Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa
File: a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa (raw, json)
Hash identifier: C5lX6lpem/4yvGbm84sX8qAzv6k6kWFHsjz+HD6KdCE=
Subject key identifier: E6:7A:DB:27:5F:D8:8B:BE:AB:C8:47:DA:C7:03:7F:96:28:48:23:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73204557239E810FD3B490F09BC3026D19041E60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:20:45:57:23:9e:81:0f:d3:b4:90:f0:9b:c3:02:6d:19:04:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=51d1f242453a4cae6fc17114e0012d4e9862eea2aa3b6ffcdfb357285e229a61, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:a2:ac:4e:ae:15:03:ae:72:a8:e9:57:66:
a3:c2:0f:42:d1:c5:27:cf:0f:46:b9:15:16:b3:ee:
8a:9f:54:f0:fd:7c:47:aa:e7:7a:c1:7c:6d:b0:33:
8f:87:5e:dc:5c:3e:77:1e:1f:ad:0b:f4:4d:2d:a5:
6f:0c:64:b4:20:9e:a0:e5:40:1c:30:77:ce:ae:2b:
c3:63:b8:4d:e9:f1:be:73:30:72:76:29:74:8f:9d:
4e:4e:4f:78:b8:86:e5:f0:86:bb:23:9c:2e:b0:eb:
a4:80:7f:cf:91:99:79:6a:bc:8b:15:f4:ec:2a:76:
14:71:02:57:e0:8e:86:fb:33:b7:94:47:48:85:64:
ea:11:bd:aa:71:55:fb:6e:dc:9e:7e:45:64:d7:47:
d6:30:74:08:de:f4:85:e8:ae:2e:85:a6:59:18:64:
a7:4d:0f:f4:2c:03:e9:46:6d:df:e6:6d:93:77:20:
70:68:ea:15:70:17:70:a5:21:69:0a:71:26:6a:9c:
b1:b2:ab:c6:df:25:5d:16:81:4f:b3:88:3c:ed:1b:
b7:3a:10:87:d8:44:b5:72:15:3e:94:10:72:29:37:
fc:c8:ae:a1:bd:9d:bb:11:82:79:b5:de:99:24:a6:
8a:b7:cf:12:a9:36:bb:c1:1f:c3:f5:42:07:66:16:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7A:DB:27:5F:D8:8B:BE:AB:C8:47:DA:C7:03:7F:96:28:48:23:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.240.0/21
Signature Algorithm: sha256WithRSAEncryption
92:18:de:51:be:88:ad:0c:60:a4:24:a8:13:62:b8:de:34:85:
7f:66:56:75:80:89:74:66:b9:e3:65:db:88:2d:0d:4b:6b:13:
af:68:b4:c8:09:20:41:8e:02:ce:e9:00:31:45:f5:6b:cc:0a:
d2:3c:7d:4b:34:21:c9:88:71:6d:17:b4:db:e3:b9:c1:a4:ab:
f8:f8:0f:99:0e:2c:e8:64:78:9b:95:5c:29:97:3e:4c:60:a4:
43:53:f6:52:2c:60:de:f3:8d:8f:10:c4:7e:a1:99:85:6c:f1:
d9:92:a8:51:f4:74:23:22:56:e3:3b:f5:20:28:79:77:57:65:
9f:cf:8b:03:35:51:ee:51:5b:12:12:f8:3b:fe:6c:4a:65:15:
99:b5:35:08:6a:10:11:11:e6:1e:03:27:e9:0f:8e:c7:64:a5:
ca:fe:6f:cf:7b:4e:ed:31:e5:e8:4f:d0:29:cb:22:a3:67:a1:
97:64:b4:7b:ba:af:47:f7:9b:98:e7:9b:27:48:57:de:01:15:
15:20:49:fa:fd:34:ad:b0:a6:08:40:e0:ab:65:f7:cf:b9:8e:
89:fd:ea:e5:22:0d:3a:36:84:96:66:08:df:ee:d9:f6:57:9b:
3e:f6:01:77:7f:80:c8:14:bb:15:19:08:7c:66:79:2e:d1:57:
0b:87:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:43 2025 by rpki-client