Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
File: e8982554-3ba7-40dc-8512-4f2f354e3029.roa (raw, json)
Hash identifier: gHFTQQK+CTZHa9jcJBWTwgzmbVgYxxDoTzvSmV3r47c=
Subject key identifier: 34:C8:01:14:03:98:7B:70:9F:F8:C1:B9:89:35:37:9F:A2:AA:37:EF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7EC48FABAB913C38F9FA7940DF4088C143D98562
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.19.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c4:8f:ab:ab:91:3c:38:f9:fa:79:40:df:40:88:c1:43:d9:85:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=c120580740da3ce8c74c24060155b930eafa90e1ab3075dfd785a382c8f9cfa9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:2d:12:84:af:a9:4f:65:e0:75:e6:da:8a:
b3:4b:95:4e:14:15:cc:5a:b0:b1:00:83:cd:27:00:
ac:6a:1b:7a:2d:7f:13:2f:2b:7f:53:b8:a4:bc:5e:
8a:ea:93:bc:ec:9b:7a:70:6a:65:0c:25:05:6f:b7:
60:a8:c3:6f:ff:86:e7:85:ad:41:98:fd:0e:f3:b7:
1e:b4:a6:38:64:93:09:20:ea:4c:3f:16:7d:09:ac:
31:b5:ce:b6:07:c0:10:c8:e5:a5:bb:ca:9b:d4:30:
a7:f9:ad:20:94:b1:5f:a5:d9:05:14:98:1f:69:f4:
c5:04:92:8e:84:3f:c9:11:61:0d:e1:1e:f0:84:ed:
d6:bb:86:00:d9:cb:de:0d:e2:3c:72:c0:91:05:91:
15:37:cd:05:00:77:70:86:8b:cf:60:54:0b:ea:f4:
79:18:fa:ff:86:69:a6:3a:7a:bc:9a:37:8f:27:ee:
95:30:3f:17:40:28:65:3b:c8:10:06:71:00:a9:2d:
0f:c1:96:48:61:ad:63:0c:39:9e:2a:46:71:ee:88:
ef:f0:f0:3b:14:a3:00:1f:b2:cf:3f:f3:fd:ba:bb:
ec:2a:54:fe:4e:88:55:67:b0:3a:e5:91:11:07:ae:
21:57:f3:64:03:5a:57:95:f8:8e:b3:ec:8e:c6:d3:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:01:14:03:98:7B:70:9F:F8:C1:B9:89:35:37:9F:A2:AA:37:EF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:38:1e:cf:2b:fc:4d:18:72:dd:0c:78:7e:51:ec:40:2c:5d:
e1:8c:5c:e1:02:7b:7d:80:98:cb:50:4e:66:03:7c:5d:37:a7:
c9:70:e6:61:fe:98:d4:05:91:a0:53:56:a5:96:e7:41:1c:93:
67:69:52:2f:03:a2:6b:bc:a2:8e:0a:8c:67:91:bb:8d:74:92:
ba:40:3d:c8:3e:1f:99:31:d8:7e:5b:30:4d:1c:54:80:57:e8:
40:15:ef:2f:0e:dc:72:4b:3f:af:20:d7:03:b0:b1:fd:cc:6e:
b8:f8:bd:37:69:31:c0:27:8d:2d:4a:9d:87:e2:14:db:2f:5b:
40:8b:9c:75:6b:de:56:86:a6:fa:8f:95:10:63:80:35:96:17:
3a:0f:e7:a3:94:0d:be:5c:f8:10:cd:ad:21:0b:46:81:05:f6:
c9:28:ae:a1:91:db:e7:04:cc:7f:9f:9c:f2:68:3b:63:d7:2e:
41:1a:66:ff:b4:11:9b:e5:b2:61:57:c5:20:f6:90:05:8b:39:
89:e8:70:ca:cd:9d:6d:6d:4b:8c:77:68:b7:02:20:ac:03:71:
85:5e:0a:a7:63:3e:56:24:d8:9d:ac:8f:81:9d:df:41:55:ba:
64:83:ef:87:88:10:24:83:f0:72:89:dc:c7:45:ef:24:05:b5:
24:a8:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:16 2025 by rpki-client