Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60f347af-3d7d-4618-acc9-afe5d43b6046.roa
File: 60f347af-3d7d-4618-acc9-afe5d43b6046.roa (raw, json)
Hash identifier: tRau1y93yYPIuzfjrSVm6xlmi48sA2jLDNxoWbPfJ04=
Subject key identifier: 7E:9F:54:45:DC:0E:4D:D7:52:7B:A2:0B:56:32:A9:E8:61:DC:6E:18
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 27A6F2BCDF51CDCE22D922C5C93BE8BE2693C0CB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60f347af-3d7d-4618-acc9-afe5d43b6046.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.232.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a6:f2:bc:df:51:cd:ce:22:d9:22:c5:c9:3b:e8:be:26:93:c0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=d8ddfc55917b60fc4c23ed07ad70e4592f06b2505a94ffaf930488fbade9459d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:55:27:22:27:61:fa:34:34:73:07:b9:77:
84:b5:86:04:ce:d6:a4:c8:e7:4b:df:87:a0:5b:5a:
f4:8b:cb:5e:44:ed:0b:d4:7a:86:b4:16:9d:0d:22:
2d:12:77:d2:e9:34:03:68:ad:1f:56:3d:d5:22:df:
17:0c:3a:8e:08:a3:be:cb:90:f3:c2:e1:fa:ad:66:
ac:e2:fc:1c:a8:53:c4:13:a0:ad:d5:b7:b9:8b:28:
b4:d7:8c:90:c6:2a:86:ed:70:59:25:c7:12:fa:b5:
7f:d1:8f:62:3d:df:76:53:8e:84:50:cb:19:72:20:
26:84:ae:5c:cc:43:dd:e6:06:69:bd:a8:af:96:c3:
56:6e:78:f1:bf:19:1f:82:f8:1c:2a:89:80:7d:fe:
5f:7a:e3:5c:c4:b1:ad:60:89:ba:35:4a:e0:a0:de:
e1:0d:46:34:34:a1:88:a9:c0:33:3f:75:b3:70:d3:
41:aa:ab:f0:52:53:df:b7:62:14:0a:0a:e6:35:54:
18:37:e5:28:89:5e:a2:38:7b:0c:4e:3f:26:a0:73:
9e:48:18:ed:d8:f5:2e:42:c0:a3:c6:fc:a8:62:aa:
8e:cc:ee:ca:10:3c:95:1e:75:be:45:81:4f:b7:1f:
81:4c:ac:7e:27:67:5d:c0:8a:c4:e6:2d:7a:8a:ca:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9F:54:45:DC:0E:4D:D7:52:7B:A2:0B:56:32:A9:E8:61:DC:6E:18
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60f347af-3d7d-4618-acc9-afe5d43b6046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
05:eb:4e:62:e4:13:41:4c:e7:7f:be:e2:44:c8:8c:56:86:6a:
83:26:c1:a0:07:a1:d7:09:22:89:66:85:82:b5:77:b0:4e:00:
bb:28:fb:ee:85:35:9c:21:d1:85:3d:91:4c:bd:ce:70:1b:43:
57:62:ab:a5:6d:48:df:53:07:79:29:6d:b2:95:49:bd:01:24:
ae:ff:47:9a:a2:78:11:fb:fa:a9:71:18:28:6c:cd:2f:d7:74:
d7:23:b5:05:92:7c:18:09:4a:b5:81:b3:bf:37:0f:4d:cc:95:
3b:3d:6d:6f:80:c4:05:b3:24:19:b1:6b:6e:4f:ad:27:2e:50:
8e:52:b8:f2:d8:6a:aa:d7:f5:ba:e3:76:68:2b:f2:0b:e2:63:
b0:fd:5d:da:03:d0:04:66:32:42:b0:83:e1:52:08:2c:f1:0a:
75:ab:1e:06:59:33:55:9d:61:90:17:58:4b:d5:de:0e:c6:5e:
1c:03:08:05:0b:9e:56:79:f2:c2:bf:b4:f3:ef:de:88:f8:0a:
bd:af:89:f4:9d:bb:94:f4:4f:dc:de:84:d1:e0:98:01:70:58:
b8:ee:d8:62:14:86:a3:5f:4a:55:97:1c:a5:64:43:27:bf:76:
0d:35:b1:b7:ae:87:98:b4:a5:42:55:49:3d:92:fe:f6:70:fc:
b5:0b:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:20 2025 by rpki-client