Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/160ddc52-bd96-4fd3-8eea-315abaf2e5be.roa
File: 160ddc52-bd96-4fd3-8eea-315abaf2e5be.roa (raw, json)
Hash identifier: PpokDreIb1f1QXHmSuXiFw1ewpMrzsY6/XTCa7rF+mQ=
Subject key identifier: 55:FD:29:7E:AB:13:77:E6:11:68:FD:A2:18:93:59:15:46:17:21:57
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2963CF6B8703C447D18EF9C2FF3DB46642868654
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/160ddc52-bd96-4fd3-8eea-315abaf2e5be.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.93.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:63:cf:6b:87:03:c4:47:d1:8e:f9:c2:ff:3d:b4:66:42:86:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=70198b098631234bd0f6abf9d90d24affb480ca790c33719996db3e28141ce7a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:0d:a0:2a:42:28:a3:d9:ef:6f:53:a8:c9:
e6:6d:f1:14:63:0f:a5:51:9f:02:4b:fd:7c:f9:2f:
94:12:2d:ea:ee:bf:85:f3:fb:bf:9f:c5:88:72:6b:
6c:34:e4:e6:4c:21:29:f0:f8:ed:73:30:fe:84:11:
ae:f5:40:48:cf:c3:db:af:40:32:ba:8e:1c:a9:50:
29:24:c7:d6:bf:09:1f:bc:9a:cb:ff:17:f1:c2:71:
03:d5:35:00:81:be:3d:09:8b:96:a6:8c:b6:d7:d5:
c9:2c:13:cc:80:73:1e:1b:74:27:e4:29:fb:87:c6:
cd:af:df:6f:2c:82:50:21:dc:03:ab:a8:27:93:fa:
c3:0a:52:30:61:f6:e9:a9:69:26:ad:27:72:58:38:
f9:91:62:e9:1d:81:13:56:a8:12:47:0a:56:d9:06:
36:aa:f9:be:26:9f:da:bc:e1:1d:ae:9a:ac:52:c0:
b0:26:a1:94:a6:ae:68:ad:24:52:d1:64:62:5b:20:
d5:6d:de:6f:e1:c1:9e:0f:b9:5a:46:9d:91:d3:d9:
fc:94:e9:95:5e:6a:0b:7a:e6:47:79:d0:50:7e:8c:
c4:78:cb:f4:69:c7:c0:af:fb:82:17:7b:5c:38:d7:
52:2d:00:19:4b:15:26:e0:06:f8:6c:45:85:db:06:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:29:7E:AB:13:77:E6:11:68:FD:A2:18:93:59:15:46:17:21:57
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/160ddc52-bd96-4fd3-8eea-315abaf2e5be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.50.0/24
Signature Algorithm: sha256WithRSAEncryption
14:95:bc:51:b5:85:32:00:e8:5b:72:9d:ea:94:43:ee:de:69:
b0:c1:fd:a1:a6:ac:71:d1:8c:fb:75:2c:84:09:49:51:be:0c:
e9:33:48:0f:72:1a:be:14:e6:37:76:56:6e:8f:6a:9e:4d:b4:
2b:55:9d:c2:b9:aa:6d:11:95:87:2b:2e:56:fb:65:52:53:ec:
bf:a9:5d:a2:1f:4e:23:12:97:fa:6f:40:be:89:59:8c:15:40:
b1:4f:d4:0f:2a:54:5f:09:b4:29:82:a6:d7:43:7b:10:87:2a:
f3:47:ab:f4:8d:94:5e:10:3d:91:5b:67:84:21:49:36:0b:b9:
ac:da:0b:c0:32:78:72:f5:74:b6:a7:ca:f6:bf:78:a0:53:0f:
dc:dc:c5:eb:30:f2:27:df:52:5c:fd:2d:08:d0:0e:42:a7:3e:
76:2e:de:74:0d:7b:1c:1c:a3:df:f1:41:a0:d8:7f:70:75:dc:
98:c9:f7:62:01:96:b2:8b:64:be:f1:d7:9d:46:cb:a6:90:77:
bd:41:c0:4f:c3:c7:bc:c6:f3:09:d6:12:75:66:f2:1b:3c:59:
8f:6d:99:7f:52:f5:75:9f:3a:0f:8d:75:59:20:21:dd:58:18:
ea:80:07:21:98:95:0c:94:f0:88:9d:ae:27:f4:3b:f6:97:4d:
fe:18:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:01 2025 by rpki-client