Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be769b5-eb3b-40f5-ab80-44f3956e35a0.roa
File: 4be769b5-eb3b-40f5-ab80-44f3956e35a0.roa (raw, json)
Hash identifier: u/e4BQT8x6puUY1LExDmSsbduU8IKPHa5qeCOxfD6yk=
Subject key identifier: 98:B3:BA:7E:85:6E:22:52:03:4D:84:4B:46:10:B1:03:6B:2C:66:55
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 17E65CC8741FB77D7B10702DF3674F9DEB0D5BFC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be769b5-eb3b-40f5-ab80-44f3956e35a0.roa
Signing time: Mon 24 Mar 2025 18:31:38 +0000
ROA not before: Mon 24 Mar 2025 18:31:38 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e6:5c:c8:74:1f:b7:7d:7b:10:70:2d:f3:67:4f:9d:eb:0d:5b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 18:31:38 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:19:29:32:48:16:ee:8f:00:4d:9e:b0:29:
db:97:ff:e2:89:18:30:ef:c1:0c:0a:bb:ab:13:a6:
65:4b:2b:20:78:96:db:39:3d:7f:48:b6:6c:09:92:
aa:49:20:8a:2f:b4:5d:c5:62:0e:ce:30:7a:4b:65:
69:a0:68:c5:79:ba:91:0e:53:11:b3:f1:55:c0:f9:
79:eb:61:d9:73:a8:57:58:a7:dd:1f:af:a6:a1:bb:
3e:c1:36:6e:58:0f:38:3b:0e:ac:6a:df:92:b7:7e:
bb:71:89:07:ed:d5:bf:cb:0e:b5:a0:b4:81:9a:6c:
09:e8:17:aa:e6:60:2d:8e:f5:93:9a:8d:4d:b9:77:
05:6a:09:0a:e5:81:4f:73:b9:7f:5b:43:42:24:e8:
e5:d3:34:89:37:57:40:1c:81:25:c3:7d:9b:10:41:
ea:ff:e1:5a:65:12:5f:6f:2e:e6:b8:75:75:93:0c:
63:fd:6a:90:ef:8d:ec:83:ce:90:99:d2:b0:d6:16:
8d:df:7a:77:4a:e2:26:82:2d:1a:c4:71:63:44:4c:
31:7c:9e:2f:ff:00:69:57:d9:7e:fb:28:99:44:b4:
3f:0c:32:29:86:65:6e:96:72:d4:ad:3e:8a:ba:45:
92:40:b9:a2:37:fb:38:07:21:b5:7b:96:56:3b:80:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B3:BA:7E:85:6E:22:52:03:4D:84:4B:46:10:B1:03:6B:2C:66:55
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be769b5-eb3b-40f5-ab80-44f3956e35a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.104.0/22
Signature Algorithm: sha256WithRSAEncryption
09:57:61:45:0f:e1:12:38:89:a8:a9:2a:1d:d9:43:99:ab:91:
85:54:85:65:b3:fc:a0:1c:bb:33:89:f1:97:25:c9:75:f0:73:
03:84:e1:33:27:1b:3d:61:13:44:33:bf:7a:2b:d9:d9:3e:08:
86:b6:e7:20:96:5d:1d:21:14:8a:9d:fe:3c:f3:9b:ef:f5:e9:
8f:2e:da:c5:a0:99:65:86:f6:99:20:95:5c:e5:3c:5b:f2:47:
66:4b:30:ab:44:51:09:10:bc:93:48:ab:5e:33:b5:25:c4:4e:
7f:65:28:9d:70:a5:d6:1c:dc:75:a0:28:18:37:77:17:f7:6b:
26:a2:45:66:bc:0a:d1:ae:21:ab:51:49:c4:5f:35:86:f3:0e:
08:87:9a:b8:97:24:20:88:54:b6:69:95:a1:43:a9:ef:7a:a5:
d1:3b:d4:81:c3:e2:39:98:bd:dd:6b:cf:79:a5:19:a2:be:7a:
9b:76:bf:1c:8d:36:ee:51:26:40:11:7f:12:52:9e:56:ff:9b:
b8:19:ab:c8:b2:05:92:44:45:2c:f2:68:9e:d4:8f:52:df:72:
81:10:49:a3:e8:49:44:3d:1c:bd:44:2b:33:e0:a4:7b:a2:7f:
2b:fa:1b:46:c6:16:84:bf:87:03:3f:7e:97:61:dc:52:1a:5a:
96:96:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:49:01 2025 by rpki-client