Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7855769-3437-40b2-8e8d-b2138da3a551.roa
File: c7855769-3437-40b2-8e8d-b2138da3a551.roa (raw, json)
Hash identifier: fzXpIsN9JOUxAnkvwjdL+vr3PrAjKu2C0aeFgNgkj+Q=
Subject key identifier: 2A:85:5E:98:64:C2:03:22:AC:1F:6B:03:F8:F9:09:C4:A1:54:3E:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F954B5275FA0C421F9F9697D2B471343784E3F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7855769-3437-40b2-8e8d-b2138da3a551.roa
Signing time: Tue 04 Mar 2025 17:20:14 +0000
ROA not before: Tue 04 Mar 2025 17:20:14 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.46.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:95:4b:52:75:fa:0c:42:1f:9f:96:97:d2:b4:71:34:37:84:e3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 17:20:14 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:e3:aa:66:0a:7f:64:e5:db:ea:71:33:44:
e3:07:60:44:1f:04:f8:27:9b:11:c1:c1:c4:c9:8b:
59:ff:f6:a2:48:aa:ae:df:ca:52:1e:58:7e:7b:9d:
a1:2c:82:07:13:a2:59:39:e6:37:4a:72:66:bd:5f:
71:5c:d8:11:09:23:ac:7b:cc:2a:da:c5:d6:f1:1e:
2f:c9:39:e1:8d:48:04:22:d4:15:d7:ad:59:47:7b:
1a:4d:6f:c9:12:83:42:63:d1:4a:4f:bd:e1:6a:6f:
f4:1d:31:ac:bd:18:18:38:14:c6:b0:08:ca:c3:9d:
5e:1e:f0:2f:97:7b:1c:0f:b0:aa:b6:b1:42:44:b9:
5e:b2:4a:33:b0:37:da:92:3e:d7:ef:aa:3e:1a:17:
1c:92:be:66:e5:9a:14:30:64:85:22:05:d3:e8:c7:
b9:ea:5e:24:5f:17:12:c5:d7:f0:8d:ca:72:af:29:
86:3a:30:4d:30:05:61:e7:96:fd:2c:7b:c3:bd:37:
47:bf:2f:23:94:4a:40:68:4e:ea:ff:a7:16:01:3c:
82:3f:9c:72:a3:46:6f:1c:f4:53:b3:3a:d8:2f:f3:
92:f9:6a:b2:1e:1d:a0:86:df:25:96:06:14:29:6b:
6e:7b:81:7e:45:58:50:32:de:93:3f:2b:f0:61:4c:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:5E:98:64:C2:03:22:AC:1F:6B:03:F8:F9:09:C4:A1:54:3E:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7855769-3437-40b2-8e8d-b2138da3a551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/15
Signature Algorithm: sha256WithRSAEncryption
13:da:bc:99:61:18:17:27:51:c3:22:30:90:da:5e:c6:c0:3f:
e0:31:f5:47:d1:60:51:ef:cb:91:59:65:ec:b6:f7:c8:a3:f9:
2c:49:d9:d7:18:95:5d:ee:d9:a0:37:c4:c9:1f:b7:35:8f:15:
c9:27:ed:47:e7:0d:29:31:32:f7:eb:4a:0f:51:66:9f:8b:f8:
8a:42:a2:3f:23:4b:d8:5b:61:7a:25:d2:c6:28:28:dd:41:53:
f0:0a:87:20:a3:be:c5:55:6b:b0:f5:f6:8e:4d:d2:6e:bb:6a:
58:06:74:40:31:3d:59:9f:df:6a:65:3d:c5:32:c5:ea:29:a0:
e4:d6:ac:f8:b3:42:bb:a8:53:d2:d9:66:41:54:8d:03:b1:ef:
cf:6e:bd:30:fb:47:c1:3b:e7:b2:1a:78:34:3e:38:e0:70:5f:
da:1b:e2:b4:cd:77:31:b4:2d:5d:d2:0a:c5:ed:46:17:80:7c:
8a:32:3e:5d:dd:cb:45:aa:fa:51:01:2d:7f:04:bf:2b:d7:76:
ba:9d:90:0d:50:93:02:ad:c1:08:aa:2b:74:6e:77:a4:11:4a:
5b:4d:1f:9d:0c:46:88:d9:1e:97:65:06:56:25:ad:9a:38:22:
24:5d:90:d9:a7:c6:b5:6b:a4:e5:93:0a:3f:55:ca:80:28:1f:
c3:2a:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:43 2025 by rpki-client