Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae67e5e6-bedf-4a62-bfbc-987b7fca6fc0.roa
File: ae67e5e6-bedf-4a62-bfbc-987b7fca6fc0.roa (raw, json)
Hash identifier: x0peF8Q1d6Dwwri6cEnfjkMxgp56CQnZZLoyemvCtHk=
Subject key identifier: 05:88:04:75:30:E4:77:D5:0F:61:9C:1C:EB:66:BD:05:DF:3A:C8:44
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0E50E0EA62DD4DE1149A8963C012AD2E6EFAD382
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae67e5e6-bedf-4a62-bfbc-987b7fca6fc0.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.197.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:50:e0:ea:62:dd:4d:e1:14:9a:89:63:c0:12:ad:2e:6e:fa:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=6ea5efb511f1ba43d2e8a761b4c47d4d5d41504def397147f14bf246ac8b83a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:42:e2:2b:9c:a0:79:f5:4a:ea:41:d2:06:
f2:47:9c:48:82:c8:0e:80:0f:f1:25:10:29:49:a6:
15:d6:0f:38:75:af:82:a3:7a:0b:2b:c9:a6:31:b5:
b0:4b:a6:9b:ad:ab:a8:ef:aa:10:fb:75:e5:77:f3:
e5:4a:fa:d4:a7:95:b2:33:e7:35:54:17:0a:09:05:
ee:4f:8d:d2:53:64:fd:62:55:9c:35:c3:18:47:d0:
88:af:0d:c0:1b:3a:5e:4e:56:e3:90:ef:41:06:a8:
68:78:f4:a5:27:ce:89:ad:67:86:91:e5:83:93:4a:
af:f3:d9:66:29:ec:97:25:20:e8:9a:51:fd:7a:8d:
57:a5:5a:72:6c:e4:33:2b:0b:e0:cc:0c:24:1d:a2:
e5:88:82:fd:d7:3e:a1:3b:29:2b:c4:f6:ab:bf:0d:
1d:50:94:d3:9f:c1:0e:db:83:4d:9e:43:85:9a:d4:
40:99:db:e3:95:85:e0:da:cb:7c:61:7c:f4:35:8a:
18:c2:45:ad:77:18:54:7d:43:93:fa:88:9f:9e:d5:
87:0f:c5:1b:16:c5:c5:b0:74:2b:d6:a9:20:29:ee:
87:72:24:5a:0f:8a:b9:95:38:f6:ae:de:61:82:28:
9f:01:e9:6c:bb:4c:95:c2:72:3b:06:cf:ef:ac:49:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:04:75:30:E4:77:D5:0F:61:9C:1C:EB:66:BD:05:DF:3A:C8:44
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae67e5e6-bedf-4a62-bfbc-987b7fca6fc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.197.64.0/18
Signature Algorithm: sha256WithRSAEncryption
54:b9:42:27:5b:55:e7:39:a9:8f:d0:f6:df:37:6e:39:1f:44:
93:69:86:4a:96:7d:a7:7a:3e:aa:3c:3f:6d:73:53:d4:1f:da:
9b:89:1a:9a:db:d7:40:7b:14:fd:af:63:3e:14:9c:cc:e8:74:
ad:e4:4a:d6:e9:a5:b4:cd:d0:16:59:84:ca:8f:b0:7d:17:24:
7d:d1:d7:e4:d5:ea:f0:8e:8e:7f:ae:b3:07:3e:82:28:24:3c:
89:fb:54:d5:e3:17:14:84:2e:b8:19:fb:b4:5e:e6:e5:ef:44:
87:ef:f9:9a:1c:e3:01:08:43:88:2d:97:e2:b7:26:11:66:54:
06:85:2f:a8:6a:9e:cb:b8:3c:21:81:6f:6d:fb:0a:98:ea:54:
5d:c0:d2:3f:f0:77:16:d2:ec:54:50:31:6e:e0:db:bd:2d:44:
84:a7:19:b3:02:9b:6a:c0:e1:ca:7f:f8:01:d8:b4:6a:25:53:
59:44:c3:07:67:ca:41:10:cf:a2:b8:1c:de:42:b8:a2:55:43:
66:ce:8b:6d:43:72:97:69:ff:51:ff:4b:ca:ea:1e:ad:e4:65:
07:e7:fd:c0:6c:36:06:5d:e5:a9:ef:b9:d0:18:91:e5:0b:1f:
1d:64:92:f1:70:01:db:34:0f:e1:a5:f0:04:eb:14:b9:b0:3d:
7d:2b:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:29 2025 by rpki-client