Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8d91306-246c-473f-994d-c6a2c60ac615.roa
File: c8d91306-246c-473f-994d-c6a2c60ac615.roa (raw, json)
Hash identifier: lKFuVLxvDBD2HYRGtprJoiom/QwSU4FjCBfDLCTS4J0=
Subject key identifier: 32:BC:10:B1:DF:D4:A0:7D:81:E4:DC:07:A1:37:A9:4E:B6:29:BC:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 21382DDC882A831CC754891B09F95F8074151825
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8d91306-246c-473f-994d-c6a2c60ac615.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.16.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:38:2d:dc:88:2a:83:1c:c7:54:89:1b:09:f9:5f:80:74:15:18:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=737ded90209cc078741b0755b460f50e3eb090806e98e0b6c2a66d5ce509f5c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:1e:65:dc:94:e3:58:39:d8:5f:1b:a0:9b:
6b:74:37:04:49:e2:5d:8d:b4:83:e4:35:c7:20:b4:
44:62:e6:7d:f3:d5:e7:8c:d5:71:67:41:88:46:35:
1d:7c:d1:61:a2:0a:2c:5d:8d:0c:e2:a8:36:ff:97:
92:b4:f5:aa:ef:76:6e:4e:6c:55:0c:fe:69:30:99:
bf:69:41:da:55:cd:04:2f:34:05:2b:2b:c5:4e:a3:
08:1e:8b:4f:fa:cf:7f:03:fc:2e:c0:c8:16:6f:99:
e4:66:db:7b:66:18:a0:3b:dc:fc:a9:b0:fb:e7:dd:
48:b1:cb:36:e8:c6:89:c8:9c:f9:be:1e:74:f4:af:
37:35:89:e0:3a:10:6e:0c:68:3a:26:58:8f:b2:9f:
3f:e1:24:f6:92:c1:ab:10:13:5b:46:b6:9d:7d:bc:
7b:f3:ec:e0:ab:49:63:30:6e:c6:31:3b:e9:d7:aa:
12:7b:ab:3f:75:06:7c:5a:84:9a:75:7f:23:2d:a1:
83:4e:b4:58:14:97:a5:30:ee:a2:64:18:0b:bb:0b:
d2:5e:a8:28:15:d2:9f:32:99:8b:3d:36:d8:d0:23:
f2:ca:2f:f5:0d:6f:5b:cd:b6:58:d0:28:6d:20:5f:
27:0d:22:21:aa:f1:a5:69:8f:18:0e:3e:be:b1:f5:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:10:B1:DF:D4:A0:7D:81:E4:DC:07:A1:37:A9:4E:B6:29:BC:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8d91306-246c-473f-994d-c6a2c60ac615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.16.176.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:d1:49:8d:48:98:1b:02:c7:c3:90:a3:ca:aa:67:46:da:7d:
c3:ef:c8:01:64:d2:d7:3d:08:19:09:ad:ac:87:74:c7:60:c0:
27:61:1c:c5:e3:f1:0b:ab:8c:55:c5:98:11:19:44:64:82:bd:
d3:06:9d:0e:bc:eb:bc:cc:69:12:d0:78:d0:3f:96:d2:e7:c5:
5d:37:29:d8:ad:07:2b:b6:63:8f:8f:27:1d:2d:10:ab:e9:9a:
f0:04:90:7e:d0:9c:47:27:fd:f3:82:a2:11:bd:b6:1e:56:ee:
ab:ac:37:ab:2b:ab:f7:ff:34:d9:a4:a6:59:b2:1e:d8:fb:a5:
c2:42:bd:ca:a1:c9:87:6c:68:b3:4f:ea:b5:b0:fe:fc:ae:8d:
7c:15:9f:b7:af:8b:5e:a9:7d:2d:0c:23:24:f9:68:bb:a0:2a:
3c:85:d5:9e:39:f4:46:95:d4:8e:5c:f6:5b:9a:81:69:95:2b:
21:c0:6f:68:66:fb:f6:40:dc:95:cb:38:53:e2:c0:96:87:93:
2b:f5:fc:86:e3:42:24:d1:8f:38:0a:21:cd:fd:aa:da:93:fa:
8a:0a:0e:a6:ff:4a:14:57:89:7b:3d:a6:5d:9e:63:17:5d:51:
11:2c:29:cd:c7:a7:b8:63:4d:e2:61:46:e2:e8:88:ae:7b:22:
d1:10:1e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:17 2025 by rpki-client