Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa
File: bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa (raw, json)
Hash identifier: WCVktoxlUG0IFnyAXsuyFJ3ppFe1NB9LCoM8CBzmwfc=
Subject key identifier: 3B:80:8A:66:74:EA:12:59:E5:40:8E:83:73:2F:0F:01:59:F3:90:72
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2FE6BBC3FB281517E9D6AF215A328716E7399C2F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.195.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e6:bb:c3:fb:28:15:17:e9:d6:af:21:5a:32:87:16:e7:39:9c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=c6359912e69b0581354ddc3cff9feb0ce268a22de5e29784f1b8054e9fc81bf8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:51:94:e5:f6:9a:a2:ff:1d:cc:47:ec:01:
2f:7d:a5:3f:57:9c:50:b3:cc:7b:51:d2:5d:7c:60:
00:ea:f5:27:f6:91:07:81:fc:76:0d:41:63:fc:e8:
38:1d:50:6d:cd:6a:3e:49:c9:4c:56:f2:6d:03:27:
c9:d4:89:e0:40:7b:a7:64:ef:12:89:ca:03:3b:d9:
b7:5b:80:d6:f5:d6:8b:60:75:9d:0e:c7:37:17:15:
6b:f3:78:20:87:83:18:49:7e:f7:c7:d1:c3:91:5e:
02:b2:6b:ae:4e:7f:90:7e:77:80:4a:54:61:e0:c8:
9a:97:66:5c:03:d6:f1:a0:82:86:8e:3a:94:21:e4:
df:3a:42:fe:9e:c5:c6:d8:22:9a:b1:ab:a0:66:db:
7a:a5:1b:fc:43:65:13:3a:03:49:c4:2d:32:c7:df:
00:32:38:86:70:f1:de:37:8b:62:2c:8e:19:c6:98:
58:d9:13:95:84:d7:ca:88:96:34:c4:32:a7:b0:ee:
f2:79:98:dd:38:48:72:e4:f1:08:ee:60:78:c7:97:
bb:90:86:48:b7:a3:f3:e6:88:e2:dc:7a:54:22:a8:
9c:2e:42:5f:29:3b:e2:9f:c3:91:2a:19:31:54:24:
18:66:ea:97:c9:13:27:be:61:b5:41:c3:b7:8b:81:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:80:8A:66:74:EA:12:59:E5:40:8E:83:73:2F:0F:01:59:F3:90:72
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.195.232.0/22
Signature Algorithm: sha256WithRSAEncryption
46:5c:22:32:be:a8:cd:15:8a:d9:86:49:ac:1f:15:3c:74:dd:
4f:5e:fe:ee:d8:a7:b9:38:40:c7:d2:70:4b:fd:c6:91:e0:e9:
a3:7a:dd:f3:c1:43:c6:2a:c3:25:4a:48:16:6d:7a:73:0e:5e:
2d:9e:5b:56:de:38:77:a8:54:23:3b:6d:20:33:f5:8e:ba:4f:
57:5f:3a:6d:75:7a:49:dc:c6:9d:93:36:3b:45:22:3a:55:06:
d7:ff:e0:f0:45:da:de:8f:9d:a2:0f:6d:47:75:a1:ae:79:30:
40:dc:e1:1f:c8:8a:96:d0:3d:37:e4:99:4b:67:a2:1b:f0:c2:
59:de:6a:09:01:9d:10:80:89:8a:f5:ee:c9:3f:34:7f:70:c6:
bd:9d:c6:9d:77:97:3a:34:c1:8a:77:20:71:ad:2e:87:65:e8:
64:65:32:5e:e5:99:58:08:42:7e:9a:80:63:b5:77:e5:ba:0b:
47:9e:3a:8d:a7:5c:e9:c7:d5:8f:ae:25:05:ef:41:ea:d5:48:
6c:69:1f:b9:98:d8:85:5c:bf:6e:85:fc:80:2d:13:7f:c2:9c:
d6:3d:b2:f4:ca:7e:fc:64:12:1e:da:97:bc:3c:04:5b:39:c9:
70:83:09:e2:98:57:76:b3:52:09:00:3e:2a:a5:45:c9:93:e2:
70:00:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:28 2025 by rpki-client