Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4448c9ac-4024-4f85-a898-bad42919a19c.roa
File: 4448c9ac-4024-4f85-a898-bad42919a19c.roa (raw, json)
Hash identifier: 1F33AFgvBNMMWlLykp+dOG2ERDh8HobidgbSZ7i1sq0=
Subject key identifier: 78:44:AF:7B:D8:E9:7B:B7:9D:A3:11:18:F9:13:39:C8:35:38:E9:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4FA545DCE9FC660A96E1B45EE87949B214735144
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4448c9ac-4024-4f85-a898-bad42919a19c.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a5:45:dc:e9:fc:66:0a:96:e1:b4:5e:e8:79:49:b2:14:73:51:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=bd44c0a43b2062123f2399f62784b2c11cca15ba16793bfbb0a27b22620d2a00, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:73:73:df:1f:15:08:af:f6:c2:57:78:12:
79:b4:74:29:4b:75:e9:b1:d0:14:cc:f7:53:85:5a:
2d:1e:8b:4b:ea:89:dc:fc:52:38:0f:c6:77:8f:21:
60:e2:b9:c3:db:11:bb:81:3a:f1:13:ee:2e:98:de:
7d:31:51:4d:4c:09:38:11:0d:fd:03:d0:55:6a:3f:
a0:c7:e5:08:ce:a0:e2:f7:0d:dc:b1:5d:cb:2c:2f:
53:f6:a9:f6:8c:50:b8:9f:9e:e5:44:59:c1:cb:d8:
73:e1:1d:d0:b8:83:27:77:82:41:cb:53:b5:7f:58:
e8:24:00:ff:9d:72:65:85:22:25:a3:e8:a7:6b:d8:
2d:78:a6:5d:96:4c:fb:c0:a7:20:13:95:53:1c:f3:
15:82:2a:84:fb:b5:8e:60:e7:9f:4b:6e:42:81:40:
4f:32:53:5a:6a:0f:33:3f:fa:4a:0a:33:2d:7a:8a:
5f:75:53:a1:6a:64:e4:75:99:cd:11:07:34:b0:65:
97:3c:b3:a1:35:09:98:6e:34:ef:0a:6a:4a:40:df:
23:ee:7b:19:a8:be:1f:13:61:cd:ee:fa:d9:21:07:
39:46:87:06:aa:04:a7:fb:d4:7e:b5:c9:a2:61:f7:
f4:00:40:95:0a:54:84:e9:b8:a3:8b:73:5e:fa:78:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:AF:7B:D8:E9:7B:B7:9D:A3:11:18:F9:13:39:C8:35:38:E9:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4448c9ac-4024-4f85-a898-bad42919a19c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:e7:1a:9d:31:ac:94:ae:d1:07:2e:11:a3:95:56:e5:1e:50:
ee:b5:bb:c4:76:3b:89:29:a2:a5:f7:b0:ad:81:b7:51:56:c6:
74:a3:a1:bb:aa:53:9b:bc:82:92:d1:ef:52:66:3e:25:c0:5b:
ec:94:13:03:97:bc:bf:bf:66:0b:de:f0:0f:e5:fa:bd:85:d6:
77:25:ae:48:dd:1c:44:4c:8e:f3:27:0d:4b:72:17:dc:da:6c:
f1:d1:06:24:2f:40:2b:61:d3:0d:66:a9:c3:8a:61:24:92:e2:
42:45:9f:6d:4f:2a:fe:5f:73:e1:9b:e7:45:cd:a7:88:e0:0b:
fe:ee:ea:48:f1:91:d1:18:a6:62:01:93:c8:97:d0:95:8b:4a:
61:1a:8b:92:88:c4:e4:25:c8:85:de:5c:29:a3:ab:a7:af:ad:
86:be:5c:0f:9a:f4:85:08:f9:6f:5f:a5:88:ab:26:f8:56:f5:
95:ba:db:fe:9e:56:10:a9:10:b8:af:7e:8a:fb:39:3c:89:52:
0c:4c:93:83:ba:a4:97:c8:3f:7f:5c:3f:8e:40:6d:cb:b9:2b:
0e:af:eb:b6:52:97:25:b2:02:55:9d:da:1a:5a:e6:a3:f9:f8:
6a:7b:15:8a:4a:8a:d7:3e:9a:13:9b:8e:72:ae:d6:43:a8:e9:
d0:29:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:44 2025 by rpki-client