Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a068b29a-2587-45c9-a0fb-b9a7111f2897.roa
File: a068b29a-2587-45c9-a0fb-b9a7111f2897.roa (raw, json)
Hash identifier: Zl+XA/X8vjQE/Q+IRmBiUHe4RhYunz/wLMpfQEEE9oI=
Subject key identifier: A3:B8:45:23:19:E9:E4:FB:D3:38:60:5A:34:BA:26:ED:E9:4D:4B:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4612F012466D28AF718C0BC3754E0083CFC17682
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a068b29a-2587-45c9-a0fb-b9a7111f2897.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:12:f0:12:46:6d:28:af:71:8c:0b:c3:75:4e:00:83:cf:c1:76:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=075ea95aeafea11e6c6f3851b12a8cf05dfa3b401c1600252a4251138d5c5afc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:da:00:ed:a3:36:87:7c:35:56:e1:f3:fd:
74:2c:d9:49:68:ec:a2:44:95:28:2b:f3:34:e5:de:
9a:c7:a9:30:ca:d3:0f:4f:82:22:ba:05:b8:9c:e8:
56:02:c9:3a:24:40:bc:d7:36:b1:c0:84:35:6d:5b:
b4:a0:c0:83:92:1e:3d:0e:e4:4a:c0:cd:24:8a:08:
2c:9d:9f:90:b8:31:fe:2f:a1:89:4d:3d:0c:13:87:
c5:94:81:7a:fa:5a:68:57:6b:c3:b2:ee:d5:f4:69:
60:e3:c1:75:c8:64:06:c1:7b:c7:a0:d6:09:7f:e6:
81:22:59:66:82:7b:5a:45:76:bc:73:d3:51:3a:df:
98:1c:ae:fe:1f:17:7f:d2:89:ce:f3:16:89:80:d3:
24:d0:8c:de:49:ff:64:26:02:65:f6:6d:2e:ee:6b:
fd:59:d8:46:4d:bc:98:41:bd:c1:83:3b:8a:60:9e:
ac:3b:37:73:62:d5:c2:ca:16:10:1f:e8:cd:f7:2d:
87:ca:18:b5:7e:b5:ff:f2:69:a5:7f:dd:f3:13:08:
94:84:5f:d8:e8:8f:63:2d:02:c3:0e:a2:23:bb:6b:
97:13:53:5c:89:6c:ac:78:8f:3e:d8:b0:63:4d:bd:
60:0e:20:a1:5c:6e:5c:b6:c0:38:66:ec:76:b1:9f:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B8:45:23:19:E9:E4:FB:D3:38:60:5A:34:BA:26:ED:E9:4D:4B:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a068b29a-2587-45c9-a0fb-b9a7111f2897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:30:9e:97:e8:cc:c1:26:3f:c3:5b:58:60:90:46:58:7d:b8:
97:6d:cd:46:a4:3e:0a:ad:2f:ae:77:e8:d9:a4:ed:4f:02:08:
81:5e:88:b7:06:57:2b:b2:9c:0b:31:db:1e:84:69:0f:ad:8c:
c5:c6:31:90:82:33:83:c4:33:9e:49:f9:7e:53:81:29:d7:65:
6f:6e:f6:49:c1:f9:09:45:4f:e9:e5:1a:cf:88:71:f0:e7:56:
f9:0d:26:fc:95:57:a7:46:99:f5:e5:07:c7:20:b4:49:50:09:
e9:ae:5d:63:5f:7c:1e:09:4c:03:71:3c:3f:dc:92:d8:77:7b:
74:9e:de:eb:19:49:90:48:f2:3f:89:0a:6b:4f:8a:64:ba:8b:
04:8b:93:27:2e:eb:8b:03:58:4d:4c:ce:de:6f:62:0e:14:ba:
92:81:5e:e5:77:95:b2:74:08:a6:21:30:0e:66:34:c8:7d:6c:
f5:59:26:95:31:a8:1a:32:fb:13:d8:4a:ed:47:5f:dc:bf:95:
f8:69:32:cd:f8:b5:ca:d8:3e:e4:e9:39:71:61:4a:fc:79:bc:
40:52:f1:90:34:08:0a:34:ac:f2:48:25:1f:00:50:b0:4e:69:
6b:bb:9e:db:1c:62:f5:b9:3d:7f:0e:f1:7a:4d:1c:c5:fd:b0:
ce:d6:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:58 2025 by rpki-client