Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a911b7d0-853f-4efc-86de-453b1cd9fcd7.roa
File: a911b7d0-853f-4efc-86de-453b1cd9fcd7.roa (raw, json)
Hash identifier: 09HS+FAc3PdCoWVGIC816OmN9fCmy9dMbFw6X8Pyf20=
Subject key identifier: B3:DF:AB:F0:DA:A9:DA:69:2B:87:84:0C:98:CA:3C:6F:11:88:49:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 51D2CAC65F249EDA4B96A1E313F89F96E14BDA04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a911b7d0-853f-4efc-86de-453b1cd9fcd7.roa
Signing time: Fri 21 Mar 2025 00:00:23 +0000
ROA not before: Fri 21 Mar 2025 00:00:23 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.60.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d2:ca:c6:5f:24:9e:da:4b:96:a1:e3:13:f8:9f:96:e1:4b:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:00:23 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:5c:8f:c8:a5:50:de:42:81:c5:5b:3a:16:
84:e2:0d:5c:12:e4:fa:fb:19:d8:82:b5:28:fc:01:
b6:2f:7b:8c:51:3c:1f:b1:e4:08:33:b4:06:9b:cb:
48:fd:b0:df:58:35:04:ad:9e:ef:99:33:f8:a4:06:
a7:7f:a0:2a:2f:9f:f8:a1:cd:27:ff:66:1d:1a:36:
a0:15:95:74:0d:ca:a6:a0:6a:91:18:05:ec:97:bd:
9e:98:65:6f:62:70:6d:be:8f:c5:5a:78:92:21:b6:
bc:5a:07:59:cc:23:52:ba:5f:ab:ab:a6:8a:8e:1d:
97:a5:a1:6b:99:5f:92:ae:0e:f9:d3:5d:7a:81:7a:
c4:de:63:1d:ec:b8:cb:f0:fc:c3:14:bc:b3:b6:6f:
e1:2c:1c:b8:8d:23:a8:d0:d3:ce:fb:98:69:b7:5f:
00:2d:49:cf:7e:9b:ad:5a:02:e0:c8:81:9b:c8:99:
11:d1:1c:0d:08:20:3c:85:26:d9:52:6b:8e:ae:ee:
c7:22:67:ad:3d:b1:ab:f4:2b:77:af:c4:8f:62:38:
de:30:9c:d5:c6:2e:bd:75:30:f9:7b:0f:a9:28:ae:
db:e6:c4:46:1e:d1:62:e9:41:46:e4:6c:17:91:62:
ae:16:89:32:4b:5c:ce:9d:8c:55:0d:c8:a1:e0:10:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DF:AB:F0:DA:A9:DA:69:2B:87:84:0C:98:CA:3C:6F:11:88:49:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a911b7d0-853f-4efc-86de-453b1cd9fcd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:47:ca:7b:3d:d3:ce:dc:84:a8:28:1b:b0:bf:2c:0e:a4:71:
59:36:d6:a0:a8:d4:5b:9b:27:c5:d2:ed:06:ba:eb:46:cf:2f:
9f:f3:40:39:e8:98:9d:9d:f1:6b:75:6d:97:ba:85:c4:58:ac:
e3:04:8e:83:74:1a:31:07:91:4f:af:0c:88:13:39:c3:ca:84:
21:c5:ba:05:52:41:f0:15:1c:24:21:26:41:7f:8c:78:25:1d:
b0:6e:90:85:71:5e:c4:27:b3:c6:21:67:19:6a:81:9e:95:ef:
e8:d3:42:61:80:14:2f:b9:dc:cc:c8:38:12:8c:e2:1b:5b:08:
83:a0:9e:b0:70:13:e2:0b:d3:bf:eb:d9:70:01:66:d6:2d:d0:
47:bb:95:e3:b0:d6:5c:a7:6f:ab:a8:1b:68:10:80:58:19:02:
18:33:5c:7d:c6:6a:02:60:df:8d:d7:86:b0:73:6a:7e:0d:9d:
84:91:14:42:d2:f9:3c:46:f9:9c:b1:d4:64:70:f8:89:aa:60:
ab:bf:0f:31:87:8c:f4:88:13:f1:6f:9f:25:38:88:87:1e:d9:
9f:67:e5:53:83:5f:b3:fd:73:ea:55:7e:a1:20:a8:11:23:62:
d1:4c:ee:c0:fa:f0:cf:73:51:f7:6a:7d:0a:1f:c1:f6:2d:93:
6f:28:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:58 2025 by rpki-client