Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec07c45-8e83-42f9-9024-711f7c5a98c4.roa
File: bec07c45-8e83-42f9-9024-711f7c5a98c4.roa (raw, json)
Hash identifier: tHU64zY8bparqHO+pdFvZ1KQNLKv9Y4QpO+QrXAGBUU=
Subject key identifier: DA:70:D9:53:F6:04:D5:F2:F3:5A:27:2E:90:B0:99:16:A0:E6:1C:FD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 652E106EF04E98068E87D9127A4EAE1D423D7C20
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec07c45-8e83-42f9-9024-711f7c5a98c4.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.232.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2e:10:6e:f0:4e:98:06:8e:87:d9:12:7a:4e:ae:1d:42:3d:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=4482ae48ce62436f239a314c7c08c6c77fec8c476b13fe7fd55f6367bd88dfee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:f0:f7:26:48:62:48:fd:48:60:dd:e4:95:
d0:bb:fc:f4:42:7b:ac:c5:3a:ef:f1:b0:b7:a6:3e:
82:90:02:cf:35:0e:54:ab:0f:b4:22:a7:cf:91:a8:
b9:1c:58:2f:fe:9f:4e:8d:2f:18:30:e9:b2:a7:b5:
32:a0:02:b4:44:46:1c:78:b7:d2:6b:48:9b:98:39:
97:8f:16:e5:f1:3e:12:e8:85:00:00:f1:e5:60:03:
f2:3a:ab:d6:7a:2f:f6:a9:d8:a3:c4:fb:fb:54:f4:
9e:d6:7e:78:a2:e5:9a:e7:f1:aa:f1:d1:b8:30:f1:
79:3e:78:eb:9d:e5:9e:25:a7:c1:65:81:08:d4:14:
93:06:d5:f4:3a:57:bd:49:cb:6a:35:91:58:62:65:
bc:e1:23:6c:e1:57:64:b3:2f:7e:3d:ba:1e:0b:71:
05:7d:2f:04:e0:65:3d:16:05:6c:e6:77:44:1c:99:
97:a9:96:c1:ed:31:d0:df:7c:25:74:c9:40:13:c6:
05:5b:ee:02:d3:79:d5:1a:b6:8b:3e:50:c7:57:3a:
d9:e3:79:4d:63:40:26:09:3b:83:d6:cc:4e:c9:9a:
7a:52:71:1d:44:48:9b:54:9e:fc:92:07:44:1a:95:
c6:9b:85:8b:ad:92:9b:0c:82:0f:a1:7e:75:96:21:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:D9:53:F6:04:D5:F2:F3:5A:27:2E:90:B0:99:16:A0:E6:1C:FD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec07c45-8e83-42f9-9024-711f7c5a98c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.232.32.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:f3:0b:1e:34:1b:5b:20:bf:a1:f4:77:67:98:7a:7b:ad:38:
e6:f4:fb:fa:bf:94:1a:e8:28:60:6e:72:71:00:ef:53:61:bb:
f5:27:e5:d9:8f:60:d5:b7:cc:b2:a9:9b:7e:17:a3:91:db:86:
0a:fd:6f:1d:4c:92:05:56:af:ed:7b:a7:a4:ac:b9:69:4d:e8:
73:eb:b3:aa:39:20:91:28:d5:30:0c:55:a1:74:10:51:d8:b5:
fe:a8:f1:50:a0:86:e1:d1:03:8a:7c:b3:87:a0:30:d8:f7:01:
29:d7:8d:0c:f1:dd:1b:84:5d:e1:6b:f7:3e:86:c8:21:33:0d:
c9:07:6c:d0:8e:a1:65:87:34:99:db:1d:5b:02:d0:91:ad:c5:
4d:db:7a:a0:6b:78:dd:68:1e:89:3d:c6:56:09:f1:4d:50:5e:
a4:05:46:dd:02:03:10:6e:47:eb:77:89:0c:82:8a:3e:fc:9f:
60:4b:2b:de:a8:cf:7b:2b:ba:5a:9b:ee:93:4c:ad:11:3b:10:
51:76:66:0a:2d:57:57:22:dc:f3:4f:eb:f7:15:93:71:25:6b:
02:00:58:b7:56:ff:3f:e5:e9:93:19:49:d6:c5:f8:3e:61:38:
18:67:b6:a8:75:39:ac:0f:30:cd:ab:7e:a0:04:48:b6:06:fd:
5c:fb:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:16:54 2025 by rpki-client