Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cc2d0b2-34d2-47dd-84fa-2217fd70cba4.roa
File: 7cc2d0b2-34d2-47dd-84fa-2217fd70cba4.roa (raw, json)
Hash identifier: gS5ueJ23JT23cJBhfzhavF2Srsc7x2rwqC9BgC9GLrc=
Subject key identifier: C4:F1:0E:E2:AE:56:A5:05:B5:23:4F:BE:D2:1D:21:23:2A:46:AE:06
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 55A169D75A2E80A670D28712229A9E4443B07181
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cc2d0b2-34d2-47dd-84fa-2217fd70cba4.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.250.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a1:69:d7:5a:2e:80:a6:70:d2:87:12:22:9a:9e:44:43:b0:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:fd:ca:ae:a8:44:36:5d:41:cc:79:0d:79:
e9:f4:ed:57:fd:a1:7f:01:b4:1f:97:0a:ef:da:22:
7b:c7:05:ed:0f:24:70:90:44:63:d9:3e:ae:0c:77:
30:8d:6b:08:cd:b2:ae:ac:ca:eb:e1:92:6e:3e:94:
96:bc:37:97:4e:57:27:40:07:cb:f3:98:39:eb:67:
15:9c:b1:c2:7c:5f:6e:2f:21:ee:db:25:7f:c2:cb:
79:73:6a:85:ba:40:e7:b4:39:59:83:d4:6f:1f:84:
a1:ad:8a:f7:df:33:21:41:09:49:90:c1:2f:70:16:
f8:34:46:74:2a:1c:e5:c0:88:e4:63:ef:0c:94:a9:
05:e5:e2:c8:8a:0b:0f:58:99:f1:39:c8:bd:65:8e:
ef:b8:53:a0:e9:10:e6:a7:ce:f8:0d:bd:c3:a7:c3:
bb:c8:28:60:c3:f0:b2:34:dc:7f:b0:24:ee:0f:36:
fe:ba:bd:7d:c1:8c:d2:a1:98:e6:5b:d5:27:ad:4a:
ca:15:8f:aa:a3:4d:e5:92:31:ae:f9:54:56:9a:b3:
57:31:b5:9c:b2:54:51:cc:72:ac:46:cc:e6:35:04:
61:10:f6:fb:8a:cd:b0:99:4b:e4:5e:d5:16:9a:a1:
e0:1a:e7:87:e9:86:73:70:55:72:56:c0:a7:51:6c:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F1:0E:E2:AE:56:A5:05:B5:23:4F:BE:D2:1D:21:23:2A:46:AE:06
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cc2d0b2-34d2-47dd-84fa-2217fd70cba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.250.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:0e:e4:fb:aa:81:7a:df:46:17:05:aa:f5:98:b6:8e:36:cb:
34:a5:97:4c:4c:07:2a:51:f2:18:1c:0a:4c:ee:d3:af:a1:5e:
ee:10:24:91:36:9d:42:23:e1:f0:ef:fa:ab:c3:5c:4f:42:6e:
42:e1:d3:0f:bb:0f:20:86:f8:77:f7:fd:ae:08:b2:09:f6:d0:
5f:f8:c1:41:96:a6:42:f8:af:4e:3a:a9:24:f6:b2:52:9c:b3:
dc:fb:a4:fa:88:fe:48:63:6a:1c:4d:fe:b0:0d:f6:ee:71:90:
1a:ac:5a:be:f7:53:3a:ab:a5:a3:af:54:71:4e:39:ce:0a:8e:
13:11:26:db:8b:68:fd:9b:8c:77:19:12:d3:1f:b9:89:82:7e:
09:45:88:0e:5a:8d:1e:a8:74:37:f2:1a:1b:34:24:2a:2f:01:
99:e9:1f:2f:f1:6c:f3:6b:4f:8e:5a:38:1a:6d:bb:09:25:cb:
ab:89:a0:68:cb:cb:26:9a:cd:13:0b:9d:e3:f4:45:cb:ec:a4:
e0:af:0e:fa:be:e4:8c:30:46:56:19:49:17:de:9c:6a:25:9c:
14:1d:42:79:ba:44:ff:bb:a2:e6:3f:7e:7c:c2:b3:48:9e:2b:
04:35:03:0b:9d:0e:8c:66:9e:e0:a3:87:d2:62:4c:a9:f8:3b:
5f:61:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:14 2025 by rpki-client