Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1007d85-fbf5-45da-82c5-653042baeda9.roa
File: c1007d85-fbf5-45da-82c5-653042baeda9.roa (raw, json)
Hash identifier: sHx4pg8qWRSk17clYAyCZAWQZojxqACLMMIJJxyNxx4=
Subject key identifier: 33:71:D8:86:0B:88:E6:92:57:63:C9:6E:92:4A:9F:B3:3C:CF:E4:F8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 67C88C8842881629ADD5F0349F21E2C0541093A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1007d85-fbf5-45da-82c5-653042baeda9.roa
Signing time: Wed 22 Jan 2025 00:00:00 +0000
ROA not before: Wed 22 Jan 2025 00:00:00 +0000
ROA not after: Wed 26 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c8:8c:88:42:88:16:29:ad:d5:f0:34:9f:21:e2:c0:54:10:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 22 00:00:00 2025 GMT
Not After : Feb 26 23:59:59 2025 GMT
Subject: serialNumber=392d3e032cb3e2a9da65bd52d439b7e1e48c2788a446ffd599c8b8014fd13857, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:bb:c5:35:8e:b6:f5:e0:ee:49:ae:c3:97:
91:85:80:56:8e:50:42:d3:d2:97:cd:50:6f:95:3d:
78:e3:24:22:7e:49:9d:8d:04:32:88:42:f4:a5:60:
29:35:d4:67:97:ab:8d:c6:8b:a3:c3:d7:3f:19:f4:
4a:6b:e5:b8:6a:ae:3c:11:31:c2:02:39:67:9a:6c:
7a:c2:bd:5c:b3:f1:bf:e2:ac:3e:20:93:eb:b7:2e:
3e:b7:0f:c1:ca:fe:5e:77:64:8a:5f:ee:f1:e3:01:
6b:8a:fa:1c:f3:08:fc:2d:9b:8a:9f:b8:a3:44:f2:
27:cf:5a:09:e9:5b:1e:be:72:d8:92:0d:1c:e7:3d:
12:f1:a6:bf:b6:17:c6:ef:ce:79:10:a5:6f:93:a9:
38:0b:ad:c4:2d:83:80:a7:17:23:f4:22:11:9a:bf:
75:57:56:f8:c4:3f:e4:2d:4a:40:d5:4a:e4:05:1e:
8c:a5:55:86:55:e3:5c:0f:3b:b3:40:8e:e7:ba:d3:
59:57:d0:f7:51:7b:a3:6d:90:ad:db:3e:ae:f7:6f:
33:8a:26:77:30:33:c8:18:fd:95:e2:a9:56:88:e2:
58:85:00:a2:fa:d7:77:55:bd:1f:da:51:03:df:f0:
cf:62:79:a0:ae:81:db:16:cf:23:5b:ce:01:d7:20:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:D8:86:0B:88:E6:92:57:63:C9:6E:92:4A:9F:B3:3C:CF:E4:F8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1007d85-fbf5-45da-82c5-653042baeda9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:07:cc:85:65:14:f6:f9:17:36:9a:69:b0:a3:99:8a:23:c8:
b7:cd:34:d4:fc:91:25:c2:bc:b6:0b:a5:36:65:22:37:8e:a6:
16:dd:98:32:0b:44:70:25:2d:8c:fd:17:4c:c8:e1:94:4e:7b:
79:c5:24:a4:63:b8:d9:5a:e8:40:dd:9b:69:6a:d4:9a:13:b0:
87:e3:f0:bc:31:ef:c5:ee:1f:16:a1:af:71:5f:20:bb:95:25:
e5:f8:10:9f:50:81:0a:f9:ff:6e:d8:3b:77:f2:3c:11:a5:41:
7f:d0:83:1a:dc:8a:3f:3d:77:8e:92:cc:38:b2:59:9a:af:30:
c0:70:ee:16:d6:09:90:9d:c9:a8:3b:a4:69:08:9a:e7:73:0f:
77:03:cc:6b:09:e7:8b:db:67:b7:1b:82:73:59:f1:3e:bc:c1:
50:1b:e5:af:d1:70:af:04:2f:63:ce:1f:da:5d:d2:dc:e5:b6:
fa:ce:18:5b:ff:ae:9e:6a:87:1b:14:70:78:f2:e1:7b:a3:c4:
70:40:6e:89:c7:62:98:64:49:70:ff:ae:cc:68:8d:c7:51:82:
9e:e3:c9:35:2b:b2:a5:be:32:ef:da:c4:28:c1:69:93:12:61:
55:0d:ad:85:05:f7:03:6d:9b:a8:0b:ed:64:7e:67:a5:9c:33:
c0:29:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:04 2025 by rpki-client