Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9c10f8e-c1d8-463e-90fc-1c6ec0b349ef.roa
File: d9c10f8e-c1d8-463e-90fc-1c6ec0b349ef.roa (raw, json)
Hash identifier: RH2nSRyBzIz/y2b6ohD3tZuQ6S2ckJdT4ZbRy7SA0Nk=
Subject key identifier: E9:B5:F0:E2:0C:87:37:18:2A:3E:D4:18:C1:87:E1:A3:60:EC:D6:6E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3F292DB92DCF8F5EDEA530DB93A3FD5264BD6770
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9c10f8e-c1d8-463e-90fc-1c6ec0b349ef.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.159.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:29:2d:b9:2d:cf:8f:5e:de:a5:30:db:93:a3:fd:52:64:bd:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=81bedc10c2014927c16d7a21176d25edfb9191fd6d99b9421edb26ee7f2cc8d2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:ea:b5:e3:ba:89:c3:57:70:03:2b:86:f8:
db:23:1c:25:00:de:55:c7:81:de:4a:86:1c:37:b6:
66:bf:fd:1c:a1:a8:a4:63:6c:0f:c1:96:c3:e7:7c:
d0:47:41:d3:fe:b8:63:f7:0c:7a:bb:3f:07:6e:1c:
b9:9b:84:78:ea:f7:25:2e:b3:57:1d:a3:35:29:8c:
b0:44:2f:15:c6:e7:71:e0:1a:24:df:ac:3c:38:05:
c9:10:e1:2e:3e:a4:3b:58:44:10:12:55:69:20:35:
ab:d3:38:ca:67:55:3d:cf:57:f9:1f:be:ea:17:3e:
7a:35:13:e7:0d:36:5c:ec:00:fc:88:35:f5:d6:ff:
69:95:00:9f:b2:d7:3e:13:ff:f0:11:74:5c:7b:99:
a5:89:d6:18:54:fb:65:56:93:3d:e4:e1:ef:7f:de:
05:a9:af:24:95:fb:30:ca:22:cb:98:a0:47:b4:9f:
90:04:30:95:7f:b4:1d:fc:3c:d1:af:a5:93:03:a0:
51:eb:e5:cb:3e:5f:ec:2a:7b:26:42:15:78:ba:9e:
af:25:d5:c5:d2:b1:80:76:a1:c1:e1:7d:b0:19:97:
d3:ee:3c:2a:b9:dc:41:d6:cf:a6:d1:5f:5a:78:ca:
12:aa:69:d9:fb:26:1f:b2:01:6e:9b:a3:ce:a9:ab:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B5:F0:E2:0C:87:37:18:2A:3E:D4:18:C1:87:E1:A3:60:EC:D6:6E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9c10f8e-c1d8-463e-90fc-1c6ec0b349ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.159.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9c:c6:51:42:91:51:39:e1:9a:f2:87:7b:31:55:d5:60:b4:0e:
5a:0c:26:74:64:80:04:c8:31:ad:e4:63:4a:c5:58:49:11:c8:
24:3a:fb:81:4f:76:08:df:62:11:84:4e:a6:dd:c6:21:f4:05:
69:6e:04:98:32:13:3b:28:2a:fd:78:b5:89:c9:7f:3c:08:71:
17:d9:7a:58:d1:a2:03:05:bc:42:b7:1e:58:37:67:2b:f5:c4:
d3:7f:36:0b:60:84:3f:96:8b:f0:67:fd:76:0b:0e:96:50:e7:
0e:a2:ca:83:c8:19:52:db:3b:2a:a1:13:75:2c:7f:83:f7:56:
92:ae:ef:6b:73:b7:12:32:18:12:99:96:b0:45:6a:b4:41:ad:
ff:c3:95:77:a1:5d:a3:e6:ed:b7:a4:91:47:4a:7e:40:1e:9c:
69:39:77:52:f0:17:bd:b7:d0:c2:e2:34:b9:5d:e5:7d:02:2b:
4d:0e:2c:ae:72:1b:9a:b1:af:44:a2:ac:a9:39:b4:da:59:9c:
f8:0b:1b:19:dd:e9:38:5d:8a:0e:cd:78:a8:7e:55:37:62:dc:
29:a4:3f:35:80:b5:23:85:87:b8:27:fb:07:10:04:fd:2c:fe:
5f:61:ce:66:e9:02:08:76:9a:95:52:83:79:6d:3e:48:7e:b0:
be:a8:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:39 2025 by rpki-client