Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/601ba437-5787-4591-b352-0aa5ce1e66c6.roa
File: 601ba437-5787-4591-b352-0aa5ce1e66c6.roa (raw, json)
Hash identifier: k8jvu59QrgHftstz9fFXRRkJDG0H74CSk4tlTv9/4gY=
Subject key identifier: FE:BB:AC:09:00:23:24:A3:B7:96:10:E4:45:6C:2B:AF:6F:91:80:E2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0A9993C993C6CFCBCDD8B2E5D4447C3D59BA3E05
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/601ba437-5787-4591-b352-0aa5ce1e66c6.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.254.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:99:93:c9:93:c6:cf:cb:cd:d8:b2:e5:d4:44:7c:3d:59:ba:3e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=8ab710c80e6025f9f5c4156241b96a798aabd3a495afb936cbf3d469c510cb07, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e5:af:62:de:a6:f7:44:45:5a:b4:39:d5:3d:
15:9e:cd:fd:df:69:6d:5b:a1:46:8c:3c:25:3b:fa:
f3:1d:30:5f:43:ea:33:ea:75:5b:00:9a:16:2d:33:
93:c3:ea:9a:6a:7a:8a:45:01:49:7d:70:94:da:5b:
3e:38:1f:7a:c8:40:cf:47:a4:c1:38:0f:95:09:6a:
0d:4a:45:6e:57:66:6a:c9:15:ba:0d:88:82:78:7f:
fd:1c:36:00:f4:1f:6b:9a:78:91:83:1f:5a:fe:19:
e5:5c:e7:cc:2d:53:6c:78:4b:b2:f0:3d:aa:91:22:
93:16:d8:8a:be:37:ff:a8:10:4f:7d:82:93:ed:55:
3f:ff:68:21:7a:d3:6a:10:44:1e:d8:5b:7f:b7:e2:
36:db:14:de:97:d6:49:9a:73:61:7e:01:99:79:5b:
b4:fb:1e:67:5b:b3:99:78:dc:97:1a:d6:44:83:08:
26:ca:6b:49:33:1d:79:f8:22:bf:b2:34:0d:26:2c:
e9:be:54:6b:6a:3b:3c:f9:31:13:23:fc:95:53:b2:
9a:3d:a8:38:b4:e1:69:3f:c9:04:e1:74:b5:df:ff:
28:af:f8:80:9d:30:f6:d9:7a:15:6a:89:e7:4b:4a:
bd:d0:91:3c:e9:51:e3:46:c4:35:d5:9f:85:bf:d7:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:AC:09:00:23:24:A3:B7:96:10:E4:45:6C:2B:AF:6F:91:80:E2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/601ba437-5787-4591-b352-0aa5ce1e66c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8e:f4:24:9c:fb:c9:ff:1f:de:9e:c0:d7:82:08:5f:b5:0b:74:
f4:c1:1c:86:6e:57:4f:b0:9c:14:20:85:a8:2b:98:e9:4b:de:
82:5d:0f:71:4b:09:6c:8d:3e:6d:87:01:1b:42:db:da:5e:7b:
2e:ed:d4:a0:59:49:a8:60:44:e9:ce:2a:16:21:27:69:87:fd:
c3:49:47:5c:3f:d9:30:80:49:19:cd:c8:bc:47:87:01:e0:44:
91:fc:95:32:de:73:51:6c:ad:6b:56:2e:1f:c4:af:34:70:98:
ca:2a:b1:40:b2:03:80:71:6d:99:7a:0a:97:dc:0b:ec:d2:85:
69:de:8e:33:02:f6:d4:cc:7b:be:96:43:eb:a0:c1:cb:65:01:
f4:b3:6f:9a:b2:88:63:65:34:5c:b4:f6:3b:02:6a:0c:ed:19:
24:ab:dc:6d:82:71:da:cb:95:4d:cc:03:2e:0b:8e:a9:91:7f:
0e:38:e6:c7:8f:24:2a:95:ff:55:ca:62:b8:db:5b:4b:61:2b:
72:9d:4a:cf:cd:ed:0a:fa:f7:dd:8c:78:38:a3:9b:d9:f9:10:
eb:12:6d:f0:2d:b6:b5:8e:2b:30:1b:97:e4:5a:0e:91:fb:dc:
bd:d1:d1:81:ae:58:19:b8:e6:3f:5d:70:89:2d:34:c5:c7:81:
53:09:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:00 2025 by rpki-client