Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dc0433c-cfe0-477e-936f-17b8022e341f.roa
File: 8dc0433c-cfe0-477e-936f-17b8022e341f.roa (raw, json)
Hash identifier: gpdArBN2HZhQ7FdjNkR4K+UmEFUYbSG7Z912l3zOx7I=
Subject key identifier: 5C:CD:41:64:4F:85:BC:C9:AA:10:49:28:57:41:3E:B6:FE:48:05:EA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0DB091B94B39A4FDEBB92600435B47DAEDDB12A6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dc0433c-cfe0-477e-936f-17b8022e341f.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b0:91:b9:4b:39:a4:fd:eb:b9:26:00:43:5b:47:da:ed:db:12:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:42:8a:41:ee:ab:7b:84:d2:b6:d6:c4:b3:
58:b6:da:47:6a:c1:9f:a7:d4:bf:e1:6e:f4:e4:78:
59:4a:81:b4:10:5f:5d:0b:52:94:ab:a9:e7:79:34:
4c:bb:e4:96:84:5c:3b:9a:cf:c1:b6:1c:7c:ed:f9:
9c:ec:06:c6:ee:5e:7a:ff:be:92:50:19:fb:36:7c:
9a:a4:ac:e8:4f:0b:52:37:e0:af:89:b3:d8:58:c5:
94:56:52:92:4b:ed:55:07:6b:bd:0d:e4:3c:7b:cd:
f0:8e:52:4c:7d:78:bb:6a:73:b3:7f:51:ce:47:ca:
0b:ab:e9:78:e0:d5:ad:b3:46:7f:d1:0a:90:3b:db:
4f:f4:1f:9a:94:b0:01:cc:25:92:50:f6:46:9b:ce:
86:3a:8d:98:a3:63:86:5c:dd:eb:f1:4a:cb:50:59:
db:e4:ee:61:68:9f:00:8c:23:96:3a:a4:3c:87:16:
f9:ef:83:2d:44:1a:bf:14:77:7d:23:e7:7c:d5:e0:
07:ec:de:89:1d:0e:4c:ee:fc:50:02:89:fd:c6:00:
a5:9a:12:d2:36:94:77:1b:2f:5d:15:c7:e4:a4:17:
af:d6:6e:18:c0:d5:65:73:a8:28:a6:47:26:d7:25:
f1:46:81:0f:44:d3:a8:b3:59:2c:71:c2:1b:20:51:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:41:64:4F:85:BC:C9:AA:10:49:28:57:41:3E:B6:FE:48:05:EA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dc0433c-cfe0-477e-936f-17b8022e341f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
Signature Algorithm: sha256WithRSAEncryption
22:17:07:1b:47:f8:5a:d2:c2:f3:99:b3:04:e7:b2:d9:48:bb:
98:37:fe:d9:f4:7b:90:79:10:f5:da:a6:1a:9a:84:60:0c:4b:
04:37:a1:81:bb:b3:68:1c:75:66:33:3e:3a:1e:77:d1:44:6e:
f3:3c:fa:6f:f9:a6:ff:76:07:6a:ef:96:a9:38:f5:07:ac:5b:
4b:13:f8:9c:39:0d:ae:e5:f5:09:c5:a0:04:04:35:69:bb:db:
7e:40:2b:0c:8e:5d:44:5e:0c:e7:71:d4:c4:e8:85:10:4b:86:
89:c2:6d:5d:d3:9c:c5:74:50:64:22:5f:a9:16:6b:03:1a:96:
11:8b:49:71:62:88:bc:a0:aa:be:04:ca:f7:ae:ff:df:c2:ac:
6a:65:7e:d3:48:3f:01:18:29:24:02:65:7a:44:9e:7d:ce:17:
17:f6:8d:17:35:05:12:ef:01:a0:3b:40:18:f3:eb:8b:cf:3f:
d1:0b:75:86:3c:44:36:27:b3:19:6a:bd:56:6f:9e:8e:58:ae:
07:fc:78:81:b9:79:ed:8c:ee:7b:4d:11:08:31:6e:17:c9:b8:
0e:fd:3e:12:0d:fc:25:5a:cb:dd:ed:ff:b9:7c:c9:d5:31:66:
cc:27:15:8d:37:f8:d1:6b:1d:cc:e2:c3:6c:2a:3f:b1:96:fb:
49:85:66:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:47 2025 by rpki-client