Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/369824b3-dcce-4c52-a7d8-cf8bde1aba3e.roa
File: 369824b3-dcce-4c52-a7d8-cf8bde1aba3e.roa (raw, json)
Hash identifier: gGQIXHvXMpR4U/nT7VaBfA7LrMdK+n/7CFDdZpwi1xY=
Subject key identifier: 26:C6:44:84:51:8E:E1:30:40:B2:67:2D:3F:6F:9A:9F:69:E5:CA:49
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0BCEFA793BFB56A531674433F330206A9FB1E0BD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/369824b3-dcce-4c52-a7d8-cf8bde1aba3e.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ce:fa:79:3b:fb:56:a5:31:67:44:33:f3:30:20:6a:9f:b1:e0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:2f:46:94:b3:31:cb:d6:26:b0:c8:02:0f:
d3:a5:da:b5:24:bd:87:00:8e:44:76:3c:e1:f4:49:
d7:0a:53:76:da:8d:bc:57:8c:61:99:5f:75:15:d9:
20:c9:81:84:cb:60:52:84:b8:ad:6c:59:d1:42:d2:
73:cb:44:27:85:dd:0e:4c:54:77:ad:67:15:55:e4:
a6:32:b5:d9:e4:bd:e5:c7:a4:94:77:a5:0f:4a:90:
d1:06:80:6d:70:d3:7a:a4:10:8f:48:31:83:fa:ba:
ba:e7:97:5a:f7:a1:e1:46:66:47:55:61:10:d6:c6:
e0:d4:ba:16:87:51:24:c5:f4:d3:3c:9b:32:02:5f:
c2:0a:b0:7d:84:43:e8:11:d7:9b:0d:b8:10:07:a0:
e3:d6:6d:3b:e5:87:e2:1a:5f:c8:bb:ca:c9:19:e8:
0b:4a:1d:a2:8f:c3:0f:89:47:d2:c7:47:dc:8a:34:
90:a6:5a:52:a5:b5:b2:33:59:a1:ba:c5:7f:9f:42:
a9:86:9e:b3:de:bf:b5:2e:cf:c2:92:6b:d4:97:a8:
08:79:f6:16:eb:1d:98:f6:88:dd:a5:c3:98:cb:03:
90:c2:a9:ba:55:c3:27:61:99:93:85:a3:c0:a0:3b:
5c:45:6a:1b:e8:11:43:eb:26:e3:ab:59:11:24:18:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:44:84:51:8E:E1:30:40:B2:67:2D:3F:6F:9A:9F:69:E5:CA:49
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/369824b3-dcce-4c52-a7d8-cf8bde1aba3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:02:11:cb:50:1f:ae:b5:27:05:3f:6c:81:54:c4:42:93:59:
62:3d:84:99:6f:e5:58:e5:6e:10:1a:39:2a:00:d4:99:db:c8:
f1:69:21:73:27:fd:71:c0:03:25:b3:1b:a7:d7:f8:0a:a3:39:
49:78:5d:67:5f:4d:13:b1:cd:52:7c:26:04:20:90:6d:71:04:
20:af:8f:e6:0d:ee:20:a0:63:5a:be:6a:02:7b:b3:a4:42:34:
1a:28:9c:cf:35:15:7b:b4:fd:3e:65:64:89:f9:64:9e:39:85:
df:eb:c2:f8:3f:6d:77:47:73:6f:69:0b:46:4c:ae:56:a5:49:
f5:9e:d3:c6:08:b2:02:b3:4d:95:70:80:4d:1b:11:5f:05:43:
fb:c7:6e:2c:43:65:c1:dc:40:07:aa:bf:9e:ed:6b:7e:89:c8:
ee:59:5c:8a:b4:91:4e:b4:1f:40:f4:61:8c:6f:0e:87:4d:a8:
47:8b:be:1c:f2:8a:69:83:a9:eb:f6:a0:e3:a2:6a:a2:47:dc:
b4:fb:dd:8e:9e:ab:48:b0:4e:77:07:06:c7:7c:0b:1f:12:13:
1b:04:a8:5f:ab:01:19:87:88:3c:2d:43:35:62:ba:6e:ba:57:
38:c1:7b:24:2e:7b:76:4f:4d:a3:bd:d9:a7:9c:02:ca:4f:12:
ee:40:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:32 2025 by rpki-client