Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa74b400-e329-42cb-bf87-ab4ebaae5e18.roa
File: aa74b400-e329-42cb-bf87-ab4ebaae5e18.roa (raw, json)
Hash identifier: 4Zej141wcyb7FB84o0S6KJjYbgpGYVF9U/M2RbEMYfg=
Subject key identifier: 04:B2:6A:7D:9E:3E:18:71:CA:DA:22:93:B3:98:82:19:F5:C0:D6:43
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5C0B4FBC11A5458047FF7887DBF6DEE67E028410
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa74b400-e329-42cb-bf87-ab4ebaae5e18.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.241.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0b:4f:bc:11:a5:45:80:47:ff:78:87:db:f6:de:e6:7e:02:84:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=fd1cb658abe305e7e495edee8493a011c8a2943f190acc946fee6c39a57417aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:4c:54:54:dd:f6:40:52:c0:15:db:07:b1:
53:bd:ee:bf:c0:8b:1f:ad:98:b0:1f:fd:c0:26:25:
ff:6f:f1:8b:c5:de:bf:89:72:61:dd:59:a1:86:65:
15:93:bc:aa:4c:15:2d:b0:f9:36:f8:aa:20:04:5b:
52:36:3c:b7:a8:65:5a:c4:fd:2c:8c:e4:9b:a3:1c:
88:e0:d0:90:a0:95:f7:d3:a5:a8:9c:51:83:71:d2:
e0:34:60:22:36:69:08:6e:cc:ca:d6:b4:23:aa:de:
3a:b6:09:0e:d0:cc:24:9a:5c:bb:df:3a:59:bc:dc:
ac:8d:7e:87:3e:fb:cd:20:2d:35:d4:53:06:61:7e:
4d:99:52:b2:8a:f0:ed:a4:b6:1f:39:80:17:28:7d:
d8:a2:c5:51:a4:43:95:c3:76:9d:a8:45:5c:5a:d9:
0c:c6:49:26:0d:ef:6a:9e:c0:95:90:11:30:4c:39:
d2:21:b2:51:ab:df:f2:cd:17:c9:a1:d9:7d:ea:9e:
93:2b:6f:ba:41:85:96:4d:a8:b7:b1:96:41:2e:58:
78:bb:9c:ed:53:69:bf:f2:4a:70:f5:27:eb:b1:99:
bc:6b:a1:36:77:5b:d9:22:8b:ac:50:9c:f2:a7:98:
99:36:ba:d5:c6:77:c0:73:84:76:66:a7:8d:e1:9a:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B2:6A:7D:9E:3E:18:71:CA:DA:22:93:B3:98:82:19:F5:C0:D6:43
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa74b400-e329-42cb-bf87-ab4ebaae5e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.241.40.0/21
Signature Algorithm: sha256WithRSAEncryption
27:06:2b:c7:fd:a5:10:ca:e4:6a:d8:14:09:d9:2e:dd:ea:89:
93:d4:55:20:41:a4:34:1e:be:10:b0:9b:a6:45:9d:da:35:1a:
e2:1d:58:99:0c:b0:a6:9b:46:21:33:26:eb:4b:78:40:90:ff:
dc:c1:99:56:41:b1:f3:fc:ea:a6:d7:45:29:fe:13:01:ef:a9:
6e:ef:16:93:62:f1:9f:fa:ab:c1:f5:3d:a5:26:f5:30:37:bf:
48:09:1d:ed:29:0f:be:32:86:3c:38:01:40:4c:d4:63:c4:57:
2e:35:3e:1f:46:0a:51:03:35:df:4a:da:3b:79:61:74:8a:c9:
76:c6:33:e9:c1:55:c6:a7:1f:24:ac:0b:1a:01:2f:a9:19:7a:
7c:c7:a5:3f:c3:70:94:6e:ed:c7:d0:51:70:ef:f2:9c:4e:61:
40:b9:7e:95:1e:dd:92:72:96:64:db:44:68:46:5b:b5:5d:2f:
96:f8:8c:94:84:ee:df:b3:50:1e:f6:00:fe:60:b0:c8:32:93:
7f:14:40:ce:97:ac:ee:49:b7:c6:c0:4b:c1:82:c5:02:c2:be:
f8:ba:17:51:a2:bc:4e:d9:97:81:72:78:f7:74:85:2d:8f:99:
47:d3:4e:4a:72:d4:8a:1f:93:80:12:41:ca:00:37:cc:bd:18:
db:11:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:44 2025 by rpki-client