Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa
File: 2788fd0d-0141-46b1-b160-e9916a5caddd.roa (raw, json)
Hash identifier: 9jH0x3Bj94iDsuaffBt4VoqV/o2pDYpLfiHBU64YP6c=
Subject key identifier: 99:27:2B:D9:D7:62:ED:4D:AF:7B:86:11:EA:30:D0:CA:A0:24:EC:34
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 0EF888AAA9662CB11B066ABB43BCDD2372A0D514
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f8:88:aa:a9:66:2c:b1:1b:06:6a:bb:43:bc:dd:23:72:a0:d5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=eb7912b64354bd3da57396af40b3a03b0da76b2ae6459274cfaabfe9619db724, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:bd:42:58:82:ff:3f:6a:5a:88:a3:c6:de:
25:10:03:f8:26:4a:39:73:13:46:99:db:03:30:06:
5c:b7:ad:7d:a3:92:96:cc:c2:a5:99:19:f5:ad:ef:
be:6c:e3:0c:15:54:68:0f:39:01:48:9c:e8:7e:5b:
04:45:b5:8c:9f:72:3b:b4:dd:c6:aa:a5:94:5c:66:
7a:b8:90:ee:5e:98:17:0a:52:1d:c9:24:34:2a:c1:
40:d0:6b:43:b3:82:a5:96:03:d2:7d:ad:74:4a:1e:
09:7f:0d:10:98:c5:d4:e7:a6:e5:5f:41:64:5d:38:
d2:b1:ce:75:54:a7:1e:49:78:e1:54:27:3b:9f:11:
67:b5:0f:b5:51:94:b8:3f:15:f4:6d:28:16:0b:fd:
84:40:d6:df:1a:29:4d:c2:75:f0:35:6b:f4:57:df:
9b:2a:28:81:d0:9f:1b:6c:05:f2:0d:e1:ad:d5:ed:
59:d9:01:f9:49:57:01:43:e9:69:86:26:b4:6f:b6:
f8:7b:4b:c0:bd:a1:8a:61:7a:f1:57:e3:aa:68:7b:
37:4f:60:c4:9b:9a:16:f8:b2:8a:9d:7f:4c:0a:40:
b1:71:36:a7:f2:6e:b3:2f:8b:71:13:c5:cc:c5:76:
53:6e:1b:58:94:42:1a:4d:4c:77:97:ee:d9:d3:56:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:2B:D9:D7:62:ED:4D:AF:7B:86:11:EA:30:D0:CA:A0:24:EC:34
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.0.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a4:da:b8:b0:b2:79:d7:f8:db:4f:3d:ad:fc:b9:ef:21:f8:
cf:ad:58:91:12:9c:0e:15:9e:b6:47:a7:3e:a0:99:81:92:96:
84:6b:5d:d8:9f:d8:cf:b5:92:4f:42:e6:ed:d3:12:1c:20:21:
9a:40:5c:1c:9d:33:f5:72:a7:cc:10:04:5a:c9:48:a6:b3:49:
a1:3d:8c:43:c1:99:53:a9:6a:ae:4a:5d:43:4d:5a:e4:ff:88:
4d:a6:10:bf:10:d5:31:c9:02:b2:a7:39:f3:3a:7b:a0:d7:d3:
ea:e8:d7:76:15:63:1e:69:15:6b:e9:b1:85:e9:b6:d9:43:f5:
84:36:b7:f9:22:04:38:cf:cd:da:d4:26:b9:12:28:a9:b8:e1:
cb:f1:58:40:5c:97:b6:6a:81:56:0b:1b:94:0c:dd:75:76:5a:
72:2c:de:d1:c1:69:bd:18:67:ae:59:44:20:5f:47:f8:25:20:
10:7e:b9:1f:28:2a:e2:f8:19:bd:81:85:c0:69:4b:ff:ef:a4:
76:b3:e0:62:dd:43:ef:52:dd:40:ab:49:1b:2e:ea:1a:5d:24:
e1:81:ee:c5:d1:4f:81:10:fd:63:58:0a:a1:f4:f2:10:11:54:
29:07:07:94:95:3e:39:af:6f:84:0a:fa:6e:17:1b:a3:4f:a9:
20:66:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:42 2025 by rpki-client