Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6b268ea-3758-4d73-a482-a11b7cfba687.roa
File: e6b268ea-3758-4d73-a482-a11b7cfba687.roa (raw, json)
Hash identifier: HQNqfMe8xJFxN2UV2s9InWT7pgdJb6JRRoG1GVPuz+I=
Subject key identifier: 7C:1E:EA:EB:02:29:92:65:89:16:3A:5B:F8:4E:D0:E5:5D:8B:4B:72
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 34AFC88F44C1742777372355800803CE798718C2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6b268ea-3758-4d73-a482-a11b7cfba687.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.236.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:af:c8:8f:44:c1:74:27:77:37:23:55:80:08:03:ce:79:87:18:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=87dd4e57a2408f753d458c68e2bbb0b84c4f4a5e923f09a9f560eb88437a0652, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:f7:fc:69:3c:4b:99:ba:32:82:93:34:49:
88:7b:03:9e:d3:e4:22:1a:21:73:df:45:e4:5b:16:
52:c9:b9:65:53:7a:1c:07:02:27:e7:7c:63:a7:a6:
e2:e8:f0:45:f9:13:b2:8b:57:74:d4:74:eb:54:4d:
98:46:92:e9:d8:a2:27:1c:bc:91:71:38:7f:24:02:
37:61:8e:5c:9f:64:98:56:a8:0b:a3:fe:a5:99:c7:
f9:db:05:da:d8:09:fe:fb:0b:6d:a9:fa:5b:d0:ef:
da:d4:8a:89:6b:f6:2c:bd:17:fa:6a:f6:c7:d7:36:
d1:a4:3c:49:91:8f:01:14:76:4c:bd:81:3d:fc:2c:
00:a9:fd:69:b7:6a:da:df:d2:4c:55:ea:e8:c8:1f:
e3:7e:ef:7f:04:9a:bb:20:32:d3:a4:a2:10:40:37:
d6:51:2f:54:5b:b4:bb:50:b1:be:0d:c7:4c:82:8b:
50:cd:81:69:67:38:1c:dc:63:0c:f9:15:cc:96:88:
b3:fb:ab:7f:76:69:1c:27:f9:43:45:ff:9e:c7:23:
fa:13:ca:51:a4:64:88:52:aa:a2:42:c4:a4:7c:c2:
b2:78:2e:a1:b1:11:60:15:d3:d7:42:60:26:c8:7f:
18:27:90:9a:c6:92:d6:df:07:14:63:56:ea:bb:7a:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1E:EA:EB:02:29:92:65:89:16:3A:5B:F8:4E:D0:E5:5D:8B:4B:72
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6b268ea-3758-4d73-a482-a11b7cfba687.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.236.64.0/18
Signature Algorithm: sha256WithRSAEncryption
55:38:7f:d0:8c:d2:0f:59:1a:da:9a:af:82:b2:ed:5e:72:0e:
02:8b:05:c8:4e:13:d2:12:5a:3d:cc:52:f0:98:cb:14:e9:b6:
2a:f0:51:a1:79:eb:9a:d2:5c:33:d2:ca:70:70:b9:ab:1f:5b:
31:4c:82:e0:eb:bc:6a:d1:dc:99:4c:25:25:a3:20:95:6b:80:
8f:7b:2b:f8:b1:46:c4:ae:bd:90:26:67:1b:19:9b:77:d6:c1:
dc:34:82:4a:16:bf:55:e1:2c:17:dd:92:49:97:00:13:ab:3f:
ea:c1:d4:92:8c:93:d3:67:16:7c:09:f5:5c:cd:78:11:75:2e:
c3:b0:25:fe:2f:d4:12:09:fe:53:5f:f9:af:38:7a:bf:8b:42:
ae:77:76:8e:a4:00:cd:cc:fd:24:32:4c:26:9e:14:d2:62:a0:
72:b0:f9:39:6e:5d:d4:10:cf:2a:bc:8d:65:e4:dd:51:4f:69:
b5:f5:3c:34:61:88:fc:3e:a1:f3:6b:a2:b9:64:3c:fd:d9:e6:
7b:4d:bf:ba:cc:fe:fd:20:c9:50:14:18:80:8b:fb:67:15:8b:
91:3c:ef:23:8c:7d:bc:32:46:7e:8f:95:7a:67:f3:85:54:4e:
43:75:f7:22:14:2d:80:c4:2c:fc:56:0a:49:8c:c3:d0:21:7e:
82:7d:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:07 2025 by rpki-client