Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26fa13f9-08c0-406a-ad7b-e928a5eff8cf.roa
File: 26fa13f9-08c0-406a-ad7b-e928a5eff8cf.roa (raw, json)
Hash identifier: e1Anyo6TrzYUuL2XVBcP9BVyPEyiTAzjO9EbuVJjY4k=
Subject key identifier: 41:64:4B:72:4E:A6:74:19:32:72:84:61:06:78:96:4D:E4:45:9A:26
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2CE3F2950C2C8ADDDE2CC6C2FAAFF2F56BFABA78
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26fa13f9-08c0-406a-ad7b-e928a5eff8cf.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e3:f2:95:0c:2c:8a:dd:de:2c:c6:c2:fa:af:f2:f5:6b:fa:ba:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=b578a0e1f05647145affc3e6538aa7355a63fb74fd96cb42b3b499d71dbdf38e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:36:1d:29:20:b0:22:52:c2:0c:17:aa:dc:bc:
82:3b:cd:ad:d3:35:75:ab:4b:e0:53:d1:3e:f5:49:
08:bd:e7:b3:6b:1e:f0:80:67:55:c0:c4:66:ba:6e:
55:d2:94:df:b6:78:47:21:0b:80:92:39:53:a9:18:
24:10:72:0b:e5:2e:10:12:cb:40:b2:4e:9d:99:2b:
e9:ef:58:25:a1:3f:60:46:c6:e1:fb:0f:77:d7:4b:
4e:a3:8f:5d:dd:4e:9b:cc:21:69:8d:82:9b:fc:21:
8d:88:be:32:68:73:e3:ba:9a:89:34:f5:59:f4:95:
eb:08:b9:8e:2c:a0:06:2b:48:22:c7:54:dc:68:34:
72:57:a6:bd:a5:41:22:4f:d0:30:10:95:30:62:53:
48:e6:98:d5:4a:28:fd:e2:7b:f9:5c:8a:3e:60:17:
f3:5e:98:a4:2a:04:ae:e9:b1:42:97:fa:59:81:be:
06:b0:c6:49:6f:4c:40:65:be:68:64:ef:e6:45:a1:
d3:e5:70:f9:58:dd:45:58:4e:30:33:e4:62:25:10:
8a:9c:6f:c4:82:15:6e:69:bf:1a:66:a2:7d:5f:ce:
0e:83:9e:49:f1:75:42:11:c1:c9:73:e2:34:c4:c1:
d6:10:23:9d:70:fd:c7:4e:90:3d:56:be:db:e8:8b:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:64:4B:72:4E:A6:74:19:32:72:84:61:06:78:96:4D:E4:45:9A:26
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26fa13f9-08c0-406a-ad7b-e928a5eff8cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.80.0/23
Signature Algorithm: sha256WithRSAEncryption
86:e9:1c:b6:a4:f0:fa:76:f3:d3:44:7b:43:39:d6:c8:b5:53:
bf:7d:7f:ff:7f:55:91:f0:3f:29:b3:07:7f:c5:a2:41:f9:c4:
3b:d5:53:b3:bf:a6:8f:54:3d:ed:ff:e9:55:c7:af:f8:fc:35:
ab:8c:9e:6b:0c:b6:99:16:85:fb:14:9b:3d:d7:cb:70:75:74:
b5:4e:f0:42:b5:52:99:2e:fb:28:4f:74:d1:36:ad:43:4a:21:
77:1c:28:ac:e2:85:ac:17:d0:da:80:47:05:0c:8f:52:2e:0f:
30:86:e4:73:ca:ca:19:8f:a3:f1:40:57:7c:45:3f:7c:5e:f5:
fd:43:3c:86:a3:f5:c2:d0:7a:d2:74:37:6b:bb:91:d7:50:62:
78:ec:24:be:13:d5:30:05:0c:4f:2f:c8:11:48:19:c7:c1:10:
6c:ee:51:e7:e6:3a:03:5e:0a:7b:77:31:2d:e1:29:5d:66:09:
2d:69:52:7c:3d:b6:51:0f:8a:1d:6c:88:18:c5:5a:38:9c:bc:
b1:d4:b6:57:25:c4:da:6e:30:e7:67:96:b1:37:5a:4c:67:aa:
7c:38:35:8b:ea:23:9c:db:47:2e:23:d9:6a:59:be:ce:2f:0c:
6f:b0:4d:2f:39:57:48:e6:54:d6:d1:b7:70:9b:5f:24:9e:85:
cf:71:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:28 2025 by rpki-client