Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa
File: 82607ad4-44a2-4b62-972f-23b1781a475d.roa (raw, json)
Hash identifier: Lev5xzUNPwWtsCp48MmwsuTe8odDPn/taLgA8kAwNRM=
Subject key identifier: 46:CC:1C:D1:66:3D:EF:C0:AB:F1:A3:DA:51:FA:2D:17:65:B4:D5:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A2E886D7ADD5A8F7388EBC1F0C95957EA573E49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa
Signing time: Wed 29 Jan 2025 00:00:00 +0000
ROA not before: Wed 29 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.67.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2e:88:6d:7a:dd:5a:8f:73:88:eb:c1:f0:c9:59:57:ea:57:3e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 29 00:00:00 2025 GMT
Not After : Mar 5 23:59:59 2025 GMT
Subject: serialNumber=ad400db2c6d6dab9bfcb2069e4a952569ca6d2fd947d7d1ce220d37227e68bd9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:70:e3:01:d2:f8:05:75:b5:4a:c4:5f:ad:
98:51:bf:19:3e:40:84:69:8d:93:c7:81:63:31:84:
58:e7:ee:bb:a1:a0:86:81:38:7c:58:db:ca:eb:3a:
0a:c4:bb:f0:b9:e8:9a:32:f4:25:f4:8b:6e:9b:d0:
a9:4d:f2:69:d7:1f:23:9b:55:46:0e:6a:ab:0c:33:
c3:2a:35:95:0f:2a:e5:57:83:4e:92:1d:55:2d:cf:
2e:07:8a:6e:8d:43:2f:c7:e1:54:7d:c2:5b:d0:32:
04:03:00:bd:67:c1:89:eb:23:d9:19:41:31:b8:e5:
ca:0c:7b:0c:31:15:62:3d:b9:00:98:de:eb:bb:15:
4f:45:0e:29:f0:cd:9e:a2:6a:b6:83:6c:e5:66:40:
15:cb:15:eb:c4:2d:6a:bd:aa:5a:54:17:2e:1c:f3:
d2:8e:81:43:90:cd:d2:ad:c1:80:92:d6:bc:55:89:
93:c7:6c:5e:80:53:8c:05:5a:bd:82:05:55:5a:8a:
a8:2f:f8:cf:18:53:8c:73:5a:a6:5d:ac:05:bc:8f:
bf:b0:a9:4a:cd:67:1e:21:71:81:7d:b9:7b:93:e5:
fa:7a:b1:51:3c:aa:c6:3f:20:05:d0:db:d1:c0:a0:
c6:e3:7a:90:11:14:41:22:c3:36:9b:36:42:60:ce:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CC:1C:D1:66:3D:EF:C0:AB:F1:A3:DA:51:FA:2D:17:65:B4:D5:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:5c:e5:34:94:86:76:bf:80:cd:4f:e8:f2:80:0c:e5:1f:51:
ce:96:67:a0:06:cf:54:ec:fa:8a:00:46:d2:7b:d0:41:40:38:
72:3e:e6:66:66:0f:46:9a:6e:34:64:d0:dd:6b:7a:7e:7d:6b:
2f:e4:57:8f:59:28:e6:54:8d:f1:cb:a6:e9:0e:81:2f:d0:bd:
63:89:52:5c:ea:d0:d4:b1:3b:a6:ef:5c:28:b2:b1:db:e9:97:
4d:f4:ed:80:88:5a:57:07:5b:9f:45:70:53:1d:c1:5a:6c:de:
1a:0e:05:2c:d4:50:fd:c1:4c:2f:25:ad:6d:f2:ba:92:e4:65:
c2:5a:a4:ff:ed:c9:25:e3:51:27:25:ad:76:f5:1d:dc:8b:28:
c0:98:ac:a8:0c:09:4e:60:ea:f0:5d:a0:6f:85:18:53:23:49:
12:78:af:1e:aa:9a:d6:af:55:14:7a:36:06:2e:64:de:34:39:
c4:ba:63:1c:7d:d5:a9:50:a4:51:6c:bf:c7:3e:3b:0b:0e:8f:
9b:e2:9d:cc:21:a0:f4:69:5a:39:64:3a:f9:80:c8:6f:dd:1f:
63:b4:9d:e9:7e:4c:21:ea:20:18:b0:d4:92:df:8c:5d:3c:04:
37:c2:61:f6:00:06:66:cb:b1:78:c3:c7:fa:1e:b7:6b:a8:3c:
3b:15:b8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:46 2025 by rpki-client