Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/728f3254-222e-46e1-8e51-c69d5872ec3b.roa
File: 728f3254-222e-46e1-8e51-c69d5872ec3b.roa (raw, json)
Hash identifier: Tr9FDRnHunG/ZA3aBmskLlS7fgeZiF5VNJm/IrwcDVw=
Subject key identifier: D2:18:E0:89:60:44:BB:79:7B:7D:E7:31:84:74:96:D8:DB:FE:C6:15
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2E63F8F3C3EE913ECEFB35E099744A9BB3B1A3EC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/728f3254-222e-46e1-8e51-c69d5872ec3b.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:63:f8:f3:c3:ee:91:3e:ce:fb:35:e0:99:74:4a:9b:b3:b1:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:13:71:79:02:08:13:ad:72:2c:ae:64:fc:
d9:35:22:88:89:22:d9:53:b5:e8:d8:65:a9:6a:fc:
51:42:70:cb:7e:55:c3:db:2f:c8:f5:f5:49:5a:bd:
0a:86:cd:f2:1e:55:d6:d3:a8:93:7b:84:9b:1d:f0:
a6:a5:85:e2:c2:cc:36:85:c4:16:08:53:e7:c0:4e:
02:c6:50:1c:47:77:41:4a:cd:c7:95:e2:6d:77:4a:
c4:f7:4c:51:b7:f4:34:9d:aa:a1:04:4e:52:d5:19:
df:a5:7b:64:e7:8d:07:e5:e6:af:03:b8:12:6e:e5:
aa:27:6b:f2:3d:c4:a3:6e:40:40:d5:ec:92:5b:46:
b3:86:11:84:0c:28:94:da:86:09:65:6e:f0:3f:30:
48:67:53:1e:5f:f3:43:a1:67:90:a5:33:c4:27:4f:
d8:43:85:87:f2:9b:cd:f2:7e:ff:a6:a9:de:9b:f1:
11:c2:1a:b8:10:67:41:b8:ed:25:52:32:97:82:c0:
c0:30:ab:ee:ea:70:4f:d8:1f:de:58:ce:a3:be:58:
d8:2d:31:ab:f9:e9:b1:b5:8f:03:ec:84:08:1d:2a:
74:ca:a8:4b:b9:b9:dd:3d:4c:2a:c8:c3:a8:60:9d:
8b:c1:e6:8e:ff:09:45:bf:8f:40:e8:ef:34:11:22:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:E0:89:60:44:BB:79:7B:7D:E7:31:84:74:96:D8:DB:FE:C6:15
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/728f3254-222e-46e1-8e51-c69d5872ec3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/21
Signature Algorithm: sha256WithRSAEncryption
85:7a:c4:b1:78:7e:b5:24:74:85:72:83:ca:95:1a:e3:d2:64:
52:21:62:56:39:e4:30:e9:52:b9:78:3c:bb:5c:4e:29:10:8a:
76:f7:6f:62:16:d7:23:ca:e8:b1:95:38:28:49:26:b1:36:7f:
a3:19:c8:e4:86:71:0f:a5:0f:10:1a:c2:f0:dd:d6:44:b1:4f:
6a:81:24:aa:95:ac:12:51:2d:20:65:57:d7:cf:4c:a2:4c:ac:
ba:e0:3b:55:71:c6:ab:49:50:0f:1e:a2:1d:87:b5:3d:10:0f:
bb:9f:72:7d:c0:47:73:b3:cd:d6:cf:4a:ac:88:a1:c4:fc:7b:
a2:d0:75:77:75:a8:18:a0:49:33:fd:5f:1b:80:92:0c:4d:82:
0c:c6:7c:97:fc:96:90:68:20:41:b6:b5:63:df:c2:db:c6:fe:
3b:02:13:c4:00:c6:c2:24:54:56:2a:29:f6:1e:94:91:70:2f:
72:b5:67:51:81:c7:bf:d3:90:ff:f9:c6:f9:a3:25:3c:2a:25:
e8:02:a0:d4:dd:5a:12:de:ea:81:1c:7e:69:0f:88:10:f5:6e:
5f:8a:6e:b5:c0:0a:df:a7:b7:0e:85:c8:ed:fa:fb:40:75:fd:
de:b1:42:8a:ef:42:31:e8:67:62:12:97:8b:32:7a:f8:b1:4b:
ed:4d:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:24 2025 by rpki-client