Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
File: 3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa (raw, json)
Hash identifier: XVR1ODmWzKO+0klbnboyaiusftkqtrKNTyT21R1ZO4k=
Subject key identifier: E0:7A:B4:73:9C:9C:6C:23:90:21:16:5A:99:2A:77:9F:C9:22:D9:EE
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 6BF4EF9BB55DB17CA2E61EE08E1D1E8E9FA3DECB
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f4:ef:9b:b5:5d:b1:7c:a2:e6:1e:e0:8e:1d:1e:8e:9f:a3:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=a254843c9f6d4d2fd1605b3820fd431b10ff740cf800a022903dd091fbd91476, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:42:19:bf:af:96:89:00:12:a9:ad:59:cd:
f3:81:cb:50:7b:f0:9b:de:d3:3d:f1:6a:0f:80:8b:
30:d3:2d:4f:b1:52:3e:03:10:3c:03:66:1b:cf:d5:
7f:cf:9f:fa:b6:3a:c6:76:f5:8c:42:be:e0:b2:bd:
7c:55:51:da:6b:e6:f8:a8:d5:a7:30:91:0c:ee:ad:
65:39:f0:76:ca:c8:0d:3b:a5:72:55:fe:d1:22:bb:
a8:16:23:bc:52:fc:3f:ff:28:18:ff:05:66:5b:14:
b7:ee:a5:61:17:56:e6:cb:31:f1:76:52:9c:71:32:
4c:73:2d:95:f3:a1:8f:47:53:fa:f3:ec:ea:1d:d4:
7f:9e:63:16:e6:a0:52:9a:1f:dc:e6:6c:7c:12:09:
39:86:6f:f0:59:0b:c7:61:76:90:42:99:b8:c8:32:
41:65:61:d6:5d:14:28:07:dc:42:b2:84:f3:be:51:
00:7a:5b:55:51:a3:42:ae:ca:6b:b1:04:14:39:67:
c4:24:fb:c3:ce:62:a2:58:60:c0:0b:c5:0a:2a:04:
2d:5f:ad:4f:b6:a6:e3:d9:37:5d:53:ec:10:3f:46:
d6:95:d2:f8:54:a8:ad:a3:bd:b4:eb:55:32:02:1b:
00:cc:b8:3f:b6:d5:62:15:e6:64:54:0b:9b:bf:33:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7A:B4:73:9C:9C:6C:23:90:21:16:5A:99:2A:77:9F:C9:22:D9:EE
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.88.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ad:e4:13:d8:cc:92:75:49:6b:9a:91:85:40:d4:ce:99:83:
a6:0b:d6:68:a1:62:09:7e:22:00:2b:71:49:80:a0:9a:d9:60:
1a:7a:e6:fd:f2:79:51:b9:3d:8f:9f:f2:37:b9:6e:5f:50:28:
f4:d4:d8:7e:89:f4:97:b4:ef:f8:3b:12:60:2f:8c:89:f7:92:
52:0d:d1:6a:8e:33:a8:fb:3c:59:f6:fe:85:48:73:b0:b7:bd:
29:72:61:70:9c:87:69:93:10:be:4a:80:2e:36:10:3e:6e:85:
12:42:11:3f:a1:8e:b2:e7:02:45:fd:da:a7:76:30:b2:1c:a0:
72:6e:18:c0:90:98:54:b6:e6:3a:3a:61:9d:84:af:1a:f5:4f:
16:60:4e:10:06:28:c6:9c:fa:38:d1:ef:1b:f8:ba:bf:5e:dc:
1a:b1:a5:8b:af:05:7d:f0:97:10:d0:cc:32:d3:8f:ba:0b:7a:
0b:4c:da:56:75:e3:92:c7:61:2f:88:71:5b:98:7d:07:8a:f1:
33:7c:c8:72:a9:04:81:0e:39:c9:cc:31:9a:b1:63:2a:79:41:
2a:08:27:06:0d:b4:2e:1e:fc:92:94:54:27:e9:78:78:48:cf:
a9:b0:a5:2f:a8:f9:07:a5:3c:42:50:74:fb:d5:05:ce:76:22:
0d:d3:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:17 2025 by rpki-client