Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc10483c-70c3-4bce-8108-55e2ec35820d.roa
File: fc10483c-70c3-4bce-8108-55e2ec35820d.roa (raw, json)
Hash identifier: ic4TSMmFKuPGAaO29pdCWCP86+AtEvhMOfOje7oA5JM=
Subject key identifier: B4:D1:AA:68:65:23:25:A6:7D:8E:42:17:AE:C0:80:A4:6C:7E:0E:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 710FB6EDBCCD35D4B8684F548DF8346FFB3E1401
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc10483c-70c3-4bce-8108-55e2ec35820d.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0f:b6:ed:bc:cd:35:d4:b8:68:4f:54:8d:f8:34:6f:fb:3e:14:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=afb1360d59ffa0724ba0e53b4ae3e290d797e43fb4c66e2cb2b25d66a974458e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:a1:82:25:e6:a4:7d:e2:3c:37:68:e4:10:
93:61:3e:1f:60:7a:61:45:24:02:f5:68:78:f7:da:
8f:4f:50:bc:20:70:37:b8:62:87:3d:0f:a5:1e:df:
38:76:ea:d2:02:d2:e5:7b:39:b1:ed:97:74:4c:9f:
26:40:9b:37:df:8d:e6:75:36:d1:96:f0:10:f6:0e:
cc:5e:1b:66:ec:2a:11:f7:ff:bb:e0:b0:c7:3d:08:
ad:f5:70:ea:e7:1a:88:2d:8a:df:8c:94:11:93:22:
aa:cf:e0:67:ad:27:3f:af:40:63:60:55:59:da:8b:
8f:52:21:2a:13:9d:7b:3f:7e:a7:a4:60:71:6d:f2:
3c:60:7c:f4:52:63:94:49:61:78:0f:a7:c5:31:d8:
bd:22:31:25:41:95:98:25:5d:88:74:49:0b:81:63:
95:bb:c7:29:81:4a:3a:08:dd:11:73:28:9f:d4:21:
d6:ef:5a:78:d8:56:80:a4:7c:8e:45:31:48:37:1a:
d7:eb:e0:52:bd:53:b0:ea:35:cf:4e:e1:64:f2:60:
ee:43:26:18:8e:8d:88:09:28:66:a4:f7:ed:6b:07:
2e:51:a4:d0:99:14:c2:65:d2:f2:c4:85:47:51:22:
42:c0:43:c4:2b:9c:e7:42:d6:5c:8f:3e:82:33:80:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D1:AA:68:65:23:25:A6:7D:8E:42:17:AE:C0:80:A4:6C:7E:0E:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc10483c-70c3-4bce-8108-55e2ec35820d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:13:a8:af:29:09:f6:72:bd:48:f6:57:0c:80:42:dc:cf:10:
ec:19:d7:c3:49:19:06:c9:86:22:34:77:32:97:d4:03:cd:03:
b3:ca:ca:64:36:ce:02:38:77:b8:5d:96:5c:d6:22:f9:9c:aa:
5d:8c:7f:5b:13:23:e9:21:aa:e8:04:76:08:3f:60:89:38:f7:
dd:02:df:3b:7c:09:cc:e5:6c:76:ba:86:48:d1:7a:03:7b:fb:
6a:38:c3:10:2f:80:a4:3a:dc:84:bd:14:01:3b:cf:ec:c9:45:
c5:65:dd:05:ed:0a:76:e6:eb:ce:ea:e2:4c:84:e9:07:0e:6b:
06:05:00:a7:9f:08:d0:52:5a:cd:b9:d7:92:3f:2a:97:d5:7b:
2c:fc:81:e2:69:44:f3:09:e0:cb:28:45:93:91:11:a9:20:cb:
d2:0d:19:89:0d:f9:7d:3e:75:a2:50:9e:e9:22:c1:4b:77:f3:
ad:73:62:96:29:c5:ab:62:9d:1d:ee:42:00:4a:b1:41:80:a8:
27:57:72:2f:45:ac:87:f6:29:ce:a9:fe:07:26:4c:ba:de:ee:
65:c9:37:ed:1a:18:ef:4f:2b:9e:0f:02:93:4e:8f:e4:b3:6d:
8a:76:46:81:48:7e:b0:df:c7:9d:0f:77:40:15:f6:c8:83:33:
ff:27:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:51 2025 by rpki-client