Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49744934-f904-48fe-9e1b-9559fd2ffc90.roa
File: 49744934-f904-48fe-9e1b-9559fd2ffc90.roa (raw, json)
Hash identifier: E/WBIuScmWY8oeMKHC7iaTcqIegT6lznATYLdII6ucw=
Subject key identifier: 41:98:BE:C2:BB:E5:5B:8F:E8:9A:B8:2E:0D:1E:C7:D7:7E:6F:AB:53
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5812A01CBB8440AD4632436F2809F749966AE6D8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49744934-f904-48fe-9e1b-9559fd2ffc90.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.83.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:12:a0:1c:bb:84:40:ad:46:32:43:6f:28:09:f7:49:96:6a:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=455ca276031ab882ae9856f70507196b3e70fa0a4ae72eefff60e5988ca8f3b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:33:41:06:3f:06:65:32:36:50:c3:ef:99:
dc:1a:4e:04:ad:49:8a:cb:31:f9:ea:18:ae:74:a4:
66:a2:6c:5e:fb:eb:3c:eb:e6:73:67:68:ea:39:6e:
c1:59:40:73:ee:20:ae:8c:67:b8:9c:b8:20:bb:67:
d6:83:7f:d4:ea:cf:5b:e0:88:08:44:40:cb:c4:fb:
82:d0:98:e9:a6:3f:8d:7a:0d:38:d4:b9:19:a9:c6:
6a:48:27:5e:b1:33:d4:5e:77:9a:5f:a5:bf:c8:df:
04:d9:58:1b:8e:0d:df:ca:fe:03:23:e8:28:c6:1d:
93:33:ee:b6:db:c0:15:88:22:14:a0:88:6a:2e:5f:
1f:28:c3:1e:bb:ee:09:ed:44:f1:6c:09:cb:ac:87:
43:63:38:67:72:2c:28:f0:99:97:59:57:84:44:c6:
33:7e:9d:e3:fa:b7:38:84:5d:27:9e:88:41:e2:03:
54:98:2d:42:8e:36:72:05:81:e6:10:37:15:54:9c:
8a:58:06:7d:92:54:af:cc:7d:3a:85:c5:16:1b:94:
56:74:60:9a:54:c4:9a:01:90:eb:03:15:2f:3e:25:
2a:7a:43:e1:f8:ac:50:0a:a5:f7:ed:d5:ca:f8:17:
f3:b5:2c:b4:67:c7:9c:4e:a7:47:6b:ed:de:b5:62:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:BE:C2:BB:E5:5B:8F:E8:9A:B8:2E:0D:1E:C7:D7:7E:6F:AB:53
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49744934-f904-48fe-9e1b-9559fd2ffc90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.83.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:c1:87:1c:27:e7:99:a5:16:f5:e6:49:59:24:40:6a:6e:75:
08:b4:35:67:c0:ae:e2:b1:9f:8b:ce:9c:0e:11:5e:03:f2:40:
9a:4b:ba:df:75:e4:9f:55:41:96:fe:2d:a1:a6:99:8b:18:34:
0c:c4:1a:09:44:e0:20:80:a5:a5:cd:c6:0b:d5:f2:d4:de:df:
77:e5:94:65:98:1c:23:90:78:38:e6:99:08:87:87:db:6c:69:
6c:e6:de:29:a5:07:14:aa:5e:4c:e6:58:29:b1:32:89:57:ef:
20:de:42:ce:9a:9b:60:80:ef:11:a9:c8:3d:bf:b9:bd:fd:d9:
aa:dc:5f:7e:8a:b9:7b:51:4a:1f:2c:1d:61:69:bc:06:b4:ca:
a9:28:12:db:54:20:a4:93:df:a0:56:86:ae:29:53:e8:10:c8:
23:dd:3b:38:07:e4:58:ff:61:8e:08:a3:29:f8:d7:c6:d1:af:
00:2e:35:4c:92:0f:6e:8c:86:d2:a1:77:23:03:97:8a:26:fe:
87:c0:c4:88:c0:82:a2:86:88:b5:53:95:91:03:93:84:98:f7:
ee:a9:e5:0c:e0:7f:80:ba:08:a9:01:37:fb:06:d8:46:9c:fd:
8a:29:28:89:e2:21:bb:2d:95:9a:8a:3a:c4:81:d5:aa:ea:5f:
fe:76:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:14:15 2025 by rpki-client