Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e03e32ec-8789-4cf2-bfed-d7cd78680a41.roa
File: e03e32ec-8789-4cf2-bfed-d7cd78680a41.roa (raw, json)
Hash identifier: ra8K8cSv5JsmesHKQE/b408jE4wyjnB0I/zoBQqe8S0=
Subject key identifier: F0:04:30:7F:B3:58:50:2B:A0:06:6B:AB:1E:AC:77:17:AC:AF:0D:E8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3E4994E2D056D38CBCBCE70A87FFD1C1842BEB55
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e03e32ec-8789-4cf2-bfed-d7cd78680a41.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.82.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:49:94:e2:d0:56:d3:8c:bc:bc:e7:0a:87:ff:d1:c1:84:2b:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=10f745bd0d3c3030b7dbb05848d74dc3edb1dde14f8650d2a8da598d3bc63011, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:ba:b7:88:5c:f7:f9:8f:e3:0e:5c:54:ff:
37:39:d7:dc:a7:ee:60:38:8b:61:bd:c8:07:a5:66:
6b:d7:ca:b8:20:c3:f8:f8:72:5f:a5:ec:69:b2:1c:
c6:87:05:01:00:ab:7a:09:1e:66:3b:1a:ee:34:5a:
3d:4f:ba:40:83:fb:41:e6:de:9f:85:6d:3b:c4:a1:
c0:72:76:52:44:9f:3e:7d:1c:5b:56:ef:c9:f7:29:
d9:37:4f:61:69:50:c7:1b:0b:ba:36:70:87:54:ee:
ab:58:9a:a1:57:20:95:bd:f0:5d:57:07:dd:71:3e:
39:91:5a:ee:c9:c5:9a:e5:53:7c:0a:8a:ef:7c:9b:
c0:0e:ab:61:5b:6b:61:66:1c:09:d6:cc:65:71:3d:
58:7a:66:4c:d7:0e:57:79:cb:5c:4c:0d:a9:5c:fc:
85:74:4d:26:e0:72:ed:ae:28:09:df:d7:92:1d:cf:
ac:8e:94:e4:eb:57:ce:c0:7a:32:1f:99:e0:84:25:
09:94:d1:c4:8f:72:b3:f9:6b:a0:e5:00:9a:63:f8:
8e:75:4d:c7:3d:a1:af:74:07:54:36:c1:36:d6:da:
b1:ec:7a:d2:6c:23:a5:20:c9:b0:a7:10:31:b6:86:
66:c7:d0:81:17:ae:9f:37:a8:f3:9f:2a:29:d4:76:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:30:7F:B3:58:50:2B:A0:06:6B:AB:1E:AC:77:17:AC:AF:0D:E8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e03e32ec-8789-4cf2-bfed-d7cd78680a41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.82.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1e:a3:9f:45:df:ce:89:7f:94:1f:12:ac:68:70:49:ec:5b:
40:26:8c:1b:af:0f:6f:fd:3d:7a:4e:5e:fd:12:ea:53:a8:ef:
37:a8:5e:e4:a0:f2:c9:e8:55:c6:73:e6:22:4e:16:b8:58:81:
be:f9:ac:cd:b1:0a:00:47:70:db:3e:6c:c9:f5:5f:46:eb:34:
00:7f:e7:2f:20:48:b2:11:46:59:04:b6:14:a5:e5:ac:b9:3d:
63:98:84:31:c0:97:69:52:67:87:ba:51:e2:7a:f2:3b:5d:13:
d0:9f:c1:7f:01:31:81:16:49:5f:2e:4d:ff:4f:3c:7a:e4:96:
01:21:ba:b4:65:2a:a4:13:7b:86:e6:23:3b:27:e7:06:43:6f:
c5:57:13:5f:7b:e1:48:06:5c:a5:71:26:49:ec:85:ff:7f:dd:
83:65:3d:53:35:be:d8:c2:23:5a:5c:cb:65:90:c2:fe:b9:47:
29:76:13:29:71:e4:6a:4b:e6:0b:e1:38:29:a4:5b:d8:1c:e2:
a4:5d:66:58:9d:ed:42:ea:ba:28:40:7f:bb:22:be:d6:aa:64:
c2:d6:be:e9:9f:b4:ee:24:2f:eb:59:33:38:f7:68:a0:70:aa:
1f:19:0a:7f:ef:ab:8c:ba:9b:b6:c0:63:bd:1e:59:77:1c:00:
9e:e5:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:46 2025 by rpki-client