Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e607366-a5b9-469d-96bc-19db7f27a9fe.roa
File: 6e607366-a5b9-469d-96bc-19db7f27a9fe.roa (raw, json)
Hash identifier: JdCt0HEbz9ixGTPdKOglGsRSE0XG3hDerxmrxFGMW/o=
Subject key identifier: B1:F9:CF:36:5C:BD:A4:A3:B7:DC:4A:A4:E6:D2:4B:B5:18:40:BF:43
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2AEEB32E60FCDD98049A74DE3E96047B5847002D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e607366-a5b9-469d-96bc-19db7f27a9fe.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.95.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ee:b3:2e:60:fc:dd:98:04:9a:74:de:3e:96:04:7b:58:47:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=cb6f0010c1fcbdac7a93b5294bb7aa9261c64c72eccd9fa5e856c47af85069f7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:b3:b1:56:6a:b5:45:6f:e7:5c:e6:54:06:
2f:30:b6:c6:e8:80:f5:8b:0a:99:c0:94:51:73:15:
18:2b:ba:b4:ee:3a:b0:a3:c8:84:13:55:a1:fb:40:
19:a9:4a:84:db:0f:1d:88:13:8d:dc:a0:04:54:04:
e2:5e:38:8b:9e:74:8f:c5:87:c7:86:dd:7f:0e:75:
89:d9:22:56:c9:74:7b:bd:bb:08:c9:72:4b:52:49:
70:95:bd:56:e6:1b:b1:fd:b9:33:30:52:59:6e:10:
6b:8f:7f:f2:b8:37:ee:d8:4f:0a:7b:98:26:7e:e8:
22:89:38:ca:41:9d:00:4d:7f:1f:c6:b9:2b:bb:60:
f3:e9:c0:f0:eb:3e:17:c9:f7:83:f5:2a:92:63:96:
35:a4:da:61:d3:8f:05:fc:87:67:e8:49:c4:5e:6e:
89:30:ee:4f:cd:7d:89:e1:51:4f:b7:28:94:e5:b2:
d6:9c:72:5a:e2:5b:eb:f9:96:d4:d3:97:ca:6c:2e:
89:af:07:b1:8d:7d:ba:1d:6a:9e:05:b4:ab:08:fa:
03:ee:cb:cf:33:1c:bf:36:13:4b:67:b4:13:a0:2b:
53:87:4f:d7:d4:8b:3e:00:2c:6c:ff:ca:eb:7b:c1:
29:cf:0c:b5:4d:a7:d0:12:61:02:bc:cd:33:c2:99:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F9:CF:36:5C:BD:A4:A3:B7:DC:4A:A4:E6:D2:4B:B5:18:40:BF:43
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e607366-a5b9-469d-96bc-19db7f27a9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.95.128.0/17
Signature Algorithm: sha256WithRSAEncryption
43:1e:e3:2a:34:b9:84:58:49:23:e5:d8:47:31:90:16:16:e1:
d2:22:1e:6a:2c:aa:81:4b:02:6d:f4:21:6a:80:39:df:00:78:
97:2b:e0:e3:35:3f:0c:d7:41:76:45:9b:f0:f4:28:30:6a:6a:
9a:2d:1b:1d:73:fb:01:a8:aa:cf:b9:59:98:ab:b1:60:e0:56:
c5:f1:61:a8:96:ab:1c:9e:31:4d:31:6f:85:20:4f:06:df:86:
15:c4:7e:ae:13:c8:26:ff:ac:77:9b:00:5f:17:5b:6d:36:d7:
52:5f:d3:ff:b6:d5:d6:9c:23:da:c0:70:0b:2f:4f:f1:00:d9:
ff:9e:a1:2e:9d:04:43:2c:3e:b0:09:bd:ee:a2:0a:37:e0:90:
50:09:1f:46:ea:4a:a3:50:30:e1:ba:d1:2e:8a:8d:b7:de:5e:
11:8c:08:67:a7:7c:ef:dc:36:07:57:30:bd:66:54:df:22:25:
1a:54:5c:09:2c:cc:80:4d:88:4e:31:73:66:f8:5e:bd:54:9f:
00:0a:99:93:70:a3:b9:70:a2:a4:51:4f:80:7a:3a:08:79:b8:
5f:19:e6:e0:b3:08:91:61:3e:94:67:2e:e2:15:b1:df:09:84:
58:04:46:b4:46:94:e7:9e:cf:3b:3f:9f:1c:37:2c:df:c0:f5:
d8:b4:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:50 2025 by rpki-client