Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/583f33fa-96e3-4b2b-944d-77d688caf668.roa
File: 583f33fa-96e3-4b2b-944d-77d688caf668.roa (raw, json)
Hash identifier: PRMqguX/PRtKJYiq+ujidEv5RXgsv4XPXxVLkmJnM7g=
Subject key identifier: EA:93:C1:12:40:58:6E:61:5A:27:0F:6D:27:31:DB:0B:C1:25:C5:F9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 054D17EE5B93A00C91DCEAD09504652CD0364BAF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/583f33fa-96e3-4b2b-944d-77d688caf668.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4d:17:ee:5b:93:a0:0c:91:dc:ea:d0:95:04:65:2c:d0:36:4b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:79:2f:b0:ca:0f:48:8d:91:2e:50:67:d9:
f3:75:03:04:75:9d:d3:3c:48:a8:6d:8d:4f:7d:25:
3a:cb:44:d3:94:dd:5d:02:8a:31:d4:b3:54:a8:1a:
ed:6c:54:33:c2:87:f4:a7:0b:a0:7e:32:ae:e7:69:
47:d1:e4:27:34:2e:91:cc:2d:52:cb:28:2d:95:a7:
e3:4b:50:18:8d:3f:e9:1a:b0:31:01:06:8a:85:b4:
0b:a7:a9:28:d2:0d:aa:bd:a6:2d:76:56:2e:49:53:
1e:4f:1f:0d:54:36:81:7b:13:de:67:a7:47:f9:80:
d7:3c:cb:1d:4e:c0:01:c8:d1:3d:d0:8a:aa:34:bc:
e2:30:99:33:17:22:9d:89:c2:ab:3b:97:11:75:0f:
d3:56:84:bb:f1:b6:5f:9d:a6:a3:24:d1:ea:87:7a:
62:dd:86:91:b6:24:4d:2f:cf:1a:23:42:59:9a:5b:
fb:f2:ad:7c:36:c2:a9:13:80:80:83:2d:b4:96:92:
1a:a1:1e:51:67:8f:f5:45:89:d2:fc:f9:14:cc:eb:
8b:67:78:ed:fb:ae:c9:8d:c8:cd:72:1f:fc:d8:a6:
37:54:1f:fc:08:aa:ae:61:aa:87:ad:26:1c:7c:aa:
e0:93:d9:50:64:62:e3:35:d3:84:19:4b:2d:50:39:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:C1:12:40:58:6E:61:5A:27:0F:6D:27:31:DB:0B:C1:25:C5:F9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/583f33fa-96e3-4b2b-944d-77d688caf668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.208.0.0/13
Signature Algorithm: sha256WithRSAEncryption
a7:54:af:5f:e7:e8:85:76:d9:78:94:ee:21:25:e9:96:59:a0:
cf:ff:ae:fb:35:08:ec:0c:05:b0:05:f2:8d:0f:49:30:6d:33:
61:e1:5f:09:cb:93:3e:55:23:c1:8c:b7:23:54:75:e1:1d:e4:
91:66:0c:e2:f9:c5:54:22:2e:77:a1:e7:af:0c:2a:3f:a7:87:
18:bb:fe:55:94:30:98:5d:e7:ac:8c:00:78:81:25:50:e3:14:
70:24:da:f3:03:ed:b2:cc:29:c1:36:43:e1:fb:4a:0d:48:d4:
df:52:07:49:6d:f0:c2:ad:e4:2f:19:83:15:e4:f0:61:d9:f9:
f3:fa:f5:a1:65:26:1d:28:6b:c8:8b:4e:8e:66:38:e0:f3:dc:
e0:30:9f:f4:0b:16:2b:86:d4:82:04:f0:d2:86:1b:08:61:4d:
0f:ae:81:b9:20:35:3d:2a:10:cd:51:b4:5b:73:80:db:c7:04:
f0:51:a3:62:43:93:96:e7:8a:45:8d:92:4e:94:f2:1b:1c:e9:
63:a6:63:dc:38:b0:15:27:6f:26:4c:7e:d6:f5:d9:66:15:2c:
21:66:77:ae:c4:46:18:80:50:d4:62:9d:b6:5c:9b:7c:68:75:
a4:01:2a:2c:57:02:28:db:08:6d:7f:7b:2d:03:54:1f:ab:a6:
dd:13:dd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:53 2025 by rpki-client