Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7d7e0b0-9718-4095-a049-9931cd59d09b.roa
File: b7d7e0b0-9718-4095-a049-9931cd59d09b.roa (raw, json)
Hash identifier: XJii7mbRTs6KmDdvxf4hOF5zwVIhnWp3mzq8YkVJp9c=
Subject key identifier: C5:D9:57:B1:3B:08:14:7E:78:A7:F3:05:33:D0:87:F7:24:58:90:08
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 12BE6CE766ABDBC88AD969C4B03DEF72388BDE29
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7d7e0b0-9718-4095-a049-9931cd59d09b.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.237.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:be:6c:e7:66:ab:db:c8:8a:d9:69:c4:b0:3d:ef:72:38:8b:de:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=e804590d14b389ba0a4186a9e17978bc9ef0bba63d03dff045e31777d3502aa4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:36:66:d3:6c:a9:f8:b9:ce:76:91:25:97:
30:e3:94:9c:12:fa:50:73:5c:0f:72:cc:3f:43:47:
7d:39:36:f5:2c:3f:36:05:50:cd:4c:cf:13:10:d2:
2d:6f:ce:6f:37:08:57:19:0f:79:25:85:40:84:c9:
a7:9e:ca:a9:f9:ea:36:9e:af:7f:de:47:a8:5b:ce:
f2:27:d3:fb:2e:43:f7:ab:0c:f7:87:8d:dd:d0:02:
91:80:43:bf:db:34:f3:32:ff:6c:f0:98:b9:d2:e7:
9e:22:9e:de:89:8b:e8:40:d1:be:b4:7e:51:bc:da:
83:c5:17:ef:ef:65:09:4c:bb:72:3a:fb:0e:ee:2e:
a6:56:90:b1:a9:40:b3:82:37:f5:74:aa:08:b1:8a:
b0:42:81:27:6d:00:58:02:9f:df:85:ad:6c:21:52:
48:5e:3d:7b:ae:40:f3:dd:f4:09:c8:66:9e:c9:b4:
0b:bd:9d:2a:a8:de:7a:66:dc:8a:04:05:16:9c:87:
0e:c8:12:dd:9a:52:57:1c:7d:72:e3:bd:02:d0:e7:
42:c8:ba:b3:83:27:f3:44:9c:67:67:2e:05:e8:b5:
52:f1:92:2a:6f:1e:7c:17:dc:45:c0:e1:5e:3e:76:
fa:eb:ae:89:f6:0a:83:96:c1:46:0a:2e:14:4c:2f:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D9:57:B1:3B:08:14:7E:78:A7:F3:05:33:D0:87:F7:24:58:90:08
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7d7e0b0-9718-4095-a049-9931cd59d09b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.237.248.0/22
Signature Algorithm: sha256WithRSAEncryption
31:a9:90:86:58:1f:a5:d0:29:f1:ac:77:01:c2:78:b7:78:66:
1e:58:27:65:81:c7:8f:eb:62:f5:07:80:c4:0f:fc:cd:d5:94:
cb:38:dd:d7:73:84:74:8e:4d:29:fe:9e:12:c6:ca:e9:7c:09:
7a:7f:97:6c:e2:9c:24:15:12:23:26:4d:88:4a:a2:63:2b:e9:
ec:9a:da:ee:a5:e3:d5:1e:2a:86:58:d4:77:32:a0:1d:44:aa:
a7:a0:97:ff:7f:74:80:76:44:5d:37:90:e5:fc:a2:7f:95:47:
9e:b3:8e:ed:d3:a8:a3:56:c0:42:0b:40:49:39:5b:41:3c:1b:
fa:79:b1:fe:54:2e:9c:8b:49:67:6d:21:4f:59:ee:dc:ae:56:
6c:b7:9a:4f:26:f1:8e:8a:e9:2d:53:dd:a7:33:38:b3:33:a8:
1b:4c:10:90:d5:51:b4:7e:c8:60:63:46:14:e4:3f:57:03:7d:
97:da:18:c1:3b:bc:5d:88:5d:3d:59:6d:51:b0:7c:6c:9b:1e:
ad:29:4d:a6:38:29:af:5f:47:ed:59:4e:44:ca:0c:ce:f7:a7:
33:71:61:51:c9:26:6f:b1:34:19:3d:f1:2d:9d:cc:05:8d:e7:
e7:bd:9a:5a:33:6b:a4:96:19:6d:5a:12:ee:a9:5b:4f:f0:d0:
d5:1c:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:54 2025 by rpki-client