Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc810cd8-ce41-47c4-8b86-c9b9a8ae0321.roa
File: fc810cd8-ce41-47c4-8b86-c9b9a8ae0321.roa (raw, json)
Hash identifier: Bd8gJd3RP/cTOMqWnpT7pkZhU7O/57/Sa1Uvmfi6wNU=
Subject key identifier: 45:77:66:FE:C8:F8:50:E1:97:90:CD:BF:B6:B6:CF:B8:66:C8:B0:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0673C5BD514211FAD26BCFD842B9511D0C7C949E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc810cd8-ce41-47c4-8b86-c9b9a8ae0321.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 204.236.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:73:c5:bd:51:42:11:fa:d2:6b:cf:d8:42:b9:51:1d:0c:7c:94:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=199c5688dbb75dcf343e0c4bb6803d42a0ee893935585448192aefbfccc6e2ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:b5:f7:40:ae:b7:ef:c0:ee:fb:83:b5:b9:
19:ea:96:ac:3d:b2:ee:94:8b:98:5e:72:87:72:8b:
d7:eb:8b:e8:61:2b:33:89:d5:94:1c:3f:6e:51:5e:
ad:5a:ca:98:a3:2c:53:d8:b1:a7:3e:b8:4b:5b:07:
ad:26:9b:ed:4f:2d:77:79:65:2b:56:fd:47:4f:c0:
d4:2c:02:51:a1:1e:9e:b3:52:13:b9:6f:4e:2c:c3:
c1:43:3a:cc:73:05:33:c9:26:7f:14:b1:ce:ab:99:
78:66:1d:38:68:7a:5a:be:79:d5:ec:20:ad:8c:81:
89:40:29:5b:48:72:02:ae:95:5b:eb:d6:0d:54:70:
db:a4:f2:e4:30:a0:98:ea:d3:61:4c:9a:4e:67:fd:
bd:24:0c:eb:2b:d0:e1:2e:9d:da:f0:42:8c:c1:1c:
2b:ad:01:02:bd:ea:9a:40:3c:da:70:2b:da:e2:a7:
42:b2:e5:cf:5b:a0:8b:15:56:c2:f0:00:2e:82:a9:
1c:8a:8c:9b:66:d5:c8:69:5c:04:39:b1:1e:d7:86:
95:40:f3:ea:2d:d0:d0:d9:64:c9:7d:91:e6:37:cc:
a6:ef:51:4d:ad:3c:d4:ec:83:62:c9:80:a9:2b:88:
6e:6b:7c:6e:95:c4:1e:fb:79:42:6b:2c:e7:89:6e:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:66:FE:C8:F8:50:E1:97:90:CD:BF:B6:B6:CF:B8:66:C8:B0:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc810cd8-ce41-47c4-8b86-c9b9a8ae0321.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.236.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:26:35:e0:ab:9c:0d:f6:83:fc:c0:37:32:05:8b:19:1e:45:
89:32:78:8b:11:d3:a1:fd:37:b0:ac:67:47:96:3f:07:fd:a9:
2a:4b:bd:1d:08:a1:79:e4:6a:0f:d8:dd:6d:0c:77:bc:50:12:
9d:a5:fe:fa:d9:35:c2:82:66:88:15:4b:81:91:80:ae:94:b4:
b4:a3:d7:3a:f8:5e:dc:01:c4:8b:07:39:d0:b5:8c:ce:df:50:
90:3c:2c:ad:25:af:f4:20:b5:fd:c8:e0:91:a4:7d:d1:92:19:
93:5b:0b:62:5c:90:44:0b:41:a5:eb:76:03:85:f7:09:98:e6:
84:df:2d:88:3d:50:66:f2:40:82:a0:5b:de:dd:e0:5a:75:85:
23:b3:03:bb:6c:dd:f1:ea:3e:0a:ec:39:c9:94:43:09:48:9e:
fa:4c:02:14:53:d8:25:b2:98:5c:a5:8a:72:90:22:af:58:c3:
d4:b9:80:c4:38:e9:14:d8:d7:23:59:94:45:f0:45:9a:61:45:
c4:e4:c8:5b:6b:44:5a:14:a4:88:8d:c5:ff:53:28:bf:32:1e:
96:54:88:97:18:64:22:61:7d:6d:ce:f9:06:96:9b:4e:67:ec:
9b:84:53:31:59:15:92:fb:20:a8:c0:6a:82:0a:ed:c0:65:6a:
7c:9a:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:49 2025 by rpki-client