Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14460de1-1aa0-46cd-a2e9-af63bde4513c.roa
File: 14460de1-1aa0-46cd-a2e9-af63bde4513c.roa (raw, json)
Hash identifier: x+r8cnITTNafcZlneOTiPkUMB6jwB7J43P8TeI60ZPA=
Subject key identifier: 59:52:6F:8E:0F:40:15:EE:99:4F:16:A6:02:CB:0A:8A:46:9A:C4:68
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 504DD5D615AB7F0D3B98967A8B893CDCD4BC2E32
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14460de1-1aa0-46cd-a2e9-af63bde4513c.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.246.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4d:d5:d6:15:ab:7f:0d:3b:98:96:7a:8b:89:3c:dc:d4:bc:2e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=9fbd6a020b8d3f1597e046fc88f3d91e55e741f6ea1f543a0c309b4d1b446b46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:27:df:b0:c3:e7:15:76:68:71:a2:be:0c:
39:c0:2d:f9:73:79:e8:42:fa:41:93:4a:7c:9a:df:
f1:b5:cb:14:31:30:ac:b9:40:9c:0a:f3:b2:67:67:
41:5c:be:a8:3e:a9:62:ca:98:cb:a1:8c:86:9c:47:
16:03:87:5d:48:33:9f:41:ad:d9:d5:8d:00:a5:34:
ad:e6:5d:b4:4b:db:30:28:4c:ac:cc:e7:dc:1c:17:
21:09:06:9a:bc:d8:dc:83:2a:4e:25:20:9b:62:7c:
f7:6b:b6:b6:4e:fb:32:55:d9:01:a3:cc:08:bb:94:
c7:2b:d3:bc:0c:80:6e:a1:99:23:de:fc:d3:fc:1f:
2a:a0:19:e1:eb:ea:0b:b4:ab:3d:c7:84:1e:0a:a2:
92:bd:40:c9:38:52:82:ce:b4:43:30:5b:b5:1e:64:
a6:08:15:96:4a:e5:c8:b1:82:93:9f:33:e6:3f:9c:
93:2b:02:9b:27:64:9f:1c:d2:11:ae:48:56:90:a1:
f7:2a:c2:3e:e6:ab:a4:7e:f1:c8:f8:9f:18:ea:13:
fc:80:77:90:05:2e:8d:97:70:f8:51:c7:b3:87:77:
55:6d:90:6a:1b:d7:91:70:55:ad:70:82:c2:d4:9a:
9b:c9:8e:46:70:a5:2b:94:18:4a:42:38:77:c4:40:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:52:6F:8E:0F:40:15:EE:99:4F:16:A6:02:CB:0A:8A:46:9A:C4:68
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14460de1-1aa0-46cd-a2e9-af63bde4513c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.246.0.0/18
Signature Algorithm: sha256WithRSAEncryption
75:0c:f2:33:9f:ca:ab:14:23:6b:9c:22:28:63:ab:61:83:c2:
8e:73:52:d3:fe:7f:26:21:fa:14:0b:6b:87:2b:2e:c8:03:29:
c0:69:72:8c:38:d6:56:95:b1:f8:c6:bf:0f:f6:00:79:9e:36:
83:3a:f6:8c:bc:13:e0:81:cc:5f:cd:bd:db:70:3c:36:f5:b9:
ca:1a:ab:eb:f9:66:07:4c:c6:3f:6d:e7:c5:e9:92:0c:58:e6:
fe:af:ee:ee:4c:a3:8c:89:dc:53:9a:90:97:00:5c:2b:ec:71:
97:60:46:f4:5f:97:36:aa:87:3a:cd:4f:d0:37:4d:6b:9d:4f:
1b:b5:f9:bc:25:7e:18:a5:32:43:20:bb:eb:dd:1d:7f:a6:ce:
64:43:49:c4:8c:6f:16:75:d5:59:ea:d5:e3:f4:00:57:72:0a:
6e:af:4a:56:81:53:cc:c7:a2:7c:92:2e:e3:c5:68:13:f4:36:
e2:8d:6e:9d:aa:eb:b2:7b:e6:a8:cd:6c:8d:4b:49:81:5f:67:
cd:2e:ed:8e:e1:f4:52:ca:b1:0e:58:7b:e0:a1:24:e8:f2:73:
07:04:c2:62:77:e6:fd:20:d8:d6:46:b0:af:ff:5e:11:c5:f6:
37:cb:5f:cc:26:0a:9b:40:9e:65:21:48:a4:1d:99:ee:2b:9d:
89:a2:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:22 2025 by rpki-client