Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7024f23-e277-47d3-8cfa-36397ac62c94.roa
File: e7024f23-e277-47d3-8cfa-36397ac62c94.roa (raw, json)
Hash identifier: N29FYZ2DwrIkfYY0oyfSBzfZIRShl+5iQEOeWzVfuOw=
Subject key identifier: 52:70:44:CE:8B:98:AC:B4:CF:E8:70:8E:07:E0:E5:9C:F4:91:5A:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15A696E1275E3232017439869E35EE3610AAF8A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7024f23-e277-47d3-8cfa-36397ac62c94.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a6:96:e1:27:5e:32:32:01:74:39:86:9e:35:ee:36:10:aa:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=6c3974793833f2a663ad4b152e54243dc1797f13bc45cdf1bb93e55377963897, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:c9:7b:b4:92:12:9c:9e:d3:08:2b:38:7d:
f8:03:6f:7f:8e:ea:5a:0a:e5:fd:94:3d:e6:6f:11:
85:a3:5f:5b:5c:5e:99:77:00:1d:72:e2:59:e9:bf:
c4:76:1a:d0:8d:6e:71:e3:25:1b:60:17:bb:e7:0e:
cb:da:60:f5:e3:49:a7:2a:64:c2:ef:aa:01:f4:26:
0e:b5:92:64:25:8d:32:ce:3c:74:b9:71:90:3a:61:
5a:7e:a1:e2:d2:06:a0:11:53:ce:9c:55:19:a2:bf:
37:db:14:70:97:84:82:0e:4b:ff:f6:81:1d:61:98:
62:5c:33:81:3d:15:89:4c:9f:58:e7:95:8e:02:46:
c9:1b:a9:e6:d2:b8:60:3e:8c:42:2a:12:8d:8a:12:
55:a4:da:0d:ba:af:a6:20:f4:51:e6:ba:e1:8f:bd:
0d:4a:59:08:69:91:f2:15:8e:32:f0:86:fc:7f:77:
f9:68:35:c7:8b:82:92:a9:a4:09:53:6f:7d:90:20:
bf:80:3d:c5:e1:22:9f:28:11:c5:91:82:9f:ae:8a:
3f:2b:0e:ce:14:01:03:13:68:97:5a:d1:e5:78:13:
e8:14:3a:10:07:d2:d4:dc:d9:cd:4e:ee:a5:bb:6f:
e3:3e:8e:4f:4d:56:34:99:e9:57:e9:78:4e:d5:45:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:44:CE:8B:98:AC:B4:CF:E8:70:8E:07:E0:E5:9C:F4:91:5A:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7024f23-e277-47d3-8cfa-36397ac62c94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.152.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:36:e3:b1:46:a1:2c:c7:0b:f7:74:43:96:06:42:14:c0:e4:
86:24:7e:52:3f:10:0b:da:3c:51:e5:bb:b4:82:bc:f1:da:39:
50:6b:f2:80:22:0d:b1:1f:c2:71:11:36:77:bf:b3:51:94:98:
35:8d:89:97:11:2a:6b:9a:e6:b3:bd:e0:1e:9f:b3:4e:01:3c:
04:de:8b:fd:1d:ec:b6:6a:2d:27:c4:a4:8d:6f:a3:2d:26:65:
9b:01:a0:b6:ea:3a:71:7a:a4:be:4e:09:96:33:ca:4a:64:2a:
f1:a2:ca:3c:48:75:5e:66:af:ca:be:05:5c:52:28:d3:fc:53:
6c:94:dc:9d:f9:48:de:49:09:a4:4f:67:79:3d:f1:75:cd:b3:
b6:15:9b:5b:b0:a9:de:73:0e:4f:43:18:0c:6f:86:44:74:81:
95:bb:53:33:d3:86:7b:18:c2:9a:7e:0a:3c:ec:ae:71:6b:6e:
92:f0:42:5e:04:34:b3:a7:a8:f1:85:77:3e:37:91:60:f9:5a:
c4:17:86:f6:5a:36:f8:89:1b:63:98:66:f8:f0:ce:e7:11:20:
94:4c:33:0a:9e:cb:36:54:b9:15:db:ce:e4:9a:63:7c:91:cd:
b8:bb:9b:9e:c5:eb:64:18:30:16:d0:ef:03:0d:73:1b:fd:e8:
9a:1c:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:08 2025 by rpki-client