Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
File: 5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa (raw, json)
Hash identifier: /l6G9KVvgy7mrUbXB500awM9KXvtBgcasOiTJ+7516k=
Subject key identifier: 6C:55:52:7E:A0:0C:B6:6F:C7:4E:E3:39:E6:59:5F:6E:42:F8:A8:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72E60ABF8FB5D102DAC0323C1ACF903A4F888DA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.16.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e6:0a:bf:8f:b5:d1:02:da:c0:32:3c:1a:cf:90:3a:4f:88:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=c429386128f567eb3f7bc77fa9dc64e4aeb65141ed0f1f60898a1585b12e4fdb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:c8:6f:92:2d:9a:27:51:ed:ee:41:d7:c9:
c1:72:04:94:10:09:29:76:fe:1b:7f:9c:ec:69:03:
b9:15:15:dc:d9:7e:20:da:ab:55:30:99:01:df:9a:
ea:dc:bf:4f:d5:0b:17:68:b2:b5:b0:b8:b8:ee:48:
28:94:f3:8b:08:c8:30:e1:a7:23:f9:fa:9f:9f:a6:
9c:8a:d9:d5:7e:4a:08:73:89:90:e3:81:aa:15:c2:
34:35:48:02:f1:85:30:be:84:4a:ff:47:1f:3e:ba:
57:18:7a:c4:d0:34:c3:0c:d7:2e:a3:33:bb:ae:38:
d4:71:59:f0:38:1f:77:6f:0a:41:69:da:8c:0f:33:
56:59:b9:4a:3f:e0:5f:e5:e8:7a:63:9c:86:fd:dd:
64:36:4a:8b:f8:02:aa:b7:aa:ac:21:4d:8d:48:e8:
f3:d9:28:e8:a8:43:13:60:6e:ee:40:cd:c3:f2:7a:
44:3e:a8:96:18:a7:c7:bb:d2:a7:a3:7c:2f:ce:7e:
c9:aa:f4:92:2f:ed:c4:ae:ba:46:fd:25:35:68:1e:
fd:f1:a8:39:c4:a6:d6:55:ab:dc:ef:70:f0:7a:24:
a2:b1:62:43:18:18:6e:90:1f:18:96:06:4e:79:52:
37:bf:76:61:85:78:a0:62:df:99:94:3a:57:93:63:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:55:52:7E:A0:0C:B6:6F:C7:4E:E3:39:E6:59:5F:6E:42:F8:A8:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.16.0.0/14
Signature Algorithm: sha256WithRSAEncryption
40:cd:5f:c0:8f:b0:d9:73:2e:19:c8:59:ca:95:cc:b1:ae:00:
29:d8:f7:30:fd:6c:3f:e1:38:5e:4a:74:42:1b:17:e7:80:a1:
1e:18:8b:ed:ed:08:f3:62:62:c3:bf:b6:7a:e8:fe:98:38:7c:
0b:fb:f4:5e:fd:96:bf:a3:15:ac:fd:a1:31:63:71:93:67:ab:
59:a5:ff:9b:b4:e7:9e:a8:2e:be:56:e5:bf:72:ba:74:25:c7:
a1:a9:49:76:bb:eb:e6:bf:c3:69:83:06:7a:15:de:3f:df:4b:
e3:15:ec:fd:37:d9:40:19:cd:1b:f8:ad:96:46:e7:b6:ad:3b:
25:c1:8c:13:d4:ed:de:f7:c9:50:6b:1e:9f:7b:34:70:2e:42:
e8:2e:51:3a:63:d7:2e:ad:b5:03:47:84:3e:63:d6:92:2b:29:
4f:c7:4f:c4:9c:4f:73:1b:7a:53:18:f5:a6:b8:72:3c:4b:5f:
ad:b6:0a:ba:cc:3b:59:b9:91:07:86:a1:5b:99:75:42:ee:2b:
a6:14:fc:bd:37:93:ef:16:19:9f:db:c4:aa:88:fb:00:a9:03:
df:ee:69:b6:3e:ec:d6:a6:7a:0d:4a:48:6a:e0:03:c3:34:e9:
78:95:10:e9:e5:57:f1:74:d4:47:ee:dc:a6:d3:8a:20:b5:ee:
10:e7:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:00 2025 by rpki-client