Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d5be07-9a44-43ca-8d52-c3ceb09f6c32.roa
File: 30d5be07-9a44-43ca-8d52-c3ceb09f6c32.roa (raw, json)
Hash identifier: yCgGS8CJplykoze4VInB4p3oVXfb0rBmv92eDhWlij0=
Subject key identifier: 2C:B4:6D:2A:CF:CA:A2:73:AD:C7:7A:85:0E:F6:7A:F6:8D:5D:20:64
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 247AF9A16292F2A03219865D503D4B936E0824CB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d5be07-9a44-43ca-8d52-c3ceb09f6c32.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.252.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:7a:f9:a1:62:92:f2:a0:32:19:86:5d:50:3d:4b:93:6e:08:24:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=4cd15803ccbdd97fed8bbf372d4caf3d8477ee66a45c43564d019fef939de262, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:8c:89:a4:33:a4:a6:89:c0:e3:42:7d:9e:
8d:eb:75:30:cf:1f:af:19:12:99:b7:ce:50:bd:13:
0b:bb:48:d3:19:fb:70:00:1b:56:db:cb:aa:99:69:
c4:d9:d4:17:cb:4c:ae:77:f9:4b:70:e8:dc:1c:af:
bf:75:8e:33:a0:f6:2d:fd:93:e6:6f:86:c2:11:51:
25:19:96:e4:c4:7e:78:43:3a:c8:14:83:0d:a8:c9:
51:36:22:09:a0:4c:e5:bf:f2:e2:e3:41:70:fe:af:
2c:38:ae:73:a5:3c:4e:07:d7:e7:13:bd:15:eb:2a:
f2:69:a5:4a:f0:54:f8:fc:58:26:d7:1f:a0:9a:c9:
0b:17:6c:5f:b4:30:fc:ba:1c:7b:58:0e:69:99:bf:
8a:90:a6:7a:31:8b:ae:dd:c9:e3:06:47:2c:3d:fc:
09:42:5e:9d:ed:7a:f2:85:28:a9:67:93:0c:61:1e:
b1:e0:61:12:21:0d:f8:2c:4c:11:d8:0f:a0:09:ce:
a2:12:9c:39:e5:58:43:f9:d9:43:d5:c2:27:98:97:
13:6f:dd:86:b9:6c:aa:2c:5d:77:eb:c8:d5:a2:67:
9d:64:7f:8a:67:88:bf:31:a7:ca:57:c2:30:a8:2f:
07:5e:cf:2c:99:2c:68:78:27:57:93:86:2f:8c:96:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:6D:2A:CF:CA:A2:73:AD:C7:7A:85:0E:F6:7A:F6:8D:5D:20:64
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d5be07-9a44-43ca-8d52-c3ceb09f6c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.252.78.0/24
Signature Algorithm: sha256WithRSAEncryption
27:37:3f:bf:c7:b8:99:bd:d1:9b:59:85:74:4a:ad:c2:cb:3d:
4e:03:80:2d:5f:5f:08:24:cd:c4:69:62:62:40:33:bd:c3:5c:
73:62:8b:1d:b6:c6:a6:3e:56:79:0d:43:dd:5f:26:0d:cc:8f:
ea:7d:d2:09:70:10:f2:7a:dd:c5:76:eb:28:b0:2c:69:af:aa:
df:2d:41:2c:d4:eb:81:b8:04:5c:18:23:51:61:7b:40:15:6b:
91:10:4d:8a:5d:c4:41:4c:5e:0f:34:5a:be:ff:c5:51:a5:b7:
d6:e1:58:ec:c0:0c:ec:5f:ed:cd:d0:1a:be:89:d8:da:82:e4:
ef:64:99:ee:c7:c7:b9:3a:11:58:33:2a:5e:98:6a:cc:29:b4:
a0:ac:25:e2:64:ef:28:fb:93:a9:9d:38:c1:de:b4:c0:3f:0c:
ce:17:bd:1d:c4:38:ab:13:3d:58:68:e1:82:36:cd:ef:f8:cf:
c9:f6:3c:34:79:7e:d2:0a:ff:44:61:87:a5:85:78:6e:50:9e:
b3:45:53:34:f1:72:9a:ac:d7:c1:db:ef:ec:0a:78:c0:bc:a4:
33:a0:83:0d:7b:34:1a:16:f6:e7:9a:32:c6:93:b7:8d:0e:d3:
a3:ae:ce:06:9d:25:84:9b:2a:96:0a:b9:01:1b:84:34:28:98:
22:3d:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:14 2025 by rpki-client