Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa
File: 753970ff-6395-428f-bb4f-1fc404ce49d5.roa (raw, json)
Hash identifier: dVeW8MQsq7ziPzuVK/ozZ07NixrGk9HazCIfUiIxl8A=
Subject key identifier: CB:E1:79:AE:F3:8A:B1:3F:4A:0E:FB:BA:70:10:E7:E0:90:77:AE:D1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 73E76B28EC3828851F8DAF8EC4A8F1E78496F798
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.90.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e7:6b:28:ec:38:28:85:1f:8d:af:8e:c4:a8:f1:e7:84:96:f7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=2586f0c459afd36c4910816ac86cfd89d0c0f96b6cca578be09aa7b7c4801f7a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:7d:73:1c:0a:89:7c:07:fc:22:2f:8c:4e:
33:de:92:41:db:ac:2d:14:65:b5:d8:19:fa:9d:0f:
ab:63:64:2c:09:df:02:77:5f:20:1f:ab:c1:07:09:
b7:36:e7:fd:ac:45:0a:72:11:51:27:3e:69:f2:71:
95:64:1e:09:9f:2b:f1:c8:78:c6:04:2b:f2:38:69:
d8:43:d3:61:ba:f6:01:84:09:7d:67:5a:0a:de:4f:
11:70:b9:24:d8:e8:6f:a7:b7:9f:cb:91:d6:6b:1f:
53:3a:83:7e:72:df:b7:8b:ca:03:9b:24:ae:12:a9:
1a:dd:60:cb:e6:85:f1:5f:bb:9c:56:7d:36:f2:61:
40:26:1d:88:19:c0:ce:45:25:46:71:6b:5c:9a:fd:
dc:2a:24:61:fc:82:dd:08:f5:b8:d2:ab:7c:48:f7:
67:86:4e:48:2c:85:c3:12:ae:8b:bf:51:08:fa:0b:
d7:32:87:ac:b0:43:e3:0f:0a:69:d3:09:3e:e7:79:
8a:1e:2e:e4:6f:9f:1d:db:05:b9:7a:eb:a9:d2:fd:
b2:f1:1d:a3:7f:fd:98:e6:05:3d:c5:fa:d5:7f:ed:
87:43:c3:de:2f:f9:d6:47:12:45:09:f8:32:19:6f:
8e:7c:cf:e3:5f:9b:f3:6d:41:aa:ed:21:a7:cf:e3:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:79:AE:F3:8A:B1:3F:4A:0E:FB:BA:70:10:E7:E0:90:77:AE:D1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.90.64.0/18
Signature Algorithm: sha256WithRSAEncryption
72:03:a6:1c:17:b2:64:0d:cb:f0:5b:1a:6b:46:78:b8:cf:25:
22:9a:83:bf:2a:fa:85:a2:1d:cb:37:99:ac:ec:02:a7:c4:d2:
31:e7:c6:55:42:8f:c9:3a:4b:d2:ca:d4:62:62:35:ba:d1:81:
e1:3e:49:35:c2:cd:be:14:c9:72:40:a0:1a:7c:cd:90:37:d5:
8e:36:17:25:88:af:ec:0f:72:85:9e:53:34:33:74:a3:2a:25:
06:87:c7:75:1d:63:11:57:d5:ce:b5:97:4f:22:25:21:94:67:
88:e2:04:09:42:9d:c4:44:4e:83:c0:bd:dc:8e:35:eb:15:d6:
37:bf:a2:77:a3:49:8b:0f:fc:4b:e0:b5:10:f2:e2:2d:6e:5b:
3e:27:e6:6e:41:fd:ad:0c:49:e5:9e:fc:72:9f:25:99:e8:5a:
6d:14:ff:13:4b:c2:71:9a:05:e1:63:31:2b:fc:5c:ae:01:86:
71:57:e8:cd:92:42:d9:47:ed:cd:d8:32:be:da:41:a3:3e:81:
a7:df:5f:ad:ab:11:f0:bd:4c:28:72:9f:31:e6:7e:65:d4:74:
cd:e0:8b:d6:b1:74:65:00:38:4f:64:ad:d1:47:69:fa:7d:eb:
d5:c0:17:fd:a7:03:64:9e:04:c8:a7:5d:7c:3f:10:d5:c0:51:
67:e1:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:22 2025 by rpki-client