Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa
File: e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa (raw, json)
Hash identifier: A7IGVhzluK5frc4fPX3rLTNBz1VldP7o7wPPau/lyKA=
Subject key identifier: 4E:D5:E9:70:F1:2D:03:03:E9:43:4C:B0:6F:AC:BA:9D:44:9A:6B:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CE9CA5BE4E57968000D0E7071FE890ACF9344
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.19.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e9:ca:5b:e4:e5:79:68:00:0d:0e:70:71:fe:89:0a:cf:93:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=7b04cedde104cda5ba3e4b5863277f1bbd3541c308a52bd1403a315b2ff31143, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:2e:35:a7:4e:6c:3e:b9:31:b7:fc:c2:44:
c5:38:17:f2:39:36:49:e0:f5:fa:2b:8a:9f:b5:71:
65:41:b5:d7:83:d2:c5:86:81:37:3a:a8:49:07:b0:
37:9c:e3:a7:44:92:87:1b:5d:ac:7b:95:e8:89:6a:
71:59:d2:df:bb:fa:4a:7b:99:70:4a:3b:67:06:5f:
40:c5:24:d2:d8:5b:a0:35:d9:1a:e6:f2:a2:c6:c4:
d7:5e:e4:b2:92:f7:8e:29:7f:19:97:bc:53:1b:54:
4f:23:d7:2e:5e:f4:f1:36:33:7e:ae:4b:55:1c:c3:
31:e5:13:0c:d6:59:b0:9b:d1:5e:cf:35:be:cc:a3:
30:b5:e6:83:b9:fd:ff:24:f6:61:61:e1:80:dd:8a:
86:2f:e2:b2:60:a3:a2:b7:4b:ab:54:6c:0e:d4:91:
36:37:35:1c:74:8a:f7:f8:54:30:67:18:b9:e3:ee:
19:76:2d:3b:53:8e:9d:19:69:39:6c:a5:b6:8d:e7:
97:6a:b3:2a:a8:f6:0f:65:9d:e6:5c:2e:d9:5a:ec:
5f:34:dd:38:ad:5d:78:5d:5e:f5:f0:74:cc:8a:b1:
42:b9:c8:ea:f2:18:57:e6:d9:42:ca:b6:d1:37:4f:
7c:93:29:90:72:9f:f4:bf:f9:20:c8:96:5c:d4:cc:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D5:E9:70:F1:2D:03:03:E9:43:4C:B0:6F:AC:BA:9D:44:9A:6B:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.19.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3a:dc:6f:fd:af:57:67:30:5d:4a:ee:d9:5c:ee:cb:7c:54:c7:
bc:31:31:f2:54:5e:91:93:32:6e:ba:54:ef:3a:47:df:0d:9a:
c5:34:c6:44:41:4c:d0:e7:29:07:c0:ef:12:2d:cd:ef:95:34:
09:88:3f:e8:7c:33:30:8c:8e:41:26:64:65:70:69:95:03:af:
57:7f:2a:55:5d:4d:b6:48:67:ef:f5:70:96:58:6b:79:0c:3b:
d3:84:cb:85:e0:79:c3:3f:e3:23:39:7e:d1:b2:1a:bd:80:c3:
14:ee:29:fb:ef:88:d9:77:44:b9:2b:57:d9:54:68:1e:e1:df:
70:f4:a8:09:92:f1:b3:cd:15:45:b6:81:b7:58:9e:30:42:f7:
2a:45:d9:82:8c:a6:fc:06:d5:03:ff:a1:be:4a:6c:44:e7:56:
05:17:83:be:b6:52:36:1a:35:fd:66:a9:d9:ab:61:44:00:e8:
54:30:54:37:42:67:30:89:6b:3c:38:73:ea:1a:3a:5c:8f:3a:
86:69:de:9f:37:1b:9f:a5:4c:84:97:ef:03:9e:f0:36:d7:b9:
d9:84:09:bf:0f:88:d3:ff:0f:a6:6a:0d:9a:26:a6:a8:e5:c9:
29:e6:15:e9:58:81:01:28:ab:76:14:22:b0:e7:3b:d8:1c:76:
71:e0:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:07 2025 by rpki-client