Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa
File: d48d001a-d755-4177-9837-96a2f0404b1f.roa (raw, json)
Hash identifier: bp73vIk9VMch+IWOh6ybBEfCqEkw1ZfBK+otZopsgKQ=
Subject key identifier: 9A:B2:14:4A:83:79:3F:94:20:0F:27:47:99:28:B8:42:78:D2:8E:C5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34F07DFBE96105E850C1C18B4309C6687D4D1E6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa
Signing time: Sat 29 Mar 2025 00:42:00 +0000
ROA not before: Sat 29 Mar 2025 00:42:00 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.57.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f0:7d:fb:e9:61:05:e8:50:c1:c1:8b:43:09:c6:68:7d:4d:1e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:42:00 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:9a:58:da:36:d6:7b:66:f3:2f:4c:fa:4d:
57:07:0d:bd:b4:d9:67:a9:a0:da:a3:09:88:a5:52:
72:20:db:ea:ff:10:db:13:73:94:e3:b3:2e:fe:0d:
0d:2d:ab:68:b9:72:fe:cb:b7:15:51:91:64:c8:63:
4e:e6:14:4c:c5:c0:5b:4f:58:af:35:be:af:1d:c1:
43:47:d7:ae:87:56:98:60:99:d2:e5:dd:5b:1e:74:
74:d7:d5:95:ef:b0:50:3e:f0:10:3a:2b:30:26:d5:
4a:a3:48:45:e8:f8:8e:fb:93:01:8c:da:9c:19:1a:
2c:d5:9a:45:bb:b7:5b:2f:de:37:f1:8b:9a:77:90:
dd:15:df:e7:9a:c5:9a:3f:a5:71:1f:32:fc:5c:f9:
04:05:15:e8:a5:c2:df:56:b9:c3:17:e8:78:af:a1:
ad:36:1f:e7:29:d7:70:9b:e0:ca:ec:bf:cd:56:df:
42:a4:22:29:a0:d6:81:2d:2c:c5:e6:98:2f:b7:b0:
c1:b1:b9:10:35:b9:0d:00:fe:73:80:63:e0:12:a1:
10:d0:bb:46:33:ba:49:e1:e1:7b:56:28:3d:1b:17:
05:cc:99:79:ad:64:c4:ea:cf:42:9e:cf:dc:fc:99:
7f:c4:cc:9e:10:65:3a:8f:27:e5:50:55:f5:88:a7:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:14:4A:83:79:3F:94:20:0F:27:47:99:28:B8:42:78:D2:8E:C5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.57.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:ca:30:6c:01:19:c9:d1:4a:60:02:40:9d:00:f3:f8:03:69:
f7:0e:ed:7a:c3:bd:e5:b0:5c:01:7b:41:6b:13:39:ab:0c:56:
f2:81:c7:3b:80:fe:05:21:00:aa:27:c8:da:5f:55:51:9b:e0:
70:5b:ca:7b:80:cf:9e:9d:04:73:21:12:01:de:38:59:c8:e5:
3c:6c:d4:9d:21:0b:39:a2:78:95:cc:c4:4e:d6:90:19:fe:86:
67:07:52:0e:65:8b:dd:60:77:e8:e3:5e:32:1a:f4:53:b1:b7:
ed:60:a7:98:a7:ef:18:08:1a:53:d2:0a:07:ab:73:a8:8c:6d:
59:b3:3b:87:13:1b:6f:9a:52:3f:88:b9:4e:86:4d:8a:c0:7b:
ec:d6:08:89:6c:06:a6:0b:91:cc:91:91:94:44:be:5a:79:0b:
7c:90:8c:61:fa:13:5e:02:00:98:f8:dd:07:35:ef:d6:16:b6:
27:45:36:d7:d0:87:c3:98:bb:a0:4c:c8:dd:5d:1c:ef:0c:b3:
a9:98:9e:87:9e:e4:bf:2f:64:f0:bf:31:24:ea:8b:82:b4:15:
b9:71:c3:a2:13:aa:ba:8a:9e:ae:c1:d8:80:c4:e0:54:08:0e:
48:89:ed:27:00:c6:33:4d:29:24:31:a8:22:7e:f5:72:8e:c4:
89:c9:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:51:00 2025 by rpki-client