Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02fe2df1-37cf-467a-8eca-4f9d7087dd81.roa
File: 02fe2df1-37cf-467a-8eca-4f9d7087dd81.roa (raw, json)
Hash identifier: fciG1PcL5o2HjvjNrj0zs/Ot8bhS5AYNDHNy+fF42tg=
Subject key identifier: 0E:6C:64:7C:CF:1A:94:BF:52:4D:20:3B:EC:7D:94:D0:66:4E:9B:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 08DE9792CAC919CC5C4388BD0468D643B3708BA0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02fe2df1-37cf-467a-8eca-4f9d7087dd81.roa
Signing time: Tue 18 Mar 2025 00:20:30 +0000
ROA not before: Tue 18 Mar 2025 00:20:30 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:de:97:92:ca:c9:19:cc:5c:43:88:bd:04:68:d6:43:b3:70:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 18 00:20:30 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:a5:71:4f:31:94:3c:af:33:80:07:97:84:
83:7e:73:79:ac:a8:73:68:81:30:69:26:16:f3:6a:
07:49:89:dd:69:a6:81:a8:15:2c:6c:fb:02:09:bd:
73:26:8c:33:cc:30:82:09:6e:12:0f:4a:1b:60:bf:
a9:e3:33:38:d1:3b:ab:af:3a:d2:81:df:77:41:b0:
a0:d3:e6:57:9a:e8:ce:6f:ef:49:7d:29:ed:c0:ed:
f9:14:3a:bd:b3:1c:aa:16:27:fa:a1:ef:72:6f:23:
71:3f:d8:eb:32:46:3d:0f:aa:5c:11:cd:45:7f:ba:
bc:be:25:cf:86:3a:e2:4c:2b:73:9a:4f:25:5d:c6:
ca:39:20:3a:e2:3d:09:6a:6f:b4:b4:ce:5e:42:c6:
8f:81:8e:c8:94:50:33:a8:0b:95:5a:10:a0:c3:37:
f8:05:4c:5d:fe:1f:11:6d:5d:a1:a7:01:af:e6:0f:
63:2b:02:e4:7e:2b:d3:01:22:ac:ae:36:b3:4a:17:
b2:52:76:3a:13:b4:42:b7:20:6d:9c:ed:45:0a:f8:
5a:05:c6:3b:fd:1c:26:59:cd:d4:72:79:e9:25:68:
1d:6a:2f:f8:9b:79:6b:cb:dd:bc:18:d4:01:fc:7a:
22:85:28:3b:5f:85:df:80:90:6a:90:c2:c1:42:4a:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:64:7C:CF:1A:94:BF:52:4D:20:3B:EC:7D:94:D0:66:4E:9B:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02fe2df1-37cf-467a-8eca-4f9d7087dd81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:13:dd:72:9f:92:0e:3a:62:cd:f2:2e:28:d4:39:3a:8e:30:
ce:4f:0a:61:22:71:8b:f4:a6:c0:7d:10:38:46:52:b8:20:a5:
51:0e:60:3f:b4:5f:8d:05:28:6c:05:b6:57:63:53:4a:b1:75:
73:b3:f3:d3:f1:37:c8:a1:58:13:7a:c5:a2:52:55:06:e6:c4:
43:2f:63:c9:2e:68:8c:5a:ec:b1:c5:21:1b:5c:b0:89:d1:39:
8a:2c:40:17:81:1b:1a:30:73:ea:4a:13:14:54:da:94:21:cc:
b3:0e:72:c9:ac:95:17:ff:aa:97:cf:6c:b3:f5:9e:f6:79:43:
cf:9b:1e:78:db:2a:6d:50:f0:d6:4d:d7:2f:96:1a:e1:9e:90:
37:28:c8:38:2d:e2:d0:d4:46:fc:cf:61:e8:7a:e4:7c:69:07:
de:72:f2:22:2d:1b:96:c1:b8:f5:b6:cd:82:8f:23:c5:92:4b:
22:76:91:90:6b:60:56:e9:06:97:12:a1:cc:5f:21:07:51:75:
7d:01:7b:90:be:22:42:bd:2b:44:1c:8d:85:32:84:ce:f8:98:
c0:d7:66:b7:62:8b:97:ce:8b:bc:d7:42:0c:94:1c:31:18:ed:
f2:62:13:86:ed:31:a3:39:7b:9b:0a:00:15:bd:99:ce:6e:f5:
06:8e:9f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:40 2025 by rpki-client