Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/662cd1e7-52b9-46fe-aded-bb1573a8af72.roa
File: 662cd1e7-52b9-46fe-aded-bb1573a8af72.roa (raw, json)
Hash identifier: +lec1dYqQtrNR5YlG99dcM1n61o5SjbXWhPWSdv/euc=
Subject key identifier: 25:E0:0B:F1:C5:1B:6C:DB:73:C3:79:2C:E2:C5:09:E9:A8:42:2C:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57D1C8680278DD64C1EB995C9815C9E1292331BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/662cd1e7-52b9-46fe-aded-bb1573a8af72.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.63.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d1:c8:68:02:78:dd:64:c1:eb:99:5c:98:15:c9:e1:29:23:31:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=b71e5c5733d1c7028b0a5ce1833382e2a353ef4beaaa53bf99c657f74b718361, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:fe:29:59:e8:81:60:79:fc:1c:94:26:d7:
16:57:64:18:17:16:38:d1:ce:17:0f:4b:20:39:42:
ff:ee:00:b3:f1:ce:6c:92:0a:70:c0:54:02:c0:55:
ea:e8:88:84:87:e1:1d:6a:28:13:11:93:98:e4:1f:
30:2b:66:90:ab:63:54:6d:84:4f:0a:d3:c3:31:08:
65:00:04:06:40:02:7b:92:71:73:59:3a:bf:b1:50:
e7:60:50:c0:8b:c3:e0:e3:4b:cc:cd:0f:3b:31:4a:
ca:1e:bb:1c:9e:15:22:0f:3e:42:b3:83:0f:9e:c7:
bd:43:25:1f:69:e0:04:f6:38:2e:1e:3a:92:bf:a0:
e8:d6:61:0f:8e:d9:e0:14:9d:ad:4d:72:c8:35:8c:
c5:32:83:ee:e4:4f:32:7d:48:c4:c5:eb:9d:0d:d8:
bf:1c:a8:f4:64:92:90:d6:b0:00:31:61:66:bc:79:
30:c7:d5:8a:b3:07:45:38:00:1d:9a:3e:b5:0a:cb:
b7:56:9b:3d:34:e0:9e:c0:87:0e:f8:f7:ce:63:88:
0e:65:98:5e:00:d4:2f:d8:52:c3:c3:b2:b2:37:5e:
74:f2:5e:04:f2:c6:30:3f:12:95:91:fe:f0:0d:8a:
82:8f:62:39:58:5a:6f:83:cf:c0:11:e5:65:79:60:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E0:0B:F1:C5:1B:6C:DB:73:C3:79:2C:E2:C5:09:E9:A8:42:2C:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/662cd1e7-52b9-46fe-aded-bb1573a8af72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.63.88.0/22
Signature Algorithm: sha256WithRSAEncryption
40:37:8c:a2:f3:30:f9:53:5c:d6:17:6a:17:cb:33:26:fb:c9:
d1:65:f6:58:1e:0a:2d:a5:1f:17:c1:83:33:4f:40:59:24:a3:
05:9f:20:f1:42:d6:c2:ac:34:0c:78:26:a2:14:ae:e2:10:8a:
69:51:d1:71:76:a5:d0:7e:43:f5:38:59:ff:42:df:93:31:8d:
1b:77:3c:7f:9f:20:77:6a:3a:5d:77:7b:38:c6:b2:07:05:d5:
be:02:4e:7c:ee:46:7e:31:b1:91:da:2f:22:a5:df:61:c3:19:
51:96:fd:4f:c2:17:76:bf:fe:41:81:59:a7:d6:f4:13:78:20:
1b:e0:70:72:41:eb:d6:24:98:08:b3:b9:8b:5c:70:5b:0d:37:
0b:55:92:47:45:88:59:e2:f1:72:bb:d4:37:5f:e2:c8:46:96:
ca:ec:e3:08:b4:48:bd:bb:9d:40:f3:b6:22:4d:71:2c:2b:1d:
5f:b0:56:4d:91:6b:a6:4c:4a:57:e7:41:bb:75:97:df:dd:3e:
d0:0e:a8:ee:0c:28:3a:4f:fe:dc:35:ad:e3:9a:26:f5:43:0c:
a9:4c:f8:ea:7b:3c:13:c5:b6:db:b7:99:e1:c6:85:34:67:fa:
9d:3f:4c:64:64:b0:c3:84:8f:20:7e:91:23:03:e5:43:9d:fb:
68:0b:4b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:19 2025 by rpki-client