Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75166442-72c4-43db-8779-6795341c8a9e.roa
File: 75166442-72c4-43db-8779-6795341c8a9e.roa (raw, json)
Hash identifier: lB76g8zBl5T4NnvjDQmwp2+Z6N+/lQFi3BQ5ZaUB4GA=
Subject key identifier: 1E:CE:04:CC:ED:96:99:18:C0:4F:ED:1C:72:D8:33:97:BA:95:E8:8D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2F114C1E1FDC363988A21D4DF652DF79DD35521E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75166442-72c4-43db-8779-6795341c8a9e.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.225.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:11:4c:1e:1f:dc:36:39:88:a2:1d:4d:f6:52:df:79:dd:35:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=47032ccb8165e4c2eb455e825d3de1249f81bbd56cabd11e535a21aaf03f58b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:fe:81:11:f3:73:d4:59:a9:60:0a:5c:8a:
73:db:15:44:51:6c:85:c5:73:0f:5d:30:37:dd:7b:
f1:ca:8a:49:e4:2b:42:23:5c:3e:e5:be:27:f4:8e:
1f:e7:17:81:c5:36:4f:31:2e:bf:f2:3f:04:b2:4b:
19:17:01:bf:15:f7:47:e1:b8:a3:4e:37:ec:fd:a3:
e9:e3:4f:10:b3:00:7a:97:75:d7:f9:05:0c:06:f9:
00:71:4f:bb:29:4a:7b:34:50:ab:a0:ee:af:ec:5e:
ce:af:09:7c:f0:f6:74:73:e8:06:08:5b:fa:39:4e:
29:42:3b:73:83:b7:41:2b:7c:64:9b:dc:5d:ce:da:
0f:97:9a:16:40:20:b9:06:6c:fa:de:c4:ec:27:79:
e1:f7:cf:f5:13:55:6f:be:24:01:88:ec:0a:4c:2e:
ae:1b:61:0d:0c:92:4d:b6:af:3e:22:28:1c:3a:1e:
5a:00:88:78:7b:78:99:18:ab:cb:75:0e:fc:a2:df:
39:49:ef:6d:62:4c:49:c4:32:38:8c:95:b4:5c:be:
30:97:79:9c:93:98:07:c2:77:45:d2:52:f2:58:e0:
c4:87:f4:c9:32:86:19:85:61:c4:40:c3:de:b5:5b:
3d:85:f4:78:8a:5d:27:30:39:3d:31:fc:95:6f:5e:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:04:CC:ED:96:99:18:C0:4F:ED:1C:72:D8:33:97:BA:95:E8:8D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75166442-72c4-43db-8779-6795341c8a9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.225.64.0/18
Signature Algorithm: sha256WithRSAEncryption
56:b2:fa:ed:e9:d0:0e:f3:1e:f3:ab:c5:78:ad:d4:4f:af:ce:
5e:2b:19:74:32:86:cd:6c:73:71:91:10:f8:96:fc:56:d7:29:
a8:2d:2c:d5:b5:15:c9:e9:6d:aa:c9:a8:2e:cc:43:e8:04:11:
c4:a5:fb:e5:6a:6b:00:7b:b5:b6:b2:4f:2c:51:d2:f5:22:1d:
42:1c:5e:04:49:de:79:25:4c:5a:69:47:e8:64:76:d5:83:9a:
43:4e:4e:2e:7e:cc:6a:f7:6a:bd:e2:a5:a9:da:62:05:02:31:
0e:73:09:ab:99:36:36:6f:e4:02:fc:c2:dc:8f:14:b8:f6:90:
a0:5c:58:e8:74:c9:45:7e:37:de:57:46:d3:f3:90:72:ae:88:
9e:1e:0e:ea:d1:10:1c:9b:5e:b6:45:5e:ab:ea:c3:c2:c5:1d:
5b:69:b2:b1:cf:4a:a8:29:c7:17:28:99:e2:34:5e:3d:0d:55:
86:a7:d3:90:f1:a3:9d:32:b9:76:e9:7c:e1:95:fc:20:16:84:
b2:ec:ac:fe:57:52:61:7f:63:99:ec:b7:1e:d5:6f:9d:dc:fa:
33:ea:85:2e:17:88:fe:2c:51:df:40:f7:5c:d1:d5:43:4f:5f:
1f:8e:2d:0f:6b:c7:5a:03:a3:af:d1:40:c9:38:63:90:91:ee:
5a:85:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:44 2025 by rpki-client