Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdffb411-66a4-449f-a139-b67509e160f8.roa
File: bdffb411-66a4-449f-a139-b67509e160f8.roa (raw, json)
Hash identifier: c5ipm7Rt3a0tzAvzIPWmwJziEMssgfuPetmL1Vz2vdE=
Subject key identifier: 8A:F3:F7:8B:F3:B1:1A:FF:AC:29:A3:2A:B3:BD:18:7B:08:B4:77:1A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 797E8DA40BA6994A0589CF35B84221528F150CB7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdffb411-66a4-449f-a139-b67509e160f8.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.235.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7e:8d:a4:0b:a6:99:4a:05:89:cf:35:b8:42:21:52:8f:15:0c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=4c7a0c861c7e7c6c509de2e7e42e16d89e607d9bfaf9f2736dbc0176955874cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:be:33:5a:05:ee:d6:97:dd:dd:42:3c:c1:
ec:ff:a3:9a:f3:52:92:83:d0:c0:2e:ec:05:33:e6:
52:0e:f2:26:af:df:5d:69:11:2d:9f:f0:9b:ce:0c:
07:7e:27:ea:49:dd:f3:a6:97:d3:62:49:d2:67:a7:
61:af:48:82:13:c8:9f:e0:c5:f0:46:6d:81:1d:ce:
72:a8:6c:dd:9e:48:3e:88:51:57:05:ba:9b:9e:ab:
bb:3f:3b:98:21:e4:8d:c9:a9:1f:aa:12:15:28:af:
4b:8f:84:76:79:36:8c:2f:66:1e:4f:bc:93:00:f9:
24:cb:e4:d1:9b:f0:d0:11:94:24:5a:dc:79:b3:d9:
0a:89:6b:cf:af:86:1a:29:b7:13:18:ab:31:a4:c9:
05:ce:f6:c5:5f:78:60:13:2a:83:15:d2:8e:73:44:
87:d4:cf:c1:bc:d3:63:51:17:2f:39:0a:92:3c:de:
f1:2d:a7:41:ca:7b:fe:2f:70:a3:b5:ee:8c:c3:b9:
1d:a1:c1:2d:be:96:08:20:9b:41:b9:74:47:2d:bc:
98:c9:b9:ed:e7:40:1b:e2:66:40:9a:c2:48:f3:ff:
b9:b2:c1:7b:d2:94:8c:27:f8:73:12:b1:f5:2d:76:
c7:85:2f:5a:bc:af:8c:78:2f:fc:30:51:c6:0c:b0:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F3:F7:8B:F3:B1:1A:FF:AC:29:A3:2A:B3:BD:18:7B:08:B4:77:1A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdffb411-66a4-449f-a139-b67509e160f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.235.237.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:d2:21:26:ce:1e:b2:a5:3c:3b:6b:3b:94:e6:ef:3b:41:6b:
c5:f9:f7:ea:65:6d:19:97:ac:c6:c6:b7:12:40:d0:ac:de:69:
68:3e:ee:3a:2b:4a:b7:c0:48:7a:b2:35:a3:a3:db:e2:ec:6d:
83:87:b3:d4:27:48:c0:19:ae:e7:53:01:62:f4:06:c4:42:12:
b4:9c:e6:d9:ec:ff:64:02:ab:25:7c:88:09:7c:fe:6a:f2:82:
fd:b3:f4:87:18:00:01:3d:33:02:78:bd:6b:71:34:81:ed:c6:
a0:2d:7b:2f:3e:08:b1:cf:77:90:fd:33:42:57:48:07:04:94:
85:41:5b:7d:04:18:17:90:c8:14:b0:55:f3:1e:9d:d5:43:c7:
2f:bc:2b:19:1f:17:56:ca:a5:0f:ff:e4:fc:f0:62:3c:a5:5e:
7b:40:c9:ba:07:39:24:31:0a:2e:5b:85:4f:56:35:cc:34:ab:
42:69:b5:83:bb:6b:b4:cc:a3:88:cf:0f:f1:15:8c:6c:af:ba:
ed:bf:80:d3:c0:4c:34:7d:77:64:ef:4b:6c:b5:29:15:26:39:
73:80:cb:c6:aa:bd:9d:c3:7e:18:e5:5d:d3:6b:cc:87:af:e5:
e0:e9:0a:75:fb:49:ea:80:1d:8e:7a:b1:8a:d4:6a:f6:2e:2a:
82:6f:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:08 2025 by rpki-client