Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b892c8-2081-4197-8610-abaae0f56b66.roa
File: c5b892c8-2081-4197-8610-abaae0f56b66.roa (raw, json)
Hash identifier: 94h0Q3W/RU3xOjpuKCcdfoUIS1B2d0pQ0JhsNVUoSic=
Subject key identifier: 80:C5:25:35:07:48:D5:71:CC:3C:0C:76:AD:1C:C0:1D:6E:AF:51:5A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1D5838353F7A252696B109EC0B939954014B586E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b892c8-2081-4197-8610-abaae0f56b66.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.32.0.0/11 maxlen: 11
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:58:38:35:3f:7a:25:26:96:b1:09:ec:0b:93:99:54:01:4b:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=293b6c419d3b19f242353e6ba316cde6a14ff98f3f5b659d7bbdccebbacf56f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:c0:92:63:d2:8c:fd:41:0a:4f:8e:1f:ba:
8f:eb:8c:82:8a:00:b3:46:82:aa:64:45:91:06:11:
2e:2b:c4:73:bf:73:b6:00:44:01:17:28:80:30:23:
26:26:39:41:80:3f:47:be:7a:6e:b3:c8:74:7c:35:
3d:4a:cd:1c:5b:dd:70:b0:ab:c2:91:84:99:0f:10:
a7:42:d9:18:b0:5c:41:0e:bb:7a:be:1c:3d:f3:4c:
01:53:07:81:7a:07:5b:53:f9:b0:70:9d:e8:ac:1c:
52:13:7b:a4:75:9a:d7:19:37:33:b5:86:18:57:16:
a9:bc:73:4f:34:74:e7:85:e7:71:90:f5:fe:a3:c1:
77:4a:93:52:b1:65:c9:31:e9:f2:b8:5c:e2:6f:24:
9b:34:7d:cc:eb:38:23:4a:31:8e:f1:f3:59:85:ac:
87:e6:ea:02:f2:78:a3:24:15:a8:82:82:c6:c0:9b:
01:ad:cb:0d:d9:22:b5:d9:1b:af:02:87:bf:13:16:
34:7b:76:44:b8:86:4c:96:66:98:ad:aa:76:70:b7:
21:5d:65:0c:6e:ac:e8:6a:fb:d8:e6:fe:f6:33:58:
31:c7:47:1f:73:45:57:eb:41:a2:4d:77:54:18:46:
72:21:9f:78:c2:58:1a:1c:e5:eb:dd:0d:68:af:9f:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:25:35:07:48:D5:71:CC:3C:0C:76:AD:1C:C0:1D:6E:AF:51:5A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b892c8-2081-4197-8610-abaae0f56b66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.32.0.0/11
Signature Algorithm: sha256WithRSAEncryption
24:7d:90:9f:02:bd:63:c5:c5:b0:39:74:35:2c:72:03:9c:0d:
16:52:06:6e:26:2f:b5:66:d6:57:0d:f3:7d:40:37:d9:9d:e7:
a3:c9:5c:7d:aa:49:d3:c7:a2:ba:57:9d:e1:1a:3d:17:46:b7:
ad:00:cc:34:b1:61:e2:f3:1c:8b:06:1a:34:33:32:41:39:cc:
21:e1:fa:15:41:65:98:b5:2e:96:10:e8:cf:07:27:1d:19:ab:
54:50:07:b0:b2:35:6f:84:89:46:66:2d:c6:0d:53:21:01:e2:
24:00:17:ff:f4:a3:1d:c8:9e:ce:6a:0a:d7:01:59:23:92:eb:
07:d4:32:e2:e6:fc:f6:51:ad:85:c0:e6:df:d0:20:96:e5:86:
3f:11:fd:2c:88:da:2a:05:14:28:93:e3:2a:c6:5a:94:92:37:
17:47:bb:4c:2c:3d:c8:01:69:f1:f2:ad:34:56:0f:c0:df:88:
8c:36:70:53:a2:b3:2c:c4:8a:c2:81:4f:77:d0:23:1f:7b:4e:
e5:4b:b3:4c:55:cf:5a:c4:eb:bf:a2:2b:eb:00:06:de:0f:6f:
ca:3a:93:22:c5:62:ba:ff:79:2f:8f:45:4c:bc:9d:c0:15:5b:
e8:7d:db:33:86:40:c6:84:63:19:67:68:85:a4:5d:8e:a6:f5:
dc:1d:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:10 2025 by rpki-client