Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/376dce5f-8413-40d2-ab38-56bf0b53a8a1.roa
File: 376dce5f-8413-40d2-ab38-56bf0b53a8a1.roa (raw, json)
Hash identifier: XxE2wL/kMioiVNt2+u8RFVqjuOfg9MdAjfz9zwUyYa0=
Subject key identifier: 50:50:9A:8F:7E:B0:5E:47:14:38:D6:93:5C:13:C6:AE:0B:02:7C:8E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 140F4BAE5C388E3C98C323EC5779ADF1C4FBF210
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/376dce5f-8413-40d2-ab38-56bf0b53a8a1.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.247.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0f:4b:ae:5c:38:8e:3c:98:c3:23:ec:57:79:ad:f1:c4:fb:f2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=df5e118089c894bebba79cce53a8b452683e4d11eb9a461ef2ffdca4e1fcdf78, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e0:b5:ba:f3:59:41:f1:7c:6e:f7:fc:f3:56:
63:95:3c:66:a7:fa:d0:6a:84:63:9e:14:0e:25:52:
f7:1e:95:02:c7:0c:05:3d:23:c8:08:38:48:30:0b:
d6:e3:40:d4:75:4a:d8:f6:4c:89:f9:8c:89:e1:a1:
c3:53:19:83:9b:30:89:54:7b:94:72:e7:d8:fa:1f:
44:59:68:46:7d:bc:83:ed:4a:e7:d7:88:13:21:d4:
52:c6:38:8b:eb:6b:87:6d:c8:cd:11:a2:97:84:ac:
29:4e:fb:76:b9:ad:c1:e3:04:3d:7a:21:86:33:a8:
6b:f5:9f:4a:b6:83:fd:88:e8:56:17:8e:3f:bc:1f:
fe:4b:5f:bd:ec:ec:0c:71:39:eb:28:82:c5:11:82:
1c:af:a2:7c:5b:15:09:eb:46:e8:1f:00:bc:79:4c:
da:f8:bb:f8:41:29:ec:64:20:d5:9d:e2:bb:46:9f:
22:ae:8a:c2:23:d8:58:b1:73:47:4b:9c:aa:bd:d5:
71:ba:05:7f:98:07:d8:d2:35:e2:8a:65:bf:eb:1c:
f2:2e:f4:9b:e0:ed:25:cd:8c:09:11:58:06:83:25:
f7:b7:e5:24:49:62:b1:c7:9e:5c:9a:19:3b:12:35:
2a:f4:3a:c5:c5:b8:3e:05:85:41:4b:e8:29:49:ee:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:9A:8F:7E:B0:5E:47:14:38:D6:93:5C:13:C6:AE:0B:02:7C:8E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/376dce5f-8413-40d2-ab38-56bf0b53a8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.247.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a7:34:2e:f0:f6:75:f2:5f:5d:ca:78:19:c1:66:c0:d6:92:ad:
ea:2a:8a:71:54:78:2c:bf:28:c4:b6:a7:fb:67:11:3c:73:ff:
87:05:9e:b8:3a:b2:56:72:ae:74:df:61:2c:67:d6:06:84:6f:
cd:68:4c:86:84:ac:65:33:8f:d8:0a:45:fd:2b:c0:6e:f6:4b:
88:02:ed:21:9b:c0:6f:45:a7:5d:55:45:2f:d5:4e:4c:5c:85:
82:b9:c5:fe:01:c0:44:2a:ad:fb:07:76:9c:31:08:a7:58:50:
33:64:eb:65:1f:99:88:ed:56:5c:be:58:70:80:5c:f8:65:0e:
1c:73:21:3f:6b:54:49:2d:34:63:aa:2e:f1:91:08:37:a6:45:
91:2d:cd:e7:eb:62:56:7a:ef:47:fe:76:c8:1c:03:3f:84:0b:
9d:2f:8a:27:48:97:36:39:c9:14:b6:3e:69:06:7c:4e:4d:4a:
33:3d:85:51:98:63:2e:45:f3:38:d1:8b:3c:f4:1c:ee:44:94:
7f:7c:8e:c7:71:a9:ab:b1:d9:79:42:ba:cb:91:8c:9a:33:e0:
8e:c4:58:c1:b4:18:99:11:0e:28:3b:ef:82:cd:30:b8:77:f0:
55:5a:0c:33:44:cd:be:b3:aa:fd:2e:94:1b:f3:30:33:88:da:
14:c9:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:01 2025 by rpki-client