Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9bf59310-023c-4ced-a65d-e33c857df96c.roa
File: 9bf59310-023c-4ced-a65d-e33c857df96c.roa (raw, json)
Hash identifier: pljEAX4bhin9YMoYJ6Ag2yYdxJhx7gibZ30iREt5wd4=
Subject key identifier: 74:93:00:0B:2E:02:D3:92:7F:DF:65:3F:84:9C:CE:A9:6A:FE:F0:DD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2127F56C976BDC5CA3FF282A4C88D2A1216B8C52
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9bf59310-023c-4ced-a65d-e33c857df96c.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.206.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:27:f5:6c:97:6b:dc:5c:a3:ff:28:2a:4c:88:d2:a1:21:6b:8c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=1dc394c31c2baacb8086365e82906b6bc6c56b8ea7b50dc35a76e1f32f421e97, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:d9:df:1a:8b:f6:b5:e0:e2:86:74:3f:c7:
38:d5:c9:37:36:fa:6e:f7:53:ff:19:48:f3:93:5f:
0e:38:9e:36:bb:d6:63:fb:37:44:8c:6e:39:fe:f9:
f6:77:e3:0b:6b:08:54:c7:45:37:a4:fa:05:1c:7d:
66:48:d5:48:fd:54:b7:39:f0:9a:ca:52:d9:29:8e:
15:3b:e7:58:70:17:d2:27:d9:13:80:49:d3:76:df:
2a:9a:e6:01:07:62:fb:60:90:eb:64:a8:74:e7:ca:
bb:a4:52:04:5d:e5:c9:5e:92:f3:8f:33:78:a5:a9:
46:5d:e9:ed:69:29:18:59:59:0b:d8:fd:1e:5c:b7:
1c:c5:22:e3:55:62:1f:a5:5f:11:53:b1:1d:a5:d9:
fc:ea:b6:a6:b2:e0:67:c9:56:1c:c0:47:2b:bc:16:
84:f2:74:10:43:23:4d:16:32:3e:4b:23:42:f2:ca:
18:42:eb:08:3a:64:7e:3b:40:09:01:d8:c5:bf:04:
44:a2:ce:b4:e4:86:0a:70:38:7f:17:67:33:6e:2d:
2f:77:da:f9:7f:f2:cc:11:0c:79:60:7e:7c:d0:f3:
5f:c4:c8:36:56:1c:7e:f7:2f:3e:e9:f5:36:9a:d3:
57:20:a7:94:21:90:92:30:09:44:7c:fe:38:d2:9e:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:00:0B:2E:02:D3:92:7F:DF:65:3F:84:9C:CE:A9:6A:FE:F0:DD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9bf59310-023c-4ced-a65d-e33c857df96c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.206.254.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ab:42:b1:c0:d6:87:c1:ab:eb:aa:d9:f6:d6:f9:c8:9d:9f:
6a:55:e3:e1:0d:c3:94:4d:d4:d3:a3:a8:71:c3:be:bb:69:17:
40:bd:6b:55:5c:dc:a3:cc:02:9b:15:69:14:f7:01:04:54:c1:
be:7d:2c:f1:66:eb:31:98:84:a1:ac:28:d3:9c:96:2a:bc:ae:
0f:3e:9e:87:85:43:a6:fd:c0:a5:ec:18:ea:e5:a1:4f:73:97:
db:66:af:7a:e0:b1:23:b7:86:60:b3:a2:ee:ae:b4:85:cd:22:
c2:df:08:40:8e:04:98:af:fa:66:39:bd:8a:3d:18:3d:8c:ee:
c4:ff:29:da:1d:46:a7:60:97:10:7e:ef:00:d8:71:0a:78:27:
2f:96:9f:3c:4d:ee:84:af:ee:be:49:47:b0:02:63:97:26:22:
f1:ac:95:28:88:d9:4e:19:5c:a8:2f:9c:94:ce:e1:40:cd:f8:
e4:0f:06:b1:ef:4a:5c:23:5f:1e:71:db:fa:aa:f8:92:bf:15:
47:12:ad:44:69:c5:76:d1:7e:5a:c3:7e:e3:61:b2:f3:5a:66:
1c:89:37:c0:e2:77:21:80:8c:10:f1:30:6c:c4:79:64:e4:7b:
9a:31:55:35:09:74:eb:4d:46:6c:0e:79:0f:59:0c:3f:d3:95:
67:60:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:39:31 2025 by rpki-client