Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d3c2c57-431d-4beb-a017-c45ae96853be.roa
File: 5d3c2c57-431d-4beb-a017-c45ae96853be.roa (raw, json)
Hash identifier: UKitwKZ37E7YzMaC3GAFaNAOoAn7fJ1b1U0STKc39y8=
Subject key identifier: E9:17:21:77:A2:90:79:C8:37:5C:0F:F9:17:B0:D0:C3:D5:7C:69:53
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1071FC0B295FF63B23710B1E5CCF9ADC88EB0994
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d3c2c57-431d-4beb-a017-c45ae96853be.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.182.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:71:fc:0b:29:5f:f6:3b:23:71:0b:1e:5c:cf:9a:dc:88:eb:09:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=2206046b08b55cfdf05309835bf4d7000f0bc6ac7564316b93e684c596436ff6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:36:02:0d:f7:49:e2:77:aa:04:1a:bf:b4:
79:1c:d5:f7:1d:62:40:71:c5:5f:d1:3f:ed:02:a1:
9d:71:4e:e6:16:c1:5e:f3:52:33:a2:e3:72:6e:61:
c6:87:5d:02:8a:54:1e:5e:7a:fb:e7:89:5a:67:8a:
15:04:fc:bf:3b:1e:7e:f7:ba:8b:7c:dc:53:6e:37:
c1:5a:07:36:1e:4d:f6:cb:4f:18:40:b7:a1:93:68:
47:d5:83:7e:29:8b:f4:82:9b:16:ff:9a:2d:dd:1a:
d3:35:bc:55:ac:e9:d5:ae:de:2e:21:01:69:b5:84:
16:5b:8f:c1:15:08:b8:94:87:9c:a6:0a:f6:2c:1f:
a7:38:69:2b:75:41:b0:c3:64:48:42:26:c2:e4:ec:
01:d2:fb:fb:42:ea:09:08:05:24:ac:13:87:d7:4b:
d8:8a:71:a8:a3:59:29:ba:24:fc:85:dd:85:76:09:
ed:8c:d7:10:31:b1:e5:30:b6:d7:57:32:9a:f6:d7:
32:b7:37:13:1f:98:d4:60:c3:25:8b:9b:4c:58:bf:
d2:88:81:54:ff:e2:d4:c4:2e:fd:56:3c:73:fc:02:
04:59:8d:df:94:20:e5:79:c0:bd:3b:59:6a:c4:45:
ef:f9:45:cc:c0:98:bd:d1:e7:50:ee:f2:e7:b8:85:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:21:77:A2:90:79:C8:37:5C:0F:F9:17:B0:D0:C3:D5:7C:69:53
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d3c2c57-431d-4beb-a017-c45ae96853be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.182.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:3a:76:ca:2d:c5:ef:b1:a3:fb:31:b2:a5:48:74:6c:c8:0c:
89:cb:e6:97:ce:44:03:51:35:90:69:f8:b5:d0:14:ee:1c:95:
10:de:1d:12:47:d5:9e:ca:c6:e3:65:df:40:8c:03:99:77:1c:
48:89:8b:53:59:b8:ab:f0:3f:4a:54:f0:2f:4c:00:b8:f4:aa:
b0:38:fe:c9:11:57:fa:21:ac:bf:e3:71:73:4b:e4:fd:73:72:
e6:41:0b:73:fa:8d:c7:5b:4d:c8:99:6d:58:5d:e1:b8:c5:47:
90:b5:c8:f2:47:99:c3:2e:22:46:2f:45:50:f5:9d:dc:23:04:
46:e0:d9:88:2d:66:d6:0f:9b:f5:07:cd:74:5e:bc:4c:90:9b:
39:a8:df:93:8a:2c:65:5d:d8:81:99:7e:56:9f:02:91:7d:67:
d9:68:91:9a:28:00:c5:77:70:c1:76:95:95:6d:8b:7f:44:8c:
ad:30:c5:2b:ea:f6:f7:f5:ba:7d:9d:7c:34:62:a7:8f:3c:c5:
74:d2:7b:b6:37:c2:3d:96:c4:f1:60:9a:fd:4b:30:b6:0e:69:
6c:b9:ec:a0:dc:cf:a1:69:6e:a9:0f:aa:c4:9f:4c:5a:10:93:
5e:e8:a7:69:30:3b:e5:ac:0f:4e:db:0f:c4:86:8b:ec:04:7b:
01:03:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:09:13 2025 by rpki-client