Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40678bef-8d07-4eae-a68e-675cf4cd98ca.roa
File: 40678bef-8d07-4eae-a68e-675cf4cd98ca.roa (raw, json)
Hash identifier: mBEgBpxTSIKma/9njc6EhTWQh660VwQeh5eGYNfugtQ=
Subject key identifier: F2:0B:FD:4B:ED:6F:35:B4:FF:66:EC:C0:1E:43:1A:DF:71:0C:AB:D5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 743E5CF781DFBA554689097914AD6EE29A62C3CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40678bef-8d07-4eae-a68e-675cf4cd98ca.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3e:5c:f7:81:df:ba:55:46:89:09:79:14:ad:6e:e2:9a:62:c3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=714163ef972fd2c0dfb2e9f3ec3392c66a6ce6ebf0fc5203c2410a57118aa52c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:6c:56:cf:66:5b:0e:b3:24:d0:34:01:9f:
1b:e7:b8:c3:32:83:60:60:b2:4b:2b:8f:a0:90:3b:
19:ca:8d:dd:b9:1f:07:8e:f1:40:4a:6c:d7:9b:a9:
fa:ff:23:75:46:9f:cb:01:b1:1a:f9:30:d1:81:43:
ad:42:60:32:45:24:6b:1f:33:56:f5:eb:f2:84:bc:
c4:14:28:ad:9a:34:c1:76:13:21:b7:d9:a2:96:48:
2d:e4:f0:c9:e9:1f:a2:3a:82:87:08:b1:18:d7:39:
77:0e:b2:b0:39:5c:9a:fc:d8:46:35:88:5e:8b:ba:
96:6e:11:81:a1:d6:f2:cb:fb:24:cb:59:15:63:b7:
01:d1:1d:89:6b:80:f6:4a:2e:e1:97:cb:2f:5f:00:
49:09:c5:36:94:c7:5d:9d:62:85:37:29:02:4c:52:
b4:ab:78:3e:33:89:b5:14:60:dc:85:43:77:21:24:
62:93:0e:b2:f6:44:5e:62:5b:8c:dd:73:5e:33:53:
ca:85:8b:8a:bb:f4:30:b5:df:61:bb:34:c6:bb:28:
0d:78:f2:6e:8c:63:00:c4:af:eb:63:23:aa:0d:c7:
c6:1e:3a:fe:c0:3f:5c:1f:6e:78:e2:23:52:f1:6e:
34:37:55:eb:e6:52:2d:dd:42:1c:c7:a6:81:35:5d:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0B:FD:4B:ED:6F:35:B4:FF:66:EC:C0:1E:43:1A:DF:71:0C:AB:D5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40678bef-8d07-4eae-a68e-675cf4cd98ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.104.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:6a:42:91:75:08:6a:94:00:61:7d:2e:78:2c:fe:9e:97:cf:
81:63:e8:e7:19:ea:64:48:22:90:cf:fb:b7:d0:52:64:ab:40:
06:e3:7f:a8:5b:bd:60:52:09:a1:6e:6a:65:e3:23:c0:af:6c:
df:a6:13:5b:46:41:81:97:22:57:e1:ae:73:7a:5d:f5:e2:0d:
9e:14:32:0a:59:75:63:09:f2:e1:f2:44:15:5c:cf:4b:04:39:
e3:aa:1c:18:6b:68:78:20:18:54:20:80:04:4b:d7:cb:30:02:
9f:81:6c:b8:fe:6f:45:27:c6:a2:4f:12:e6:a6:87:cf:49:7b:
25:83:52:1b:8b:62:4c:0e:7a:a3:c7:2b:d5:7c:1e:34:67:e9:
ee:ac:c5:2f:6e:f0:92:71:1a:92:81:e5:2e:28:86:c8:eb:0a:
9d:ce:a1:56:9f:f8:7a:42:a8:e0:90:e0:67:82:1d:24:f9:33:
6a:67:0b:72:d3:b2:2a:54:2a:b0:cb:a8:d9:28:b2:79:04:32:
48:c1:b9:aa:43:e6:26:6b:08:a9:aa:b9:0a:85:fc:a7:40:5c:
91:40:e4:39:2b:7b:c5:29:06:73:d5:a9:1c:a3:30:83:9b:52:
5a:96:ef:7e:be:b0:df:51:17:06:37:ad:a2:36:1f:ea:41:59:
4b:4a:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:01 2025 by rpki-client