Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc2c70b-2c53-4001-8560-44ed39824c11.roa
File: 1fc2c70b-2c53-4001-8560-44ed39824c11.roa (raw, json)
Hash identifier: Nm1YuFwxMMT74kYnMZPq/ESEiVbPn6umbpfW2VvdJGc=
Subject key identifier: E7:45:0B:09:C1:92:E2:44:41:BF:68:76:CD:E4:16:3C:B8:63:7B:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 67B909C252D10315D79F99F82C272CFCACBD1865
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc2c70b-2c53-4001-8560-44ed39824c11.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b9:09:c2:52:d1:03:15:d7:9f:99:f8:2c:27:2c:fc:ac:bd:18:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=2fc245c8670529fc37e537a15e4add82803df37b967efaf7ad9220b559678253, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:e5:d0:52:89:19:f9:b2:9d:77:ca:71:3d:
1e:57:b6:1a:95:1c:e9:88:55:3c:57:5a:39:4d:9f:
78:5e:09:78:be:e8:20:ae:71:9a:3b:17:7d:6a:e4:
65:0c:44:78:dc:6f:96:06:e3:15:93:4e:eb:df:33:
81:8e:40:77:ed:89:93:06:26:74:57:2c:fa:9a:ab:
6c:44:9d:2f:78:dc:fc:65:17:38:17:f8:50:da:22:
70:3c:af:ac:50:d2:35:07:a0:df:af:27:73:ce:e6:
bd:c9:43:a3:bd:24:e9:f1:57:a8:ac:81:9f:9e:b6:
e1:5c:bc:14:c2:06:70:ef:9c:04:55:96:48:d3:f4:
10:41:48:d1:57:93:52:05:75:36:ba:16:c3:09:4e:
de:28:a1:68:75:1a:36:b8:69:6d:38:36:da:60:bb:
4e:aa:e7:ee:83:ab:01:2c:5d:e5:94:47:71:b5:23:
16:f7:7b:1c:dc:93:3b:5a:5d:da:db:0f:0b:8d:80:
8b:07:59:49:e1:05:49:26:58:b4:0b:ac:83:94:ee:
1c:30:c2:5a:63:d7:86:f2:a0:e7:65:66:b6:72:30:
2f:6e:e0:83:1f:ae:c9:1b:f3:5d:37:1f:66:4b:cf:
b4:64:5a:63:ab:12:c1:66:cc:af:28:48:83:53:67:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:45:0B:09:C1:92:E2:44:41:BF:68:76:CD:E4:16:3C:B8:63:7B:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc2c70b-2c53-4001-8560-44ed39824c11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:50:dc:e5:5e:d1:31:f8:d8:d5:e4:5d:1d:28:9b:ba:6b:15:
dd:d7:e7:68:22:b1:ad:38:67:86:8d:44:3d:74:98:38:d2:c6:
d6:03:03:89:02:12:ae:95:45:c0:17:46:36:a9:a7:ce:2a:d5:
50:65:74:ea:f2:d6:8e:a9:99:af:ca:cd:f0:53:3d:c3:8a:cc:
53:79:43:bc:b4:fd:6c:ce:89:c0:fb:99:0f:38:80:1a:bb:b6:
0a:9d:7a:f7:74:27:18:80:50:41:20:85:c3:59:d3:08:5d:da:
7b:f8:e7:ce:c3:a5:85:cf:ac:b5:ad:2b:b3:35:37:8d:62:1a:
d5:e1:ac:1a:a2:81:4e:68:4e:de:13:6c:30:f7:6d:d3:2c:0c:
00:76:38:d7:b2:ef:a2:96:d4:18:e3:2e:4f:f2:81:76:49:8c:
e6:d2:03:a5:cd:9d:1e:65:2d:17:f0:60:52:2f:eb:3c:1e:e3:
d8:07:03:20:a1:9f:f3:83:83:a3:3d:58:a4:1a:91:bb:a2:9f:
c5:f2:be:de:1d:40:26:ba:c2:47:87:22:b6:ff:1e:37:14:0c:
34:08:78:c0:0c:fd:78:92:5a:7b:a8:d7:4a:77:e2:81:14:71:
8e:a0:58:b7:e9:29:6f:06:a7:a7:fc:3e:61:7c:0f:dd:c2:fc:
9d:59:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:38 2025 by rpki-client