Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31899d37-fca3-4c32-8af4-5fbff8ede1fd.roa
File: 31899d37-fca3-4c32-8af4-5fbff8ede1fd.roa (raw, json)
Hash identifier: w5QWMblWU5oI46mwYgVYD6aEQLrI+NgQms5aO4TpzR4=
Subject key identifier: A3:5E:F8:27:74:71:9A:BB:D4:3E:76:F2:DA:D2:46:10:10:FC:6A:CB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0E4CAEF4594B927DDB6182B6ADE41659AAA32B27
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31899d37-fca3-4c32-8af4-5fbff8ede1fd.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.228.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4c:ae:f4:59:4b:92:7d:db:61:82:b6:ad:e4:16:59:aa:a3:2b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=13298b45432abe224dba052d453e6ecbd73f8a021a954c7f0b1e39077c3cd0b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:ca:00:57:06:be:23:3c:4b:11:12:47:39:
20:83:6d:ce:4d:46:ad:07:94:33:cd:db:01:cb:fd:
11:40:a5:82:44:1b:1a:71:7c:83:8f:c6:10:c9:3b:
fa:b0:3e:1f:7c:c5:47:54:26:dd:85:55:8f:ff:52:
9f:9b:94:0e:5a:4d:cd:6d:20:b5:85:28:44:a5:33:
44:61:15:8f:69:0d:f8:94:7c:15:37:b8:02:a2:b1:
91:3b:8d:f5:0d:3e:ff:47:e4:f5:62:64:cb:a2:80:
a0:fa:f5:c3:50:4c:46:08:d1:b5:c5:3f:37:4d:59:
5e:45:39:da:5f:12:f3:cd:4a:f7:64:a5:ed:80:74:
a2:fc:c9:08:3b:c7:5b:ec:6a:54:4d:d5:51:d8:60:
b4:57:17:89:29:76:7d:93:3d:f7:84:23:af:5a:6f:
bf:d3:35:e3:29:83:13:a8:13:8e:7b:1f:b6:d4:c7:
91:e6:b1:07:51:44:9f:7b:39:71:02:71:28:b2:63:
7e:47:1a:8b:f2:63:ca:e2:b6:d1:c6:ca:8c:d2:80:
d6:29:4c:5b:8a:ee:5e:97:1c:c4:70:a6:15:ca:e1:
62:f3:b9:d7:91:0b:9c:49:91:85:c5:8b:c8:39:e5:
69:07:4d:52:36:34:1a:c8:f0:66:7d:67:63:d9:a5:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:F8:27:74:71:9A:BB:D4:3E:76:F2:DA:D2:46:10:10:FC:6A:CB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31899d37-fca3-4c32-8af4-5fbff8ede1fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.228.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:30:ae:94:57:9f:a9:4c:fc:55:6b:9d:72:f4:0c:03:4e:85:
a9:81:00:3b:46:0d:8e:92:30:3f:28:24:1d:81:18:70:31:3d:
c7:53:da:28:e5:4f:b9:e7:81:28:08:00:89:a7:f7:6b:05:45:
48:68:21:0f:8a:6b:23:02:61:7a:f3:79:33:7f:71:cb:34:6a:
6e:b5:c6:1e:90:9e:fd:78:8d:cc:c3:95:a8:dd:82:1f:66:bf:
21:7f:44:06:c0:28:bf:6e:4d:8f:3f:54:ca:65:07:f4:8c:b3:
00:6a:b3:df:64:c8:05:71:8a:c8:39:32:40:19:50:2b:98:5a:
e3:b3:38:7f:60:58:f4:3f:fb:f6:33:bc:d7:1f:87:4d:9a:ef:
0a:c4:9e:7e:2c:a1:72:a3:d5:cd:70:78:84:78:63:e1:d7:10:
e2:90:e0:18:98:84:61:a9:c7:42:f9:41:80:43:91:8c:54:4f:
9c:c2:f2:7b:49:d9:1e:95:ea:5f:bd:f1:26:d3:90:13:62:bf:
8c:d9:3d:bc:cf:c4:b7:d3:5f:55:1c:75:4d:cd:07:32:2b:7f:
0b:27:10:f6:de:b8:3b:80:c7:fc:e3:a9:98:67:69:22:e8:f0:
50:5d:93:9b:f6:94:b0:6f:bb:ad:92:e2:b1:4e:91:84:e8:48:
56:d0:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:23 2025 by rpki-client