Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44f2f554-f1f6-4f91-a1d9-bd24ad4f3da9.roa
File: 44f2f554-f1f6-4f91-a1d9-bd24ad4f3da9.roa (raw, json)
Hash identifier: p58K+ZC1nGnCJf8ECjbntB3lyn4UFZHTEoXndlPDTEg=
Subject key identifier: FD:79:DD:13:77:2C:12:99:0C:37:97:44:15:78:A6:32:91:03:28:BD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4DE71BBEDEA7DCCAB085D2B481BF5DB708896DE2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44f2f554-f1f6-4f91-a1d9-bd24ad4f3da9.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.56.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e7:1b:be:de:a7:dc:ca:b0:85:d2:b4:81:bf:5d:b7:08:89:6d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=7e2855c4db152c6f2d25f09fc2e8b0d6647382dbf1996fbbe53dc5023c8b1ba6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:6e:64:0f:b3:67:d4:d5:3b:54:3c:a4:0a:
37:9b:bd:30:08:7a:a1:52:cd:d0:e7:fb:6e:8e:78:
ab:de:31:ce:bb:90:25:95:38:d4:a6:fa:5a:3e:d1:
73:2d:dd:d8:f5:cf:6c:c7:42:22:d9:e0:32:73:93:
dd:4c:72:11:ca:2e:33:c6:41:72:f6:6f:c5:82:19:
da:0a:24:25:1c:9c:13:b4:db:f5:8e:05:d1:a0:30:
58:8a:85:2c:8b:bf:ce:33:8e:47:ac:f1:b6:74:41:
2c:a3:a0:ac:31:bd:54:48:8a:ac:cb:c0:8b:c0:c1:
c1:c5:de:b6:64:56:de:71:85:28:18:14:09:3d:15:
90:0f:fb:26:77:5d:4b:52:28:93:57:3b:66:d0:2d:
fe:35:0d:49:5d:8f:eb:8e:92:02:f8:c0:44:93:64:
25:c6:3e:a8:ad:ab:d6:8a:a4:f2:74:d1:5d:fa:1e:
19:e1:29:7e:76:6b:ff:10:f1:57:77:38:90:93:d3:
fc:9a:eb:06:18:02:b3:3a:07:ed:ec:bc:1a:35:31:
5c:90:95:21:a8:5a:1e:cb:f9:d3:2c:44:c6:e2:69:
cc:ee:a6:a0:7a:7b:78:d7:7f:b5:e9:b1:4a:c9:be:
29:a6:ba:67:fd:38:1a:4f:63:cf:b0:08:0a:a3:e9:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:DD:13:77:2C:12:99:0C:37:97:44:15:78:A6:32:91:03:28:BD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44f2f554-f1f6-4f91-a1d9-bd24ad4f3da9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.56.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:35:89:a6:a8:0a:ba:83:72:0c:2f:7c:72:77:3f:8b:54:4b:
bc:01:71:d9:ed:0d:07:59:33:8d:43:a5:1a:11:a5:b6:85:e3:
94:0a:b6:b0:95:0b:a5:ff:b4:43:0d:f5:62:e5:d1:46:6b:52:
66:fe:49:20:b5:6e:c7:2c:36:64:9e:60:fb:10:27:0a:f5:67:
fa:a5:3b:6f:d5:7d:fa:47:ac:21:ec:fc:69:26:79:fa:b5:d8:
cc:ae:55:92:8b:18:4c:db:bc:7a:29:b9:be:02:0f:c0:9f:1b:
a2:06:ad:96:88:66:6a:ed:90:46:38:e3:fa:de:4b:b0:62:b9:
ab:cb:7f:69:74:8f:f3:81:7a:29:44:75:9c:78:90:f9:34:a7:
2f:3f:13:5b:fb:cc:f3:25:d3:de:bb:ef:e0:c4:3b:b6:f3:e5:
9e:3e:14:0d:55:ae:2d:0c:b0:3a:12:33:95:66:5f:1e:76:71:
a0:1c:f7:f3:62:9f:33:fa:35:37:50:68:8e:dc:d3:9f:d8:f3:
a1:d6:d1:44:d2:65:40:ef:01:9c:75:5a:83:df:2f:e7:a6:16:
94:1e:3a:80:ea:68:0a:8e:67:8a:49:be:97:07:b7:2f:e7:b5:
f5:cf:7f:36:b7:75:ee:f9:61:32:ca:dd:b2:40:41:0c:7a:de:
a5:e5:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:06 2025 by rpki-client