Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78beaf8e-c021-4f92-865c-efe581c72962.roa
File: 78beaf8e-c021-4f92-865c-efe581c72962.roa (raw, json)
Hash identifier: oedfGb/0Ir9SjMJ722v73Y/lJHvcQXwFuVUKzgCopP8=
Subject key identifier: 08:60:C0:C8:44:77:EF:CB:9C:28:5A:0C:BE:20:4A:55:98:7B:EB:E8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5E5DC6DB6CF6F805EC5C1E28C37AC4528F20298A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78beaf8e-c021-4f92-865c-efe581c72962.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.237.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5d:c6:db:6c:f6:f8:05:ec:5c:1e:28:c3:7a:c4:52:8f:20:29:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=a277d3b366dab78abcb25063f2974c989594a3b3b5960358ccf157a7445fe3af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:53:9c:22:f9:0e:47:c8:da:21:af:f8:40:
ee:6e:50:40:f7:15:c3:83:ff:75:4e:04:aa:d3:f6:
7c:b2:01:0e:b0:32:25:f3:8f:57:56:cb:e3:a8:a4:
c5:d9:6b:71:00:03:75:17:e6:63:a0:98:6f:9c:a9:
da:d7:cc:1f:05:5b:8a:fa:19:e7:58:f3:83:e7:54:
95:67:f0:c0:87:b5:85:a7:3d:cc:ed:a6:6e:e8:1e:
84:9c:e6:af:c0:fe:07:80:78:f2:3f:51:ed:d7:5d:
fa:94:b5:d4:8c:ff:5a:c3:66:16:10:60:ba:ed:4e:
d4:30:93:7c:43:a3:9d:ec:d0:9a:33:83:72:dd:64:
53:ae:2d:1f:58:a2:64:a6:be:6c:fd:01:ff:16:2f:
15:f9:9b:a1:00:d8:c4:a0:d3:1a:25:3f:ad:d4:3c:
31:8e:31:2c:0f:65:1b:fb:5e:51:90:87:c3:f2:3a:
e2:73:d3:ec:9c:3c:23:00:65:2a:09:5a:0f:3f:b1:
08:5f:4c:ef:30:de:4e:af:14:d6:d6:73:44:6e:20:
e7:b2:83:b6:f4:85:7b:d6:90:ef:dd:6a:b6:1f:a5:
49:5e:c7:5d:88:ad:44:07:11:ec:db:c6:5d:67:e6:
80:41:22:5d:5d:c6:82:aa:c2:bc:c5:dc:de:8e:72:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:C0:C8:44:77:EF:CB:9C:28:5A:0C:BE:20:4A:55:98:7B:EB:E8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78beaf8e-c021-4f92-865c-efe581c72962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.237.240.0/21
Signature Algorithm: sha256WithRSAEncryption
45:f7:c4:dc:9e:37:82:44:67:d8:9a:e4:0e:4f:cb:02:3e:f5:
54:0f:9b:7f:2e:5c:ec:08:ee:63:2c:d5:4f:e4:ef:1c:ba:85:
40:1c:ad:92:9d:66:6a:56:b6:d3:e7:43:51:bc:50:2a:b3:39:
dc:08:97:b1:10:80:33:76:1a:36:03:14:98:cf:f4:99:ca:1e:
f1:d9:b9:e6:cd:a2:7b:3a:6c:6d:26:92:1f:9c:e4:3d:e2:10:
df:bf:0e:0d:42:c5:c7:c2:e8:80:7d:46:8b:24:14:28:31:c0:
d6:c8:2d:70:4c:38:e6:6f:61:fd:b3:fc:84:33:af:8d:ef:d5:
ee:ba:12:bc:81:89:9f:38:f6:46:a6:99:00:e7:c2:52:6c:9b:
9d:63:67:33:77:fe:3c:d5:4b:97:cc:c8:9e:98:ad:17:79:e7:
e7:81:18:6b:e9:bc:42:24:ab:b0:8c:08:82:b6:14:b2:b5:dc:
d9:db:84:a9:8c:2c:89:f3:ef:e6:87:dc:61:8d:ab:bb:bb:64:
62:70:1f:22:dd:1a:bf:26:08:33:f8:6a:7f:34:f2:8a:fa:b0:
f6:e4:a5:0f:2e:a3:65:78:f4:a7:03:9a:f4:a2:34:dc:80:b3:
0d:a0:3e:07:88:ff:96:ab:37:08:39:bd:55:1b:9b:d7:0e:f1:
f4:6d:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:32 2025 by rpki-client