Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa
File: 4a16c82f-9a66-43d2-baee-321bf1a6f141.roa (raw, json)
Hash identifier: GIe4Mx9TuhjP/aS7tcEgqoaiQbrp7Z3BQF4ex5BcQ7k=
Subject key identifier: 61:9A:9E:98:DC:4C:44:FC:54:05:83:56:D3:02:5C:41:32:4B:67:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 428ED451D72BD009AFC46AF9704FDCFD75C4A7AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8e:d4:51:d7:2b:d0:09:af:c4:6a:f9:70:4f:dc:fd:75:c4:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=d8c2de6834e16815b84e26685d64315dc361978832d269ea866d5f2cdc458699, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:93:fa:8b:4c:74:1b:f0:e5:a3:74:eb:44:
bb:31:9f:a4:e7:77:23:5c:67:3c:aa:4b:fb:75:75:
98:93:d1:ca:f7:7c:39:ae:a3:83:36:af:c0:e6:08:
b9:07:7b:75:e8:8f:f7:1b:80:6c:10:32:a0:fe:3d:
5e:0a:93:bf:a4:73:c7:b2:4d:19:11:01:72:9a:26:
e8:21:c0:59:b1:2b:1e:0c:70:12:bc:01:6a:2f:8b:
14:0e:5b:47:84:ff:96:34:1d:95:93:21:37:f0:cb:
cc:5b:06:d3:24:f7:e1:fc:3d:3b:1d:1c:08:28:1f:
60:07:0b:0a:bb:cd:f8:6e:26:e0:32:96:53:4f:e4:
02:76:97:28:27:82:ce:54:18:79:da:9f:f4:31:03:
ed:db:94:be:ca:22:ef:47:85:33:a2:17:b1:16:0e:
af:4c:04:75:77:ab:b7:c9:05:35:b1:51:97:8a:5b:
1a:c4:10:97:45:e1:51:04:89:c6:f3:7c:00:82:de:
58:02:58:2c:8e:24:90:a2:08:b0:e0:ac:d6:05:98:
72:f2:42:ab:51:75:df:8b:2e:88:b5:c4:07:e2:fe:
1e:dc:ec:b2:74:a2:b0:3c:cf:78:81:1c:39:7d:22:
78:a1:49:6a:13:ff:5d:66:ab:28:e8:f3:93:7b:0f:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:9E:98:DC:4C:44:FC:54:05:83:56:D3:02:5C:41:32:4B:67:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:a7:36:14:46:18:e4:13:24:0c:c5:7d:65:d0:44:d0:af:72:
04:e9:e1:ec:80:c6:61:f3:88:13:dc:94:62:ea:7b:a6:ce:24:
3f:c3:2d:bd:f6:6a:17:d5:bd:b4:02:bb:01:18:bd:a6:03:e6:
cb:2d:18:f7:e3:a5:4a:45:1e:ee:18:5e:d9:8a:23:33:3a:cf:
98:a8:d1:44:97:02:c1:5f:2e:92:3e:d1:42:3d:86:73:6d:c1:
9c:20:10:33:31:3d:e7:6d:c8:c1:d4:55:0a:7f:83:ee:01:71:
26:da:0f:96:a0:9d:f3:11:51:25:c1:14:6c:d0:08:ab:2d:53:
a5:2d:bf:8e:50:01:0d:8a:3f:96:80:0d:2b:0e:52:1e:c2:f9:
58:7b:18:09:95:b4:e2:a9:cf:a2:71:00:47:04:82:8d:c9:86:
a5:28:a4:f9:40:2c:f4:87:a7:22:8b:3e:3c:b2:7a:bc:76:7c:
89:ea:bd:67:34:3d:cc:fc:2a:b6:e8:81:7a:89:a0:c7:62:86:
2c:9f:ec:36:1a:ba:e0:13:06:3e:82:92:6f:58:d5:83:ed:f0:
8c:27:e2:ad:70:e0:b2:2c:b0:dc:37:34:e3:08:ef:44:20:98:
ac:f8:4c:95:24:b8:69:61:9e:f6:c4:84:15:68:33:6c:36:f0:
b0:1f:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:31 2025 by rpki-client