Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa
File: 5831f36f-50de-43df-b1e3-ee6e835954e3.roa (raw, json)
Hash identifier: VEEV4S6yHggj3597l0e83LyXpSEk93MWovDzx7FUSaE=
Subject key identifier: 86:1A:59:B0:1D:5D:EA:F6:64:73:1A:2D:1C:2D:AE:EF:EB:B9:FF:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F7942489395EEBF68A1BD50D8E3A90143B1C9EE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa
Signing time: Wed 29 Jan 2025 00:00:00 +0000
ROA not before: Wed 29 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.66.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:79:42:48:93:95:ee:bf:68:a1:bd:50:d8:e3:a9:01:43:b1:c9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 29 00:00:00 2025 GMT
Not After : Mar 5 23:59:59 2025 GMT
Subject: serialNumber=a2fa0da21a6bb86d887208d60dfd5f645b8ee43af00f292be1aaa66d83d2f854, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1e:6d:74:b3:d1:6e:ec:c0:5d:4e:ad:cf:68:
2f:ee:59:34:20:ca:62:30:54:84:51:a3:f2:32:f8:
4d:5f:05:32:b4:dd:2c:ba:c2:97:e9:dc:ee:72:e1:
14:eb:fe:cd:36:61:4b:22:0c:32:4a:33:81:53:b9:
dd:75:4f:30:8b:0d:c0:5d:16:cd:71:d6:60:9d:da:
29:a1:fe:cf:e9:af:3c:cf:c3:fe:71:73:82:86:d3:
c1:05:a5:a8:2a:47:60:a5:8d:46:d3:4d:c6:b8:22:
be:c7:7e:e5:12:63:59:31:a5:26:da:75:0f:9a:ed:
33:9b:c5:77:22:bd:ba:d5:e3:fe:ac:a3:39:60:92:
9c:b1:2e:77:e2:29:0f:4b:30:b9:ce:fc:76:c3:86:
7f:ec:17:c1:e7:4e:4b:3e:2f:de:59:4b:40:04:a1:
59:74:89:cf:c4:7d:81:f7:fc:47:7a:5a:87:7e:55:
24:a7:12:3c:d9:3f:e5:d4:04:e6:67:35:93:23:24:
e5:06:cc:8a:c9:0e:ba:49:01:59:40:6f:92:41:a3:
33:09:7d:7f:40:69:63:a8:93:f6:36:7a:02:16:a0:
54:8c:e6:67:cd:03:92:9c:c2:c9:97:dd:eb:d6:84:
9d:bc:55:ec:a3:73:37:be:3f:2a:c7:4a:5a:89:9c:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:59:B0:1D:5D:EA:F6:64:73:1A:2D:1C:2D:AE:EF:EB:B9:FF:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:42:65:14:59:a5:15:83:b2:e2:1c:4f:10:c1:f2:a3:16:12:
11:c8:5e:53:37:b7:e3:9c:71:c6:4c:c3:2e:a0:d5:2c:34:04:
a4:26:dd:5a:53:e0:ce:ff:67:0f:25:64:98:e0:db:0a:00:31:
4f:28:6b:34:d3:ac:25:36:7a:af:ba:95:73:59:ee:62:03:b4:
f7:40:1e:34:29:46:36:f6:39:98:13:78:10:10:05:24:52:ac:
ab:83:44:e7:e4:e1:c2:38:f7:1b:4b:aa:73:54:06:55:74:d4:
c4:8c:6a:69:b2:cf:32:4c:03:16:50:b8:58:c8:bf:aa:3a:fc:
f5:a7:9a:56:7c:f0:79:13:a4:7b:74:41:26:d6:68:ab:61:2d:
81:43:d1:64:de:ba:f2:74:d3:06:70:72:38:43:74:9c:54:ea:
21:14:1f:0b:71:f6:5f:6a:10:3f:ac:36:34:78:66:05:31:69:
d3:32:bf:89:0f:de:24:af:67:1f:dd:64:69:e6:e0:45:0a:ff:
7b:42:d7:40:14:67:6b:8c:07:50:31:3e:47:0b:59:2a:b8:c5:
97:ce:97:9b:55:6d:1d:fa:0a:d3:04:fd:de:ca:31:21:46:49:
22:f2:e1:25:71:7e:0a:e6:fb:50:42:74:bf:06:c9:b8:4a:91:
52:0b:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:37 2025 by rpki-client