Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa
File: c1b466a2-817b-4958-ab89-444b143015d3.roa (raw, json)
Hash identifier: UEh78fZWnlI6KqsjvfuEVe1By93NPrNjufDEaqKtFNk=
Subject key identifier: E0:76:40:F4:DE:7A:AD:65:D4:B7:96:18:8E:49:5E:F2:67:DA:D3:15
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55B5285702C8402919BF578E098A339ADC115252
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.17.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b5:28:57:02:c8:40:29:19:bf:57:8e:09:8a:33:9a:dc:11:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=9827913c02d921e4e321d346b49fdce5fe1141aa587084f26fe3d4003bd8cd2a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:66:fe:e8:9e:94:92:bd:9d:73:b5:a8:43:
3f:5f:27:71:93:dd:1c:5b:27:39:0c:08:57:2c:16:
68:da:24:ab:6d:b9:4e:38:d0:bf:74:c5:d1:1b:1b:
6b:bb:52:86:71:1f:a3:f2:66:29:4b:0c:25:cb:67:
23:92:23:b1:38:9c:78:91:19:19:be:75:ac:00:88:
b1:f5:29:bc:0a:31:70:b5:db:e5:86:e0:7a:28:48:
2b:8d:03:d9:d1:5a:0b:77:d2:c8:51:39:81:75:cb:
b3:6e:e8:ec:39:5c:ae:76:c6:d9:30:73:67:e1:21:
34:3c:dc:aa:0d:9d:80:63:5a:30:45:46:d0:52:72:
30:0f:52:e2:3d:a2:d5:fa:ba:42:d3:6c:e8:ef:98:
a1:e1:a4:25:f4:a0:12:db:bb:34:da:86:66:3d:73:
15:bd:28:bd:e5:19:c0:be:a6:59:dd:56:5f:26:d6:
ac:4c:bf:8d:01:7d:dc:b4:ab:ed:0e:ad:6c:2e:45:
37:6b:b1:a3:b0:13:01:e3:90:82:de:3e:89:cf:a9:
a7:cb:64:19:cd:24:bf:58:50:1e:c6:a2:d8:c4:40:
4c:8e:a2:db:30:5d:25:4c:f7:94:78:76:e9:44:36:
c1:1d:60:5e:69:96:33:06:97:e6:3a:9d:3e:49:b3:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:40:F4:DE:7A:AD:65:D4:B7:96:18:8E:49:5E:F2:67:DA:D3:15
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.128.0/19
Signature Algorithm: sha256WithRSAEncryption
79:f6:56:f0:ab:fb:90:6e:42:f0:26:5a:27:2e:9a:f1:ad:d3:
33:20:b6:fb:a1:90:da:fd:e6:f5:d0:71:65:4e:7f:aa:24:04:
d6:9a:3d:45:b0:58:43:a5:c0:74:a9:15:33:f8:43:d4:ca:f6:
9d:e8:bc:79:f6:50:0a:0f:0f:1c:20:4b:e9:81:d2:42:fa:af:
36:4a:b3:df:f9:23:94:0e:97:d8:0d:21:f1:a2:5d:5f:2e:9e:
5f:7a:bc:58:93:f9:1d:34:07:f3:c7:ea:b0:ec:84:21:2d:14:
ae:a4:e2:dc:c2:0e:7e:b9:2a:73:59:20:6c:a4:70:6e:9a:1f:
f7:24:26:6e:9f:18:8b:b5:d1:ca:ab:20:4a:56:69:e2:72:34:
a0:8e:f4:d8:c6:47:e6:0c:1c:6e:2f:ce:70:72:4a:e4:ea:73:
8a:3a:a9:0a:e9:f8:65:61:d9:4d:58:eb:7a:87:d2:4b:91:04:
34:34:33:29:f6:17:15:60:32:dc:a6:2d:bf:46:2f:84:f6:0d:
fa:cf:46:01:32:a7:39:88:74:13:e5:08:69:04:df:22:cd:c8:
86:a4:b1:0e:3d:4e:64:3f:27:6e:49:45:9b:f9:6b:11:1b:97:
b4:fa:1b:da:1f:31:a0:ad:15:df:06:66:e2:a3:59:72:e3:03:
d2:69:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:50 2025 by rpki-client