Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe6d92fb-df44-41d5-9f4e-795e4dd03395.roa
File: fe6d92fb-df44-41d5-9f4e-795e4dd03395.roa (raw, json)
Hash identifier: nKqTcD7FRVuCrYgaq5H/AiaFn5jIu9kFwe1EEiN+o1k=
Subject key identifier: 09:4B:20:C9:FE:A4:EE:2B:38:A5:35:4D:6D:DE:A3:19:5E:64:80:1F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 647E98F12958B0FF1819C626EE6B2EB94974A2E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe6d92fb-df44-41d5-9f4e-795e4dd03395.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.175.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7e:98:f1:29:58:b0:ff:18:19:c6:26:ee:6b:2e:b9:49:74:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=6b7499558bad36f4d31b21dfb70da5fd59203a55659f9b3b9fc79c9c98496f39, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:67:54:42:af:45:87:92:7f:72:e7:ed:15:
c6:b9:53:2b:97:9c:8e:48:59:73:87:54:89:4b:5b:
f8:14:5c:c5:6b:af:c3:00:5f:01:de:f8:7c:50:55:
dd:61:ea:b9:40:02:e2:8d:52:c1:21:37:20:23:80:
e9:b0:95:85:b5:ba:0c:cf:1a:48:89:72:c8:dd:3e:
cc:3f:a9:77:6f:7f:33:43:ae:3c:bc:09:25:cd:11:
f7:0d:e4:8a:93:4e:bb:2a:17:41:5f:2c:90:12:a1:
78:54:17:b1:6f:09:3f:73:46:7f:01:b1:db:cb:64:
e6:42:a5:a7:3e:b3:28:13:88:ad:82:4d:30:42:16:
16:ef:1f:fa:a1:06:70:d8:86:3f:ad:41:20:aa:49:
01:0d:f2:5b:4a:10:49:95:29:db:5f:b8:4f:26:6a:
9c:1b:2b:8b:63:9a:72:49:a2:17:44:4b:44:09:3f:
9b:13:76:87:b4:8b:3e:5d:96:17:2f:ed:ca:be:56:
22:db:61:7f:e6:6a:a7:66:0c:da:5b:20:78:9c:fe:
19:11:fb:e7:1a:a9:81:c0:d1:4b:b6:a0:2b:0c:22:
f4:5f:89:b2:ba:26:f5:40:bb:b6:66:e4:07:4f:f2:
c7:bd:62:de:0a:2e:1c:78:8f:5f:0d:6b:82:bf:85:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:20:C9:FE:A4:EE:2B:38:A5:35:4D:6D:DE:A3:19:5E:64:80:1F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe6d92fb-df44-41d5-9f4e-795e4dd03395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.175.60.0/22
Signature Algorithm: sha256WithRSAEncryption
88:22:ad:12:0c:57:44:19:38:b9:05:c7:30:23:46:5b:84:f3:
9d:33:74:4b:32:a9:45:7b:dd:f7:5d:3a:12:30:c1:5a:f5:ac:
66:05:f6:36:0f:24:1c:c0:87:ad:23:77:20:13:fa:3c:20:84:
99:fd:3b:ff:46:bb:74:ae:32:dc:77:4a:a9:4c:fd:4b:70:08:
26:d6:dd:14:1b:22:98:1e:27:0c:b2:cf:65:fc:fc:af:8f:58:
0e:fb:f5:8d:0f:80:41:51:52:aa:e1:a1:ad:d6:25:f0:09:df:
6a:86:d8:8b:09:d9:0f:31:b0:0f:7f:2d:8e:ff:c2:93:d2:55:
92:d9:b8:40:51:d3:4a:69:ac:44:28:49:47:16:53:24:a0:18:
3f:dc:49:c6:fc:8d:0f:ce:6e:f6:98:8c:49:e0:9b:01:97:4e:
e3:61:66:2a:81:dc:b1:6b:ff:b5:f5:89:b7:35:f2:cd:e6:87:
fe:89:78:6f:e7:b3:ee:cf:ca:7f:18:e8:49:b2:9d:ea:7b:90:
04:71:2a:2f:05:36:b1:ca:47:bf:91:f0:3a:7a:75:f9:53:a4:
43:c2:5d:26:9b:fd:e8:dc:bb:ac:9a:3b:92:62:98:e3:c9:57:
11:27:5b:08:03:8c:08:90:5c:b3:42:17:fc:82:56:af:61:70:
5c:c1:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:48 2025 by rpki-client