Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f840d4b-6625-430f-9982-054181947ab2.roa
File: 9f840d4b-6625-430f-9982-054181947ab2.roa (raw, json)
Hash identifier: zi4ja2iWD4/ZkyDWuSIeVT1NfT64GkWaZwdCYNVfK5M=
Subject key identifier: 39:C3:59:93:C7:13:B1:76:B4:64:7E:0D:8F:38:62:9F:B0:40:3B:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 181FF78522A8353181520362426206601BAD7EBB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f840d4b-6625-430f-9982-054181947ab2.roa
Signing time: Sat 29 Mar 2025 00:31:38 +0000
ROA not before: Sat 29 Mar 2025 00:31:38 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.184.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1f:f7:85:22:a8:35:31:81:52:03:62:42:62:06:60:1b:ad:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:31:38 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:1d:bb:66:45:2c:d4:8f:a8:87:16:fd:46:
a6:75:66:19:af:e7:25:83:23:47:2b:9f:da:10:d5:
40:7d:43:34:a6:57:78:ab:78:5b:8f:f2:c4:cd:42:
ef:23:4a:fa:46:c7:7c:e5:77:4d:fd:f8:a5:91:c9:
b7:d6:c2:e5:02:b1:83:0a:3c:c4:47:a5:4d:c5:6f:
38:b3:07:c5:4f:9e:63:98:4f:aa:fd:3d:36:f4:49:
b5:c6:e5:b3:70:52:94:94:62:3b:a4:f1:71:f1:07:
e0:7c:d7:b1:18:92:f3:f2:87:b0:2d:e8:fb:b8:77:
68:75:3a:73:5f:74:7a:b5:48:ad:77:6f:c9:f8:48:
17:66:c8:a9:f7:8b:fd:2b:b1:32:c9:ec:dc:1c:44:
9e:b8:ef:2c:5f:09:60:ac:f0:78:25:2a:75:f1:b9:
74:e4:a6:a1:29:74:c0:fd:6e:be:52:41:ea:7b:6c:
ee:de:a3:36:20:89:f5:27:4d:96:09:2b:2c:da:86:
0a:f4:b4:51:8e:fc:47:da:a4:29:d4:67:75:27:ba:
ad:6c:ea:9b:f3:39:df:a8:f4:e7:c1:e1:bb:b7:68:
e3:3e:3a:3a:c7:d4:8f:2f:7d:6d:a3:f1:5f:4d:91:
da:6f:da:0e:d6:ee:40:90:11:7f:be:3b:7a:bd:a2:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:59:93:C7:13:B1:76:B4:64:7E:0D:8F:38:62:9F:B0:40:3B:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f840d4b-6625-430f-9982-054181947ab2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.184.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c3:57:b2:73:eb:d3:24:94:73:3e:58:a2:9c:98:fd:8e:27:6f:
87:0a:95:47:47:cb:03:bb:a9:ed:0e:46:a3:dc:b7:52:a1:7e:
e1:bb:10:49:87:82:c9:72:b0:d5:21:2e:f5:49:d1:52:c9:4d:
8d:fa:2f:7d:10:85:2c:09:89:0b:04:0e:95:16:f4:c2:ff:9d:
1d:55:87:da:3a:7d:53:c0:b8:70:3d:b5:d9:58:89:63:2f:d6:
b7:f4:29:d3:a4:52:1c:0e:8a:02:65:0a:93:0e:cc:da:ee:92:
08:6a:5b:30:8b:a8:e9:76:5a:24:5c:31:62:ba:d2:d5:32:27:
b0:03:99:8f:2c:94:1a:70:69:7c:28:cb:64:cd:eb:47:ff:a4:
c9:d4:ec:45:ae:6e:35:17:8a:7d:1c:53:f3:cf:bf:6f:78:d2:
b6:3e:11:0f:8a:ff:43:33:e5:f7:3a:2f:09:7c:8e:09:47:a4:
b2:2e:f3:b8:d8:e4:71:e8:2e:8e:10:16:67:2f:8a:09:fe:bc:
a6:78:47:d0:15:32:89:92:e7:5b:52:f7:12:86:3d:9e:2d:24:
dc:4a:28:35:80:8f:36:43:62:87:78:fa:ad:6e:87:c9:9a:16:
69:2d:6c:78:4e:07:95:82:af:6c:d2:b2:c1:09:a4:04:6c:f9:
7d:f2:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:35:22 2025 by rpki-client