9f:
63:47:bb:5a:82:f1:68:f7:b5:e0:c7:77:3b:1a:ed:ad:7a:0e:
37:5c:a9:8e:c3:d5:2b:c6:40:cd:0d:75:6d:63:b4:ee:7e:e3:
7d:1b:4a:6b:ec:8a:75:5f:dc:ac:8b:f1:a3:b4:48:76:09:2d:
a5:0e:0f:eb:ef:f7:0a:5b:5e:5f:9f:e5:21:07:39:2a:10:7f:
3e:93:85:d7:0e:ee:7d:bc:bc:75:bd:65:bf:4c:09:88:2b:50:
fc:41:a3:4b:e9:08:19:94:0c:b8:2f:6f:87:97:24:f6:67:d3:
66:63:34:0b:5a:70:d1:62:76:50:aa:99:2a:91:6e:a8:07:d8:
d0:34:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:12 2025 by rpki-client