Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0349e5d2-c403-4b23-8c78-79aa592001ab.roa
File: 0349e5d2-c403-4b23-8c78-79aa592001ab.roa (raw, json)
Hash identifier: hiL0L+wmm994zP+FfNdqnhaL2U38wfAVyAcTbpxB5iU=
Subject key identifier: 13:E7:70:B5:DD:20:48:B0:58:EA:55:35:3B:B5:E6:57:B3:77:AC:D4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1A8DA021BBCD443B3FF1DBC5F92BC77803E8B7D0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0349e5d2-c403-4b23-8c78-79aa592001ab.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.253.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:8d:a0:21:bb:cd:44:3b:3f:f1:db:c5:f9:2b:c7:78:03:e8:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=80bf2dad5a53dddb9fbbe2d3deb7aabed8eaafaf20c721d8776432ce6f81774e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:5d:a3:59:59:be:cd:1d:55:11:59:95:e5:
dc:83:b2:0d:43:87:36:13:70:bf:57:34:0d:7e:91:
39:95:fd:1d:23:13:cb:39:09:93:de:4d:9e:1b:3f:
94:10:d3:f4:96:4b:44:71:93:10:1f:3c:76:7c:4a:
dc:96:ae:21:b7:9d:5c:68:32:43:9b:a2:dc:cf:b8:
a9:ec:9e:0c:4a:a7:86:46:ca:ae:a7:d3:f9:6d:4a:
ac:8e:d7:1c:14:6e:06:53:ea:2e:d0:87:bb:a2:50:
c1:35:83:94:c6:32:c1:9e:51:6d:81:07:dc:09:d1:
79:46:44:21:8e:0f:3a:f1:54:e5:e8:68:80:48:5e:
27:41:b0:66:23:26:77:08:43:cb:63:f8:31:67:f9:
d0:ad:06:7a:5b:ea:f6:66:fb:92:84:69:a4:6d:ee:
4c:68:01:a2:22:dc:bc:19:e0:c9:f8:08:3f:73:5a:
6d:6a:fc:b5:36:7f:a1:49:e4:b3:f5:a8:df:76:d3:
db:a8:c6:0e:b4:3d:c2:0b:35:12:5a:56:d4:16:78:
93:f0:86:6c:a9:fd:01:4b:62:ee:a4:0f:e4:4b:d4:
46:65:45:1b:39:6f:8d:5b:fe:68:83:e4:69:73:77:
b3:b6:29:48:94:30:bc:e7:68:cc:43:77:3b:31:53:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E7:70:B5:DD:20:48:B0:58:EA:55:35:3B:B5:E6:57:B3:77:AC:D4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0349e5d2-c403-4b23-8c78-79aa592001ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.253.248.0/21
Signature Algorithm: sha256WithRSAEncryption
15:88:b9:c3:7b:80:f2:b9:a2:11:ad:fa:9b:30:fc:07:d9:62:
8b:f1:1e:62:9d:6e:19:a7:4f:69:ef:5f:71:fe:5b:6f:70:66:
f3:1a:2e:84:6c:1b:ba:31:a1:73:cd:a2:3b:11:8c:dc:59:2d:
29:cf:76:ab:26:53:20:32:ce:2f:1c:9a:23:bb:96:5c:47:4c:
c5:f6:27:da:65:37:67:dc:d3:ff:9a:9a:3a:4a:5b:26:bc:1d:
67:d8:a4:40:e9:f4:3e:c3:ca:45:2f:d5:db:51:f3:a2:3e:fb:
ec:b0:fa:4f:63:a5:4a:53:ee:35:01:6b:e9:cc:a1:36:e5:f1:
9f:2a:90:97:97:ab:8b:69:9d:1a:27:49:10:49:49:50:8b:50:
23:55:61:9b:a9:ca:65:6c:b1:a7:db:81:2d:04:62:28:e6:b1:
77:1f:5f:ef:9d:2d:8d:54:f0:ee:65:9e:f2:8a:48:4b:52:3e:
f0:49:77:a6:e2:5d:0e:fc:9f:fc:47:92:95:6f:f3:c4:cc:c7:
c3:b6:6b:14:90:f4:10:32:44:d5:e6:cb:47:ee:35:d3:33:d7:
ce:a7:8e:e6:c5:ea:f0:68:ae:3d:58:97:68:88:5c:12:5d:a7:
df:a5:85:ce:b4:33:38:05:02:cc:4c:66:1f:ef:3a:bd:d2:24:
dd:1b:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:55 2025 by rpki-client