Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2565aded-685d-4d59-979a-c31b2e094fb7.roa
File: 2565aded-685d-4d59-979a-c31b2e094fb7.roa (raw, json)
Hash identifier: tlGQo2+aVECrGAUok7GtfTE8EJTJjEUo9K4lJXGq8xg=
Subject key identifier: 9F:48:57:BE:06:FA:8D:F9:12:AC:FD:63:26:DC:81:15:3B:5C:8C:F4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6F417C402D540899F9B1B770846929087525D519
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2565aded-685d-4d59-979a-c31b2e094fb7.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.168.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:41:7c:40:2d:54:08:99:f9:b1:b7:70:84:69:29:08:75:25:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=341d1d9c884a18bbaf58a6b1d41e18b532e3f4e509962574dbac718043c8bff2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:c8:84:1d:5f:34:66:e0:96:98:c1:87:a2:
02:88:8c:02:f4:f0:e5:ec:a4:94:66:b5:18:12:eb:
25:07:da:13:a6:37:94:36:13:96:99:0d:61:f7:32:
cf:ec:08:ce:b2:60:31:8a:4b:d4:86:63:ed:48:44:
0c:80:0b:7d:62:75:26:13:03:5b:56:02:2d:c3:39:
11:bf:cf:6c:67:f1:d0:41:32:2d:bf:cc:4d:b9:1d:
57:02:c9:25:70:03:3f:bd:1a:6b:41:36:5e:2c:e1:
99:fb:08:ad:fb:8b:b9:06:0b:e8:d8:68:b3:fd:4f:
ed:76:a8:ed:8f:39:5d:8b:f7:bd:ab:2e:b3:c0:e6:
7a:5b:e8:a7:a1:b0:e5:07:a7:09:43:c2:58:5b:3e:
64:57:6f:60:fb:b8:7f:46:88:38:0b:05:b6:f8:90:
f0:30:85:71:0a:d9:93:64:e1:f8:5e:a7:ce:a9:c9:
29:4a:16:fe:bf:e1:9b:15:5d:da:99:ee:48:6c:d2:
3a:51:8e:3d:49:8d:97:df:01:ad:5c:2b:a4:df:2c:
be:4f:ef:1e:41:71:43:04:cf:d0:72:71:47:39:63:
8c:72:91:da:24:ed:54:bf:31:83:7e:7d:df:7e:94:
bb:02:fe:e8:47:de:64:ac:a5:31:67:96:12:d0:e3:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:57:BE:06:FA:8D:F9:12:AC:FD:63:26:DC:81:15:3B:5C:8C:F4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2565aded-685d-4d59-979a-c31b2e094fb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.168.232.0/21
Signature Algorithm: sha256WithRSAEncryption
74:db:7e:92:7f:76:db:fa:ab:1d:17:88:8f:21:75:66:b8:cf:
5f:2a:d6:3f:3b:95:b5:83:ed:98:76:a9:ad:fa:c6:c0:db:9c:
0b:67:01:7d:42:49:f8:c0:24:7d:51:fd:c4:b2:1f:ee:1a:d3:
5a:ef:1f:bc:0e:15:84:ea:2e:4e:e9:00:e7:62:47:a0:5e:e1:
ae:e1:23:0f:e6:77:63:6b:b2:70:b5:94:33:11:8a:83:e9:96:
84:57:09:7c:53:dd:f8:7c:31:7a:8e:47:9d:d0:49:27:ce:3f:
f1:28:a1:82:60:3d:16:a1:71:83:c7:40:fc:a9:0b:07:4a:60:
73:74:03:28:66:cc:f3:9e:e2:7b:e2:9a:0f:87:a6:26:90:89:
b6:2a:b7:11:6a:b2:f6:97:70:36:63:1a:46:d1:f8:05:c2:f5:
ab:7f:68:2c:e4:77:9a:c0:8f:00:9c:af:cc:e8:bb:77:8d:b1:
8f:af:ee:ab:5d:0a:c2:5f:29:96:3b:7c:f6:0a:3e:95:1e:15:
cd:ff:20:13:0a:77:b7:e7:56:83:fa:e8:ff:3e:21:5f:ad:8d:
92:f7:b4:2b:93:f0:10:c8:9a:de:a5:90:4e:74:5b:93:53:19:
f8:9a:fc:80:5f:31:af:71:f2:06:29:97:c8:87:53:1b:a8:ab:
10:ea:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:19 2025 by rpki-client