Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba882d72-ff15-41ad-8899-903b30eb5bce.roa
File: ba882d72-ff15-41ad-8899-903b30eb5bce.roa (raw, json)
Hash identifier: IIGwqU3pGB1RvopePTWP3WHv21hv+oW/mM3iuesdywY=
Subject key identifier: 7C:2A:92:0E:F4:3D:BB:25:52:0F:B6:01:19:23:C6:30:F1:3A:98:B3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 37329B3A1B714AC1556EBBBAE1BDCFE8F96C5BC1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba882d72-ff15-41ad-8899-903b30eb5bce.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.119.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:32:9b:3a:1b:71:4a:c1:55:6e:bb:ba:e1:bd:cf:e8:f9:6c:5b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=eaf14e4fc95c139398e0b72d19ac9ad09580a118f1489e0f0c672e94d601ecf7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:46:52:c5:f8:a1:9c:2b:b5:b3:e1:dc:a6:
6c:22:18:ee:18:d6:73:e2:1e:72:b0:49:40:a0:0b:
e6:c1:61:53:6a:a8:e4:78:37:be:ce:1f:19:8b:7d:
b6:de:da:41:e6:e6:5a:97:13:62:96:fc:bd:47:5b:
6d:32:73:95:a9:73:af:4b:0b:f9:a3:fe:a6:78:4c:
11:34:95:cb:5f:ee:5e:4e:c0:95:da:4d:16:e4:1b:
0a:3f:66:b5:d8:4a:7f:d9:33:34:46:a1:b5:4d:6d:
33:d8:db:9f:2d:e0:ae:72:67:59:ae:95:0a:5d:7a:
a6:c9:17:66:26:93:19:67:c2:8b:0a:11:45:07:9e:
65:04:8e:38:3e:c9:84:f8:d7:db:bb:c4:47:39:01:
40:f4:0d:ef:f0:fa:0f:09:b1:f5:5d:2b:c2:f6:50:
48:6e:39:77:7d:27:dd:2a:c8:39:d3:04:5d:bd:06:
5e:a8:0a:fa:1a:b9:86:17:b2:a5:ca:74:bb:79:fb:
64:76:86:7d:65:a8:b0:ff:87:e1:ae:d4:55:3e:be:
dd:af:5e:98:39:d0:93:64:01:c8:c7:50:9c:97:ce:
93:24:74:f9:46:12:51:e9:72:44:94:ab:9c:e3:2b:
7c:aa:ac:0c:6b:dc:46:eb:33:1d:32:1d:da:77:8c:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:92:0E:F4:3D:BB:25:52:0F:B6:01:19:23:C6:30:F1:3A:98:B3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba882d72-ff15-41ad-8899-903b30eb5bce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.119.205.0/24
Signature Algorithm: sha256WithRSAEncryption
af:9c:dd:fd:1e:dc:9d:41:b6:c9:2e:57:87:4b:6d:48:e2:86:
4d:7a:00:07:53:ad:cb:75:11:d4:4d:4d:24:4a:d2:d1:de:bb:
ce:a2:87:49:f8:15:e0:15:11:82:8b:06:79:63:09:42:9c:f9:
66:e2:b9:29:f4:33:48:d5:36:ec:f6:77:06:39:3a:ed:c7:a2:
28:fc:99:0f:ec:75:ba:64:04:f0:c6:8a:32:2e:42:f4:ef:1c:
b8:32:2c:43:97:af:1f:b2:d6:5c:80:0f:8d:54:68:9d:75:1f:
99:62:c3:18:f6:ba:6b:e7:55:b9:95:18:6a:b2:1a:b1:3b:0b:
9d:38:d2:85:f0:0f:df:0e:39:79:4a:89:14:f3:c3:ad:21:46:
22:6e:5a:e6:98:43:d9:60:dd:1d:3c:22:87:a9:e7:93:bb:55:
2c:ad:a8:49:80:26:d1:b3:2b:5e:53:e2:cd:a9:e0:da:fa:72:
f9:09:76:f2:77:96:1e:f6:98:4b:c9:cf:0f:7f:81:66:d9:a4:
fc:d3:df:ac:a9:3a:58:ee:c6:12:eb:c4:a4:d1:4a:1e:0a:21:
0c:05:cf:df:98:76:ba:24:ee:64:e9:a6:c4:7e:bd:c2:cc:f4:
8a:d1:11:dd:4c:45:86:3a:20:fb:62:39:cc:b6:23:7d:67:cb:
33:88:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:28 2025 by rpki-client