Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa
File: 9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa (raw, json)
Hash identifier: +TU//swhDJr3sfMNGk5PAOfGq8XFrlRyxTvw017dSRM=
Subject key identifier: C4:5A:5C:8E:45:B3:33:A4:4C:00:A0:54:B9:69:38:F2:0F:AC:3D:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F2DD7E67A8E7786A5DA8E391A613235E1BDAFAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa
Signing time: Wed 12 Mar 2025 00:11:43 +0000
ROA not before: Wed 12 Mar 2025 00:11:43 +0000
ROA not after: Wed 16 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2d:d7:e6:7a:8e:77:86:a5:da:8e:39:1a:61:32:35:e1:bd:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 12 00:11:43 2025 GMT
Not After : Apr 16 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:61:6d:76:63:5c:4e:82:c0:3c:6d:14:19:
3f:ff:7c:81:25:0f:f4:ad:c2:cb:17:62:56:40:4e:
9e:d6:87:69:3f:98:73:14:fb:28:ab:4c:15:98:4f:
1d:7f:83:ed:75:5b:57:94:ba:5a:6c:5a:17:ef:ed:
54:79:cb:39:f6:34:8e:bd:87:33:00:46:2b:ac:b7:
65:0a:a0:5e:59:00:28:6d:6c:0d:f9:4c:ce:c4:d9:
46:02:25:47:81:91:64:9e:56:10:4a:a9:94:34:1a:
82:f5:ed:43:c7:a2:ac:e8:67:b3:8a:83:40:2d:3d:
03:c4:23:e0:19:6a:7a:ab:3b:20:69:3e:ea:8b:14:
65:22:1b:df:af:1c:08:74:30:f5:c5:b3:f1:7b:ed:
47:51:fd:8c:a2:3f:7b:66:86:85:7a:94:69:69:7b:
0d:2e:76:96:32:ff:31:a7:5c:1b:b4:6e:67:53:ea:
f3:f5:07:d5:0e:ba:0b:cb:7c:dd:60:82:b5:14:d9:
e8:4a:20:27:b2:eb:f9:5f:11:b8:42:64:93:d6:e7:
38:1d:0e:a7:89:b7:d9:1f:b9:a0:79:fb:7d:a7:fe:
b9:00:dd:52:65:2d:52:6f:b8:d1:b0:e5:c9:b2:30:
10:ee:be:34:16:2a:c1:f6:a8:bf:47:fd:3d:e8:5f:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:5C:8E:45:B3:33:A4:4C:00:A0:54:B9:69:38:F2:0F:AC:3D:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.135.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:c6:f6:3d:63:57:21:0b:ad:8d:3c:62:b3:57:23:ea:39:35:
0e:56:7b:23:17:83:49:01:e1:b8:2c:9b:6e:e1:31:59:90:c5:
8a:c0:3c:37:b8:cd:15:f1:86:62:cf:61:ff:2f:d1:eb:7c:e7:
13:ab:ac:bc:b2:4f:13:30:bd:85:14:e2:f2:f9:cf:7b:16:ae:
bc:61:09:ad:10:c7:66:01:ea:7d:bb:75:0a:9e:dc:0f:c8:ab:
af:59:db:9e:4c:10:86:59:c0:9c:0e:e4:76:c2:f5:5a:20:1b:
b8:30:4e:89:97:9e:73:a1:9b:e8:45:0b:39:fb:f9:50:b6:c4:
82:a9:ca:cf:f9:92:3a:62:70:db:e1:34:24:37:01:b1:09:cb:
1a:4d:1c:d4:89:78:96:0b:fc:45:48:91:09:7e:0c:a3:e1:9b:
57:64:c9:54:3d:bd:e4:46:78:9d:db:ab:cb:99:be:73:4e:69:
9a:d3:91:a7:97:9e:25:0a:ef:d9:8a:87:7c:85:4e:29:90:72:
c5:fb:5a:34:be:48:2c:43:cf:a2:af:ba:40:48:09:36:27:59:
70:67:56:8d:39:38:c4:52:8d:40:31:82:8f:0f:06:f3:dc:bf:
fa:fd:5e:96:89:a3:46:0a:6a:3a:50:c9:9a:4c:88:d1:f5:04:
8d:31:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:46 2025 by rpki-client