Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbeb70f4-660c-4c1f-924a-f9aabc75772d.roa
File: fbeb70f4-660c-4c1f-924a-f9aabc75772d.roa (raw, json)
Hash identifier: WaEDtvC5lBkaBj0u8q9teKl5EsFKSZqiRaa3tWJOD/s=
Subject key identifier: CC:5C:B6:FC:B2:C1:A0:0F:E0:EE:C6:01:DA:01:0F:29:47:8D:7A:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E213B342B4D4EC7E63724A56BA61FA150F56F9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbeb70f4-660c-4c1f-924a-f9aabc75772d.roa
Signing time: Sat 29 Mar 2025 00:32:20 +0000
ROA not before: Sat 29 Mar 2025 00:32:20 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:21:3b:34:2b:4d:4e:c7:e6:37:24:a5:6b:a6:1f:a1:50:f5:6f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 29 00:32:20 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:39:21:64:1a:3a:9c:19:1b:d9:dc:16:67:
7c:3c:c0:96:3c:fc:16:aa:da:a9:a1:70:9d:fb:18:
70:2b:27:e6:5c:62:fb:d8:39:4f:75:99:31:59:ae:
ec:14:3c:d3:e4:e3:d3:00:5a:21:07:20:01:12:da:
a8:b1:16:73:73:27:f8:96:2b:6b:ee:1b:87:ba:f6:
2d:ec:c4:4f:24:d2:37:84:ec:2d:51:09:2b:a6:2d:
de:ff:f0:86:9d:5e:f9:86:65:69:c1:48:af:ed:54:
df:c7:6d:57:c9:84:00:c5:f4:51:81:7d:9c:9a:ba:
0b:02:db:a4:24:68:1f:94:47:da:e0:27:58:26:a7:
55:0c:1b:7b:98:52:45:6f:5a:a6:21:e4:10:7a:14:
86:ce:b7:59:aa:0e:5d:ed:10:60:56:b5:69:8b:0f:
50:cc:38:53:ed:7d:73:d3:88:7b:0d:9f:04:61:94:
6e:bc:66:b1:79:a5:e7:48:df:ad:40:96:2e:0a:0c:
17:a1:d0:8b:65:5d:cc:91:1f:bc:3b:0e:b5:02:bf:
6d:36:bc:06:c1:3a:be:a5:e9:18:a1:ad:9e:1b:eb:
0b:89:07:0e:47:1d:7c:d5:18:04:0c:67:a8:20:3a:
32:2f:51:17:8b:58:7e:ef:57:68:b5:69:a0:30:38:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5C:B6:FC:B2:C1:A0:0F:E0:EE:C6:01:DA:01:0F:29:47:8D:7A:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbeb70f4-660c-4c1f-924a-f9aabc75772d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2e:15:59:5c:2b:07:82:2c:07:b9:c0:22:f0:46:9a:0b:ae:4f:
0a:fc:7e:d7:ec:fd:20:87:c8:d2:49:a4:11:93:5a:56:8f:6a:
6e:cd:e7:ff:32:d9:79:e5:ae:cf:9f:50:78:a0:18:52:5a:32:
17:3b:d7:ec:4d:69:07:7e:21:b1:17:0e:9a:1a:f6:8e:3a:2d:
e9:fb:c5:d5:9c:e4:33:64:a4:6e:97:73:f0:23:d4:0c:ef:8d:
67:1c:37:35:a0:00:b8:95:47:d6:14:ae:47:cb:84:01:4e:42:
40:75:33:33:b2:98:24:34:00:09:31:20:f3:eb:2a:ba:31:0f:
20:18:21:11:2c:dd:53:c8:8b:ed:35:b1:e0:eb:ac:09:12:f5:
7d:61:25:6c:56:18:ec:0c:ca:bc:2b:9f:38:40:94:d5:55:62:
c6:8c:4a:34:e4:39:8b:38:80:7d:86:f6:6d:f1:db:73:66:24:
3d:f7:f4:8b:a3:f4:94:77:7b:32:20:86:14:9b:59:ee:5d:7c:
41:4a:9c:d6:96:d7:85:97:66:ea:8d:9a:e5:8b:d2:c2:40:4f:
34:3a:36:7a:eb:3a:8a:79:e3:9b:36:d7:92:5a:75:7c:3b:1c:
e1:17:53:73:87:c6:e1:d1:5e:42:01:b3:b1:fe:79:61:be:ef:
6e:76:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:37 2025 by rpki-client