Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/655ba1a5-5eb8-4d66-8253-cedb90918cbb.roa
File: 655ba1a5-5eb8-4d66-8253-cedb90918cbb.roa (raw, json)
Hash identifier: hUt8q9B6Rz6ASBoxZoBVXSpv1ohS2AENZ7bKB4p0gb0=
Subject key identifier: 70:11:18:83:55:C9:05:B0:8A:D2:E3:6E:90:BC:DF:18:65:B1:8F:DE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 46F00980A8BCAB6321CC3455C51734E869CA5D05
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/655ba1a5-5eb8-4d66-8253-cedb90918cbb.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.227.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f0:09:80:a8:bc:ab:63:21:cc:34:55:c5:17:34:e8:69:ca:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=a9e53f96ec6642d9afeb9524f47a34e2755595c951b662c47f771c190b3355ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:c9:69:9f:89:20:31:1c:d4:bf:de:85:a9:
d3:f8:ae:d0:12:19:56:cf:63:8a:94:e6:85:07:0b:
7a:9b:db:9d:3c:93:54:68:51:f6:32:28:b9:5f:97:
42:48:67:d7:69:55:4d:5e:5c:2e:bf:37:a8:a9:de:
17:62:96:bf:45:cd:1e:b9:4c:d3:77:0c:f4:c3:10:
2b:b7:74:fa:b0:21:93:2a:3d:ed:c5:ce:42:e4:81:
ed:f6:08:5d:8c:87:82:70:c9:f5:80:19:11:64:96:
4c:4c:94:95:2b:0d:02:30:67:b4:c5:2d:94:0f:b7:
8f:49:71:24:c0:59:59:7f:c0:a7:fb:81:e9:62:f2:
21:e2:aa:6c:06:b0:9e:5f:53:3d:ee:ef:8b:ea:31:
87:b0:d5:0c:7b:15:63:4b:c7:5a:79:31:c7:fe:ad:
5b:e0:ad:7a:2e:64:0c:44:1f:7e:89:df:71:73:28:
9d:9c:f3:48:fa:0e:36:20:e9:dd:7b:d9:20:b5:79:
ef:a0:b6:4d:2a:15:6d:52:81:b3:ce:e9:28:17:b7:
3b:39:ba:0c:c3:9c:4c:f0:29:e5:28:d4:3f:76:37:
64:55:9b:dc:62:15:f6:d5:78:bf:4f:0e:7b:d5:49:
79:3b:5d:41:1b:54:86:c3:1f:d7:16:01:ed:e7:74:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:18:83:55:C9:05:B0:8A:D2:E3:6E:90:BC:DF:18:65:B1:8F:DE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/655ba1a5-5eb8-4d66-8253-cedb90918cbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.227.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:d4:35:28:51:bf:fb:45:3c:e7:66:9d:d6:a5:d0:11:b7:a8:
ff:90:de:f7:1c:97:8f:ba:06:80:41:54:3e:cf:d2:63:16:9e:
21:24:8d:f3:04:ba:6d:74:bd:fe:86:9c:66:96:85:d8:84:01:
a9:54:12:58:e1:fd:9d:00:42:d1:db:ee:a3:00:1d:ab:75:bf:
81:60:6c:1e:9a:17:09:5a:d5:74:2e:12:05:63:c2:e1:ae:a2:
c8:ce:e8:f5:4d:cb:a1:70:92:c1:3e:50:c9:e4:10:71:21:24:
25:e2:19:42:0e:7b:03:11:a1:c6:80:5f:ea:18:a7:2e:da:05:
e9:1d:62:d4:76:2d:a2:4e:f7:5a:1f:62:a0:bb:ef:1b:0e:81:
b0:62:a0:95:10:5e:a8:65:d0:12:12:6c:5b:48:e3:81:08:5d:
25:4c:d2:15:c7:47:62:5c:68:97:6b:00:a4:84:36:3e:cb:54:
fe:33:2f:64:de:d2:73:4e:57:9a:ca:92:09:04:88:b5:0a:ba:
86:14:e5:e9:c6:63:0d:aa:e3:5c:c6:77:3e:b0:a8:1f:da:0e:
e3:78:fd:ab:fc:d8:f8:40:0f:aa:69:89:42:9f:d7:43:2a:d1:
44:bd:88:ac:c7:70:b2:86:30:30:19:ad:b4:9c:2d:dc:eb:24:
b5:d7:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:58 2025 by rpki-client