Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c27a19-911c-477c-b4e8-1ba9b1e3da76.roa
File: f4c27a19-911c-477c-b4e8-1ba9b1e3da76.roa (raw, json)
Hash identifier: WGK+XXzE6Qh8EEWwt7TJ8p1Rs5VqAIUHc9vpRYN9luQ=
Subject key identifier: 57:AC:D7:BA:C5:D6:0C:B0:21:0C:D6:BE:19:70:3A:F7:47:5A:3C:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 545C350F55749BEB1E1FF0650D3D60A74B125A9C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c27a19-911c-477c-b4e8-1ba9b1e3da76.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5c:35:0f:55:74:9b:eb:1e:1f:f0:65:0d:3d:60:a7:4b:12:5a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=a2ef4c3e797c7ced13357aec997dc9e12734966b4963a2c8478a4aeba6e28481, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:7c:c8:ec:13:cb:22:1d:e0:b8:92:d7:70:
1f:32:3f:a0:5b:c6:d2:2b:b7:42:ee:1b:5d:e5:d3:
de:b8:4b:22:fa:ce:9f:5d:b1:e8:ff:63:be:74:4f:
bd:8f:d6:46:b8:a9:05:d0:43:ff:8a:08:e2:35:af:
02:f7:d7:b1:d5:2a:a5:47:2c:81:bc:7b:ab:30:9c:
ef:bc:9e:05:7d:8c:fd:03:30:54:1f:c1:ca:dc:6c:
58:f6:44:85:a9:39:b8:de:7a:3f:53:ab:bf:28:7a:
77:05:69:bf:75:a2:8c:b3:15:66:61:0f:21:1d:7b:
00:9f:17:d8:cb:aa:0a:a6:2e:57:5b:cd:5f:46:a6:
99:c2:4d:87:b1:bb:2f:92:84:3c:f4:5c:df:f3:52:
48:2f:34:07:a6:60:ee:20:26:ed:d0:78:31:0b:22:
d4:87:88:fc:6a:e3:99:5b:64:02:d0:dd:27:85:0c:
97:f9:83:b8:86:4b:59:47:3d:d8:ae:79:14:c6:c5:
c5:6e:46:63:7f:be:87:a9:65:a9:63:c3:b1:93:e1:
9e:3c:2f:8e:d1:e1:16:13:19:b8:57:19:06:4e:b2:
cf:97:64:56:54:49:95:07:6b:ff:f0:09:6f:38:08:
34:ce:f1:c0:80:b5:c2:37:7e:6c:46:e4:34:40:d5:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:D7:BA:C5:D6:0C:B0:21:0C:D6:BE:19:70:3A:F7:47:5A:3C:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c27a19-911c-477c-b4e8-1ba9b1e3da76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.192.0/19
Signature Algorithm: sha256WithRSAEncryption
be:fc:7a:47:df:9c:80:05:24:e0:09:7e:97:7c:e5:f1:7c:b1:
a6:84:65:bc:db:c9:69:c4:88:ae:a6:77:3a:b3:20:17:d6:47:
2a:11:e9:82:c2:5f:72:7c:59:52:92:a1:b5:cb:69:81:a6:0e:
76:d5:fb:70:65:64:06:db:35:75:52:4c:d3:58:8b:9a:36:16:
64:4a:80:c3:a3:71:91:3b:22:31:92:b6:df:db:a0:57:f8:0a:
c7:d2:a9:b4:0e:6b:26:13:70:a0:aa:a5:c1:0b:15:60:2f:65:
27:3d:29:e6:0e:69:b1:4a:4e:14:13:84:cf:23:83:7c:03:d0:
e6:2b:a5:70:a9:9b:88:ed:07:dc:2a:4b:ef:84:60:b5:0d:3b:
e1:d1:0c:23:9d:3d:3a:6d:10:5a:8f:bd:7d:91:28:35:d9:ac:
93:cf:8f:26:a8:67:23:af:b3:6c:8a:60:58:65:1f:67:2e:b0:
73:d8:1e:e3:ad:3b:2f:ef:cf:2b:92:5d:df:26:4b:3e:80:c7:
ff:07:8d:e9:1f:b9:e5:44:e6:35:56:a9:da:c8:62:f0:dc:4b:
5b:81:ea:8b:21:11:06:0e:16:8b:7f:22:36:12:3e:69:ae:7f:
c3:2c:54:79:63:46:16:f9:cd:4c:2c:1f:57:65:f6:7b:81:10:
f2:30:b1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:44 2025 by rpki-client