Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa
File: 57433c2d-3f13-4242-9b51-a6f8d1307f78.roa (raw, json)
Hash identifier: cmE5DD3yA/6COIeum+EH4LVP/KcXYmYRGVv2+CaughI=
Subject key identifier: F6:EF:76:DB:5D:0A:A1:06:6B:15:74:16:CC:14:82:87:25:9B:6C:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 50CAE7352A9E3641B77A9498B53BF7FA5C20AE31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.16.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ca:e7:35:2a:9e:36:41:b7:7a:94:98:b5:3b:f7:fa:5c:20:ae:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=908ad7c8351875b1542a32ec43f7c69bde9d8f979374055853a3a40a06d7a115, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:3e:11:3c:8f:41:05:dd:3f:08:59:56:e5:
d8:4c:bf:49:c5:2d:45:6a:6a:1f:a4:8d:c1:fc:38:
12:c3:9b:b6:fc:c6:18:bd:46:8d:8d:c5:bb:b8:74:
9c:24:1d:7a:25:38:14:dd:1c:e2:e3:85:89:8d:84:
60:50:3d:62:a3:7f:fa:43:d1:76:eb:d2:03:0a:18:
fb:d1:93:64:06:7e:90:c8:3d:1a:7b:5f:f0:70:b9:
09:e6:94:3b:53:38:a2:f4:76:0a:f5:38:6c:85:12:
5a:75:08:31:f3:1b:50:cf:75:8f:da:d4:2c:c9:03:
a1:e8:fa:7d:b4:1a:44:4f:e2:88:a7:35:d1:ac:05:
70:ee:ef:e4:3d:80:06:25:05:9d:84:af:55:7b:5a:
0f:79:c6:c7:56:9e:e1:5a:57:00:57:c2:d0:39:e0:
98:8f:ea:d6:b5:85:17:c9:65:64:8d:9a:69:35:37:
42:3f:40:7c:02:d4:bd:47:39:4a:c6:81:cc:23:b5:
68:a8:00:6d:9b:1b:0d:26:c0:77:a1:0c:18:5b:14:
f3:19:73:38:f0:1f:08:04:76:fb:55:6a:e8:f6:00:
67:ff:fe:17:a3:d6:43:c3:9f:22:65:ac:63:97:58:
a4:83:76:e0:b9:f3:4b:fb:9c:d3:7a:4a:da:87:66:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:76:DB:5D:0A:A1:06:6B:15:74:16:CC:14:82:87:25:9B:6C:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.16.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:81:2d:03:5d:f1:65:24:4a:66:9b:a8:f9:33:31:bf:f6:ba:
b1:e6:88:57:17:fe:1e:ce:15:9f:9f:54:d5:e4:48:e1:31:81:
d0:79:d4:ee:33:3f:95:f7:4d:3e:74:72:bc:2c:93:7f:9d:b1:
7d:46:af:8c:a4:a0:b6:84:88:ce:eb:95:66:89:3c:72:84:b8:
52:81:07:0f:84:b1:67:95:99:0b:59:29:67:59:09:01:36:24:
da:6e:15:36:05:d4:57:e8:9a:2e:f3:f9:70:6c:ac:3c:52:4e:
bc:0f:e8:9a:d2:7d:66:df:71:f3:d9:cb:f0:2a:0b:b6:12:ad:
cc:f0:07:71:da:e5:b3:69:13:0f:34:bc:00:34:4e:b8:f8:b2:
85:a9:82:b9:80:18:a3:05:ae:70:0a:72:8e:f8:40:18:58:1a:
89:a2:8e:36:66:f2:e1:16:9a:ba:62:17:2d:65:09:f8:4e:ab:
81:67:6a:5f:18:86:ef:a1:56:91:13:46:32:4e:30:38:79:5c:
6f:cd:11:76:d3:c2:31:26:8a:26:7e:91:9b:d5:38:58:d1:de:
2c:bf:8f:28:83:8c:b7:41:cf:db:c3:be:1e:36:c5:84:00:ff:
af:89:d1:9f:13:36:96:61:a5:70:8b:c4:ae:4a:cd:16:fa:83:
1b:5b:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:43 2025 by rpki-client