Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b0174157-080f-44e0-b58f-59731776aac9.roa
File: b0174157-080f-44e0-b58f-59731776aac9.roa (raw, json)
Hash identifier: mJZSe4lceoU8wl+/MJig0OVc11vK+E8XwoIYsQ/nRWg=
Subject key identifier: 00:DF:68:80:FC:80:0C:A4:A7:77:B8:31:22:CB:F1:7B:E5:6B:9C:5B
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 34DB74DC79716F984205FD355180B23F64213193
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b0174157-080f-44e0-b58f-59731776aac9.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:db:74:dc:79:71:6f:98:42:05:fd:35:51:80:b2:3f:64:21:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=380f1982f971efa122e6b8c5c6b74adea6a8862d2e5fddda17f7c2a2b02804a4, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:32:94:7c:29:88:db:a9:bc:a1:ae:7f:80:
ce:7a:d0:ab:92:94:ab:09:e6:ba:53:50:c5:a2:04:
30:d1:0c:84:5c:15:9d:20:93:5e:2f:ff:c7:94:d2:
4d:1a:e6:64:28:6e:e0:02:5f:16:dc:9b:c1:30:82:
22:76:1b:bd:d9:04:f0:14:a8:bd:de:7a:1a:54:63:
47:72:40:3d:4a:03:58:61:9b:15:95:bc:f3:58:a8:
48:c8:f7:10:46:24:fd:ff:1e:78:fc:80:d9:3b:34:
b4:df:3a:e2:87:07:37:25:89:c7:c4:10:eb:6e:b9:
a1:09:f5:c0:a4:7b:c8:71:71:c9:76:69:d6:f0:51:
47:df:b4:0f:87:64:85:4f:1c:0a:86:99:a4:22:92:
3b:32:90:01:a4:5d:29:00:90:e1:98:09:6b:9a:09:
c5:ee:d0:64:ea:27:b6:63:b3:dc:4e:71:b8:09:08:
70:eb:48:6a:a2:3b:ba:88:a0:bc:85:7c:79:ea:06:
96:26:59:45:47:2f:52:c7:26:60:d5:d2:e1:1b:b0:
72:6e:d1:75:22:90:74:89:e8:1d:02:fc:1b:8d:95:
be:bf:e9:c1:da:ac:bd:c0:85:10:48:fd:7c:96:20:
fb:00:7e:d6:b0:7b:a1:53:f0:af:a7:94:4f:e3:f9:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DF:68:80:FC:80:0C:A4:A7:77:B8:31:22:CB:F1:7B:E5:6B:9C:5B
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b0174157-080f-44e0-b58f-59731776aac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.64.0/20
Signature Algorithm: sha256WithRSAEncryption
80:60:d5:4d:ca:88:e0:0b:3f:f5:b5:59:6f:4c:8e:ad:65:11:
8d:e8:35:45:22:f5:84:47:58:74:8a:c8:83:62:8f:29:24:d1:
9e:47:78:4e:cc:78:49:80:01:cf:fb:ac:22:67:7c:c8:54:70:
5a:42:5a:69:4d:4c:6b:b7:fb:41:ec:c2:6d:a5:da:88:d4:b6:
8d:8e:63:e7:2d:8b:12:34:72:a5:ea:bb:87:67:8b:35:1b:51:
52:2c:5e:c9:13:d4:82:fe:43:9b:24:f5:44:4d:e5:12:0b:c0:
cf:3b:99:ef:79:bd:26:87:28:c3:58:00:59:6d:68:57:c6:2e:
fc:d5:0f:f0:a7:d2:a8:3d:2c:75:ab:d5:0b:44:ef:0e:c2:75:
fb:67:c8:de:14:71:0d:09:a2:dc:db:06:8f:c3:03:c0:c3:5c:
f1:8b:4d:63:68:6d:6f:5f:33:bc:1f:24:21:56:c9:2f:84:8e:
03:b3:2a:37:22:85:34:bb:27:f9:44:46:83:ab:02:59:14:d2:
e5:4c:bb:31:a8:a8:37:8e:f6:b4:ba:d5:ef:b5:01:af:f3:cd:
4f:ef:db:c7:06:22:1a:94:38:0e:f2:2c:eb:c4:bc:45:c0:ef:
93:7b:87:d3:22:a0:95:b5:0d:8a:69:6f:6b:3c:bf:8a:04:12:
b9:b7:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:19 2025 by rpki-client