Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb61ed5e-39be-4263-9415-ebd102b321b7.roa
File: bb61ed5e-39be-4263-9415-ebd102b321b7.roa (raw, json)
Hash identifier: HxrGDqBFv5ussLVutLZndAIq0QuIAUvgoX5lif3NWlg=
Subject key identifier: 3C:F4:A5:10:5B:44:36:92:F8:36:37:B2:A5:AD:02:45:52:20:C3:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 105D96779256B4A3EC0F20B9C9D6860E761094CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb61ed5e-39be-4263-9415-ebd102b321b7.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5d:96:77:92:56:b4:a3:ec:0f:20:b9:c9:d6:86:0e:76:10:94:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=28b310780623e4af531fbd8dc435e3f5966aae4bb8a0763dddc8d49127920ad6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:e7:88:f8:e6:a2:a2:cc:e7:c2:b8:c6:d1:
9c:7b:73:5a:31:d4:da:db:0e:7b:92:57:fb:93:0e:
84:35:61:a8:f1:2d:53:3e:1f:31:ec:49:d3:89:a6:
54:19:fa:ce:13:7c:4b:da:f1:0b:16:87:f3:61:30:
eb:d7:ff:5a:6a:c7:e2:a6:dd:a5:fd:b9:74:a6:24:
ed:b3:76:df:ce:ec:b1:81:57:94:12:0e:99:f1:c9:
fa:ae:2a:3c:db:e1:27:61:b8:c8:31:ef:81:0d:66:
50:9c:c9:90:95:ad:96:7a:22:27:c9:76:94:af:cf:
72:2d:ac:a7:3e:ba:f4:70:4e:fd:cf:99:17:bd:03:
2e:33:0a:ba:5d:4f:d9:bf:27:47:df:c9:e5:f0:30:
cc:ab:0b:42:a2:28:72:d6:b7:01:da:f4:a1:4c:ac:
dc:fc:4a:6a:ab:d6:22:ce:47:f7:eb:b5:91:79:78:
f0:68:19:b4:5d:69:65:c1:5a:82:f7:a1:9b:4f:05:
75:28:4b:e7:70:bb:a2:ab:4f:01:00:f9:39:19:8e:
fc:02:c4:4d:73:5f:0c:76:80:25:f7:18:15:e7:17:
20:39:31:32:19:7f:42:9e:1c:1f:c7:08:74:29:62:
b4:58:bc:2b:5a:7a:89:e7:41:75:1c:2d:84:e2:f6:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F4:A5:10:5B:44:36:92:F8:36:37:B2:A5:AD:02:45:52:20:C3:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb61ed5e-39be-4263-9415-ebd102b321b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.64.0/19
Signature Algorithm: sha256WithRSAEncryption
68:50:2e:03:67:6f:81:78:87:b4:be:7f:5e:0b:f0:5c:12:56:
d9:8f:eb:04:53:43:91:49:16:56:e9:84:33:4c:20:41:a3:4e:
21:f2:8b:81:33:3b:60:ad:d4:72:fc:57:2b:df:c6:43:f4:9a:
42:02:79:96:ff:32:49:ba:98:b5:c3:87:64:80:ce:33:91:43:
b5:7c:fb:7a:74:83:f9:d5:f7:e6:b7:16:e6:dc:9c:2e:4e:07:
31:95:68:58:ce:bc:32:f8:b6:cd:ac:3f:a1:de:0b:f8:ad:24:
7d:e4:c2:1d:85:5d:cd:41:15:74:df:b3:b0:dd:c0:5c:4d:4c:
ee:77:28:8f:f7:c3:a2:17:a0:54:2e:4b:fd:92:e1:75:31:77:
02:10:71:b9:22:a4:d4:be:34:b8:01:4e:1d:1f:0f:61:64:b5:
8d:55:21:21:e7:10:0f:32:bc:a3:40:00:55:c0:01:d3:83:7b:
ea:fc:6a:ae:9e:ae:26:ed:b5:ae:48:0c:96:e8:35:8f:49:c6:
6e:4c:62:3d:0a:b5:6f:0c:b7:4b:26:d5:fa:a9:89:9d:ba:1e:
d8:f6:2f:69:a6:90:68:1d:ac:5b:02:3d:6f:c0:cb:b4:b1:f5:
8b:f5:f7:ea:e3:01:a8:f2:4d:c6:37:36:51:9c:fc:06:88:aa:
8f:e4:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:51 2025 by rpki-client