Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ee5aa8d-429e-4193-96bb-7d20581f3ad2.roa
File: 0ee5aa8d-429e-4193-96bb-7d20581f3ad2.roa (raw, json)
Hash identifier: UOAbJvo9R2SbM1M2h3kjNkQKFQOZwckeJ5cPEexzqT0=
Subject key identifier: B3:E5:94:D3:A8:90:09:BC:75:C3:FF:AF:D5:DC:8F:53:D7:76:FA:02
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 284471C663AC02BEE65A79473D2C5E2648C843E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ee5aa8d-429e-4193-96bb-7d20581f3ad2.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.16.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:44:71:c6:63:ac:02:be:e6:5a:79:47:3d:2c:5e:26:48:c8:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=31ca77b529c395280be2d9af6cfbdc665bc586414ab7e1c472620a4b4f5b43a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:59:cc:dc:bb:73:c5:70:a5:61:d4:7d:95:1e:
4a:90:11:e2:46:6a:ee:cd:59:23:2b:dd:80:59:0d:
ff:ea:02:5a:6b:a3:b2:63:49:aa:99:45:1f:96:ad:
50:30:a7:c9:75:9b:d8:f9:b4:61:a3:4c:36:70:c6:
42:21:0d:5b:48:f0:cb:f2:a9:76:88:7a:b6:1a:f2:
d8:c0:a5:06:16:c2:f1:30:9e:f9:31:35:26:b7:24:
99:77:b5:bd:1c:39:7c:44:7a:ef:f6:4c:da:ec:1e:
30:5f:98:b4:85:dc:ea:c3:a2:4e:d6:63:c6:c5:2d:
0d:48:eb:71:9a:25:6b:cf:2c:1b:8f:eb:64:a2:58:
eb:7f:a9:ab:aa:39:c0:e6:3b:92:93:fd:93:fb:22:
20:42:d0:e4:77:51:db:81:09:f4:7d:08:2c:63:16:
67:ed:74:07:7c:59:78:08:4d:e7:eb:97:44:53:9e:
db:9a:58:7e:51:86:51:07:0c:a2:99:37:67:8c:da:
b5:10:bf:a6:e2:0a:eb:8c:11:24:f2:fa:5f:cc:50:
8e:f4:2e:c8:16:17:57:89:06:f8:6d:68:db:74:1b:
92:1a:15:9c:e6:a8:92:0c:89:ea:2b:36:e7:9f:ca:
a3:c4:58:f8:03:32:2c:f4:0d:ba:a4:3c:e2:5b:ef:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E5:94:D3:A8:90:09:BC:75:C3:FF:AF:D5:DC:8F:53:D7:76:FA:02
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ee5aa8d-429e-4193-96bb-7d20581f3ad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.16.160.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:ec:c1:c6:f6:43:ec:c9:cb:5d:69:d8:72:e7:9d:93:27:a1:
2f:ba:a2:32:4d:19:66:58:85:0e:68:7c:2b:50:9e:31:06:a2:
a2:5a:a8:10:7d:12:39:86:33:ef:cc:c8:37:e1:be:3d:e4:e2:
3b:69:00:98:b8:a3:55:8d:76:ab:38:07:25:d1:2d:77:bd:08:
e5:97:ec:d2:79:39:46:1c:80:b3:31:d4:e2:7c:76:4c:11:79:
e4:ad:d0:5f:59:51:63:05:7b:b1:09:2c:7b:cd:cf:96:98:ff:
37:ad:fe:e9:a3:7b:21:94:60:5f:a6:3e:e1:e8:eb:0c:ce:a8:
4e:f6:26:85:21:40:97:fb:5b:0b:fd:2c:2a:62:0d:22:2e:5a:
26:80:f8:39:66:bf:f4:cc:87:2b:e5:81:8c:b0:c3:26:7d:9f:
56:f9:9c:0b:0d:04:c0:0d:71:b0:88:c3:89:ec:8c:4a:04:3d:
f8:65:4e:ba:18:f5:ea:78:eb:23:ea:5d:0d:05:2f:da:2b:99:
cf:5d:0c:09:4c:ee:cb:d1:09:5d:53:90:f3:d0:f2:cf:70:39:
cb:42:8d:3e:8e:62:97:f0:a3:f6:7c:68:8b:a3:50:99:a2:7d:
b7:00:66:92:fa:ce:c8:19:fb:ca:1d:75:da:57:4a:5c:4e:e9:
4f:a0:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:07 2025 by rpki-client