Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7eb898ee-cc0c-4b45-a934-99f0a8ace39f.roa
File: 7eb898ee-cc0c-4b45-a934-99f0a8ace39f.roa (raw, json)
Hash identifier: rtKdLH30IxJij+axaUn+3IBjUIUDaPnfJsWdQYnoWBE=
Subject key identifier: 82:24:10:4A:D2:A4:AB:35:B0:FB:65:B3:6A:54:05:7F:3D:E4:0A:A1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 345BF9278B8365658E69288F391EDE269A2A5ACD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7eb898ee-cc0c-4b45-a934-99f0a8ace39f.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5b:f9:27:8b:83:65:65:8e:69:28:8f:39:1e:de:26:9a:2a:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=3a0229ffb1b701c85fb0f1ed76da220e904262a326f95a77ef45b5e6e7403095, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:b2:46:26:d8:82:e1:bc:4c:55:50:17:b4:
dc:c4:66:89:95:a3:11:31:ac:90:60:a0:2e:97:d2:
c9:f1:87:19:72:64:74:7a:ae:ad:45:43:d8:fb:9f:
fe:6d:11:41:9e:0a:bf:3b:6e:c2:29:fc:9e:8f:01:
88:e8:0b:7e:91:74:5f:9e:d4:18:6e:51:8a:95:59:
de:a4:d6:29:37:a3:60:6b:c9:0f:75:7a:fc:c5:f8:
67:92:49:8c:36:68:1a:b7:47:23:d6:d9:d2:1c:c5:
55:60:34:cb:2e:50:27:b0:c6:2d:f5:27:44:e6:df:
91:e5:0f:f2:99:20:4c:52:2a:db:ae:88:45:15:df:
47:46:17:11:4d:0f:8e:58:60:5c:45:7e:41:5c:cb:
c3:78:38:e2:81:9e:8f:90:8b:e7:a4:7d:f5:3c:c5:
92:52:ef:17:c4:74:dd:b6:10:10:34:45:03:ed:99:
8d:7c:e5:f7:3b:97:57:3b:dc:00:e7:8e:d4:9b:7e:
e9:cf:1b:43:72:1a:16:2f:e4:6e:b3:75:cf:17:c2:
22:77:38:3d:34:74:c5:35:9b:ef:55:96:8f:0e:39:
a7:bc:aa:c2:d1:4f:d4:7f:af:3f:92:2f:bb:74:38:
3e:9b:2e:7e:47:60:7d:6e:df:78:cd:0e:9e:00:c4:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:10:4A:D2:A4:AB:35:B0:FB:65:B3:6A:54:05:7F:3D:E4:0A:A1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7eb898ee-cc0c-4b45-a934-99f0a8ace39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.230.0/24
Signature Algorithm: sha256WithRSAEncryption
78:67:fb:d6:65:80:43:60:9d:aa:d9:ae:be:50:e7:0c:86:8f:
fe:1b:e6:d0:eb:62:75:68:97:5a:ca:8f:57:68:94:51:14:e8:
bb:4a:78:79:f8:f4:05:1e:84:31:31:1b:dd:93:c3:6a:8a:85:
0b:44:fa:e6:11:e8:a4:56:40:9d:2e:44:e4:f2:68:70:e9:be:
0f:58:b2:bb:ce:b7:de:47:b6:ab:5a:e0:c0:5b:f2:ff:ed:1e:
07:eb:02:73:19:ce:ef:b3:98:b1:1f:2a:a5:a1:40:98:37:08:
1c:f4:96:ba:b0:5b:35:50:61:69:29:fa:6f:a1:8e:2d:46:95:
8a:43:7f:a4:f9:e0:b8:2d:21:ec:57:f3:9f:a7:e1:4e:da:59:
d5:25:fd:94:10:55:16:ae:ec:33:97:b1:b1:96:cb:cc:17:87:
a0:f2:dc:75:f8:83:15:10:9a:d9:bb:14:28:3d:42:51:a3:8e:
9f:40:00:39:56:02:e7:c5:22:a1:cc:d1:81:af:52:08:0d:85:
f3:e2:e9:b7:2d:57:19:26:ef:76:3d:5d:05:15:4b:95:5f:96:
02:69:08:13:d3:20:cf:00:26:92:d2:8a:4c:a2:f5:bf:ca:8d:
70:56:fd:71:15:60:94:e5:f6:59:13:63:9e:ae:c5:a1:90:a4:
7e:3c:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:31 2025 by rpki-client