Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1432a9a7-007c-46b8-8341-81804983fe16.roa
File: 1432a9a7-007c-46b8-8341-81804983fe16.roa (raw, json)
Hash identifier: QJ7G4IN5ahLQUuou2ELxlx8SKFagfsarjXdl0mXTrwo=
Subject key identifier: 21:4D:15:AE:94:AD:E4:59:8F:8C:8F:37:89:C5:73:0E:2D:ED:20:9B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4507DDE433A2DB8F65FD91066B5DF948D8C9397C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1432a9a7-007c-46b8-8341-81804983fe16.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.61.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:07:dd:e4:33:a2:db:8f:65:fd:91:06:6b:5d:f9:48:d8:c9:39:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=1088dff2056efde005fefa3e0c5256ba7ed458867a1f7d734db187ed29812f35, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:56:c5:d0:0b:01:90:4f:c4:23:c1:4b:78:09:
d7:84:32:cc:ce:1f:7c:a5:d5:d0:61:c1:55:9a:ca:
ba:d2:0b:c2:55:b6:59:a3:af:f8:ff:90:89:65:88:
ae:c9:61:b5:66:56:63:4b:7c:9d:e2:19:e5:9b:99:
88:84:70:a9:61:77:ac:90:b0:0b:6a:34:6a:97:ee:
05:50:c4:43:f7:06:2d:24:73:07:5a:11:f1:2e:85:
91:f8:12:ac:c6:9f:f8:8d:75:e7:59:4c:f2:f9:fe:
6e:71:42:6c:80:99:15:fc:9c:fc:46:2f:2f:bb:cf:
20:7d:89:46:c0:7d:d6:73:56:67:c9:81:7f:a4:25:
cd:d4:dc:6e:38:97:c2:86:ca:f5:b4:ec:57:b7:0f:
3b:51:74:06:08:6c:0e:9e:ce:d8:a1:cd:5a:61:ef:
b2:51:e8:b6:f9:9b:66:cd:c9:ee:68:d7:3e:16:c8:
0b:35:1b:a5:be:93:77:d4:4d:d6:b9:ce:be:d0:65:
2e:79:46:ee:a8:dc:1d:4b:3d:b7:5b:53:ff:61:c5:
98:4d:71:b2:5c:a5:15:15:35:87:a4:48:91:08:6d:
35:40:ac:a1:41:fa:86:cb:c0:3a:b5:26:48:0a:12:
f1:40:c0:66:bb:e5:8b:4d:55:03:49:2c:a2:6a:8c:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:15:AE:94:AD:E4:59:8F:8C:8F:37:89:C5:73:0E:2D:ED:20:9B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1432a9a7-007c-46b8-8341-81804983fe16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:73:19:24:07:9c:a1:16:3b:b2:5f:19:63:b5:40:ed:66:b7:
e0:5c:c3:05:b0:43:f2:3e:b3:36:89:a2:86:43:dd:32:96:fa:
fd:44:52:26:09:d7:f5:21:5c:fd:2f:ef:6f:aa:ee:41:2d:b2:
68:3f:ea:ec:c2:5b:d2:57:2c:f9:b1:a2:df:dd:a9:78:6e:45:
a5:65:1b:06:d2:e9:01:71:2f:3c:22:c1:79:ce:f9:d3:20:be:
c6:95:4d:bb:09:b0:56:76:ed:7b:bb:17:ea:51:d5:b7:96:b3:
b8:19:5e:a7:ae:c0:ac:43:e3:7f:ed:89:51:ed:80:97:64:35:
ec:70:87:83:39:ca:ef:e3:3c:3b:2a:77:c0:fb:9f:2c:36:1e:
c3:42:52:a7:59:10:58:48:41:d7:67:39:80:51:da:2f:92:de:
80:88:82:c1:e9:40:78:77:37:15:84:4c:14:96:c0:3c:fd:96:
3d:cf:10:3c:36:11:44:17:f1:f0:11:66:25:68:09:a0:2b:03:
a8:3c:04:a6:e8:af:ef:c9:32:cc:11:4e:f7:5a:37:28:c7:1f:
87:33:13:86:3b:8d:f9:1c:2b:38:21:b7:da:f5:aa:68:7d:42:
38:dd:16:8d:2c:77:14:8e:59:78:e0:98:13:25:78:73:7f:4c:
2b:7c:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:07 2025 by rpki-client