Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dabc189-1d07-461f-8b59-6d4f575d5265.roa
File: 2dabc189-1d07-461f-8b59-6d4f575d5265.roa (raw, json)
Hash identifier: irgtCMtkN6NUOoONdA3mosCA60yg7jCapOJ3Gm0UUvc=
Subject key identifier: C8:9D:C3:47:2F:70:B5:88:19:14:3A:99:AE:49:0D:AB:5D:FB:79:D9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 258325599A42F23E4C8CBF220285A06674CBF2CD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dabc189-1d07-461f-8b59-6d4f575d5265.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.251.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:83:25:59:9a:42:f2:3e:4c:8c:bf:22:02:85:a0:66:74:cb:f2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=ef99055cc66a1dd0ef5b42d45e1da3b82a30823bbb682c8a58183008d3d4e114, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:86:8c:11:58:c3:ef:92:dc:b9:e7:b2:a4:
be:95:0b:a4:4b:23:64:35:27:97:36:62:df:8c:be:
55:d5:c2:cc:d5:57:aa:4a:65:37:e1:b5:d1:09:e0:
66:6e:68:2b:ff:00:2b:e8:ff:c6:90:3d:c6:8c:3a:
0d:ed:90:f2:43:c8:fd:dc:4f:4f:7b:ca:8a:1d:52:
1f:cf:64:59:43:02:df:cb:ec:3b:17:8c:7f:85:61:
8e:97:ec:28:84:a8:0a:1a:5f:f6:78:8d:b7:de:f5:
74:b9:23:36:51:af:90:41:78:27:44:4a:e4:dd:ff:
3c:ce:ed:5e:9b:cb:a7:a4:18:83:a7:4c:88:fe:70:
df:ea:36:01:7a:52:76:71:88:fa:0c:e7:bd:ac:40:
a5:38:e4:35:bf:3f:d3:24:a7:a4:c2:74:de:51:57:
92:e9:cb:db:d7:da:19:df:7e:ce:e2:fe:3f:05:fc:
61:83:40:d4:23:19:50:51:bd:13:b6:5e:e8:c5:a6:
bb:83:8b:f8:b4:5c:7f:97:50:73:09:0d:7d:5f:3e:
e8:aa:68:df:eb:83:ae:2e:ae:c7:22:b8:67:f5:b7:
3a:64:7e:2b:08:95:e6:40:5f:18:7c:23:13:c6:b0:
b6:ba:86:4e:1d:42:dd:3b:f7:fd:05:27:17:7c:2e:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:C3:47:2F:70:B5:88:19:14:3A:99:AE:49:0D:AB:5D:FB:79:D9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dabc189-1d07-461f-8b59-6d4f575d5265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.251.224.0/21
Signature Algorithm: sha256WithRSAEncryption
35:a1:4b:7c:22:d9:b8:6e:a6:ad:97:c3:51:25:11:99:87:b0:
b8:01:fa:a5:52:ab:90:d8:47:19:01:65:60:5a:c4:0e:84:18:
0e:f2:cf:1d:8d:a9:4e:30:0f:7b:8f:94:0c:8e:b1:76:3e:ea:
80:12:92:6c:c9:27:5e:fe:00:94:e6:cd:d3:2c:b0:37:c7:87:
6f:5c:f8:f5:bf:bd:d9:3c:c6:f5:2a:63:b4:c3:c8:2a:b8:db:
bd:6d:bf:eb:b0:d9:c9:d2:21:0f:1c:d7:69:34:a8:a9:32:79:
d6:d5:76:e6:80:75:e0:58:f6:e9:47:94:85:4e:7e:3f:df:5d:
53:f2:2b:8e:14:34:0f:83:d2:23:ee:a8:67:b2:dc:27:16:b3:
eb:3a:d8:50:6b:dd:42:b5:85:da:d5:41:a8:f4:45:2e:61:d5:
94:8d:cd:c9:7e:e9:83:d0:a6:44:88:17:32:2e:5f:f1:7a:1f:
47:81:64:29:7d:8a:5d:a0:f3:45:9d:ae:61:e5:18:4d:bc:99:
1d:03:08:87:60:07:60:4b:23:02:f0:d8:a9:83:f0:11:d4:32:
eb:f5:a2:69:cb:8e:1b:33:39:d1:04:79:99:0e:8b:16:27:a5:
e8:45:2f:46:5e:16:fa:7b:a5:0c:89:ec:d5:93:76:30:79:76:
9a:b1:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:39:19 2025 by rpki-client