Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f7e4583-7a40-45d5-8828-3310f3e587e0.roa
File: 2f7e4583-7a40-45d5-8828-3310f3e587e0.roa (raw, json)
Hash identifier: iK6crMuUnz7X2/CTLvuumMg+Xe/atN6qfZJGP6rDKNE=
Subject key identifier: 1F:53:E2:27:20:F0:C6:9F:F3:63:6F:AD:C1:7E:C4:27:E7:37:B1:88
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 64095FB56B4685916EC9CF74E5CA9D13E73E9B46
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f7e4583-7a40-45d5-8828-3310f3e587e0.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.93.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:09:5f:b5:6b:46:85:91:6e:c9:cf:74:e5:ca:9d:13:e7:3e:9b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=56428c5be81dfadb6dadd60051e08f4352dfa3693de296edcc953db125612a1c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:64:b7:32:2e:77:23:6d:9d:ff:06:11:5a:
af:3b:8a:00:bb:cf:0e:65:99:a3:65:e6:b9:ad:89:
cd:25:a6:02:da:a9:f5:d7:2d:a0:4e:83:04:31:f2:
e7:95:bf:f5:22:1c:60:cd:78:1b:d0:62:24:23:f8:
a2:83:03:43:75:e4:51:09:c9:67:c3:42:f6:46:c0:
1d:d0:32:4d:8e:d3:00:5b:0f:b3:05:ae:57:13:47:
a1:bf:34:60:5f:c0:0e:71:0f:5f:5b:32:dd:8c:62:
72:5c:ca:1e:ee:1f:98:ab:05:01:52:4e:e2:85:ff:
22:4e:85:ee:22:ee:e2:fa:8d:27:8a:9e:1f:83:06:
0e:ab:f3:bc:0d:25:c1:23:a2:d3:f4:9b:a5:4c:cb:
2a:7e:4b:ce:53:71:7d:6c:6a:66:d0:aa:3d:ad:7d:
df:84:ff:56:8d:fb:85:74:35:30:44:e4:5b:cb:7b:
e6:03:12:c5:19:e3:03:2f:9d:64:dc:dd:44:29:9f:
f0:2b:fa:c6:11:b5:bb:e8:5f:cf:d5:02:8e:b2:59:
33:be:27:6f:81:fa:39:b2:3a:c7:54:75:75:a5:eb:
55:bb:cd:49:3d:54:d8:0b:9a:58:cc:f2:6c:ed:e3:
89:ec:63:02:0b:ce:3f:c0:6c:bf:1d:1b:a6:c6:7c:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:53:E2:27:20:F0:C6:9F:F3:63:6F:AD:C1:7E:C4:27:E7:37:B1:88
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f7e4583-7a40-45d5-8828-3310f3e587e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a6:80:9f:cc:b6:84:89:7f:a4:5c:43:10:31:4e:7d:83:89:
85:eb:e2:51:49:78:9b:ce:0b:ac:1c:95:a1:dd:27:7e:31:15:
b9:43:75:00:e8:e7:ed:e6:b0:06:fb:e1:a8:08:15:de:82:9c:
9b:b9:ac:ab:72:d3:e5:ba:bf:e0:b7:06:16:a2:d8:98:4b:98:
ee:81:c5:d0:0e:77:d1:b1:96:e4:47:6e:14:53:77:44:07:77:
b1:50:b8:ea:cb:46:c6:75:8e:6a:ee:a6:5b:bf:9c:78:ae:78:
49:be:ee:2d:2e:45:68:33:38:70:f3:fe:bb:20:8b:f5:5a:81:
ba:db:66:7a:03:68:1b:63:71:12:f6:ca:13:d2:05:bd:1b:b3:
03:2a:ff:9f:45:a7:66:27:45:ae:cb:78:13:c7:7d:da:99:4c:
66:e6:4c:b7:10:05:e3:eb:69:d1:86:c8:e1:6c:79:b4:ae:7b:
f4:97:6b:26:c6:f9:7e:e5:32:54:6f:59:a5:5d:6d:5e:89:ac:
a3:46:b7:e8:63:db:0f:b9:7b:ff:a2:1b:8f:89:66:e9:2f:ad:
eb:0e:e0:37:28:be:fd:43:99:b4:98:7b:f8:f6:ac:66:90:c7:
8a:47:31:05:1a:df:ba:0f:4f:cd:18:86:1a:85:68:c8:45:89:
e9:a5:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:06 2025 by rpki-client