Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ade2bb86-d1d4-4002-915f-5c8af13cbb1a.roa
File: ade2bb86-d1d4-4002-915f-5c8af13cbb1a.roa (raw, json)
Hash identifier: 2SMlyuVHdkivbP7P94QEW76Y9ioZk8MaSqoMicDSDS4=
Subject key identifier: E5:C5:C9:1C:68:6F:21:8F:07:1E:FD:68:A9:4B:CF:98:C1:4E:1F:70
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3F6E9140D7ED812C8D36D9A061D740B5A01CB2C6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ade2bb86-d1d4-4002-915f-5c8af13cbb1a.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 52.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6e:91:40:d7:ed:81:2c:8d:36:d9:a0:61:d7:40:b5:a0:1c:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:31:f9:25:9a:ff:82:55:2d:36:4e:56:61:
01:fd:4a:ed:41:a3:af:9d:05:52:8b:ef:46:5c:f2:
9f:7f:58:f1:3d:61:25:28:ed:c2:84:3a:94:78:34:
24:42:68:28:49:93:bf:c7:3d:bd:6f:7d:96:52:35:
b9:c3:a6:5a:7e:3e:92:eb:9f:ee:44:cc:f0:c6:a4:
f3:33:c8:e3:7a:dc:90:27:ae:84:c6:0e:33:00:74:
69:09:b1:16:e8:b5:5f:71:33:ae:98:af:ae:50:07:
a9:ba:4b:d3:34:65:4d:7b:21:32:80:25:bb:b2:2a:
36:c7:f8:ce:d7:82:10:2d:e6:d6:08:67:3b:f7:9e:
94:e5:8b:36:50:68:e1:0b:be:95:2b:a7:0b:1d:49:
09:16:bb:91:02:61:24:ab:c2:19:54:1a:bf:9b:73:
be:f3:3b:6c:78:11:ee:37:53:53:9a:af:8c:2e:d4:
cb:26:74:78:65:62:c6:44:7d:54:ea:65:ed:c0:76:
66:28:fb:cb:8d:1d:af:64:44:6c:89:d7:c6:04:e0:
78:ab:25:20:7b:17:9e:8b:03:40:80:dd:1f:eb:3e:
d8:80:0d:98:f8:99:fd:96:bd:4c:b3:96:c9:4a:66:
0e:49:47:4e:cf:5c:4a:d9:51:09:ad:9d:79:02:6b:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C5:C9:1C:68:6F:21:8F:07:1E:FD:68:A9:4B:CF:98:C1:4E:1F:70
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ade2bb86-d1d4-4002-915f-5c8af13cbb1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
6b:51:2a:f4:da:d3:81:8a:10:7c:ed:c6:90:21:39:d6:43:18:
6f:8f:73:29:8c:f7:44:7a:16:31:7f:ca:b5:24:be:37:63:47:
50:95:3a:06:bd:33:70:e4:66:8c:aa:1e:ed:75:2a:4d:ae:66:
aa:e6:3d:49:7c:ea:8a:d1:4b:4d:c0:1c:6a:bb:a6:44:5e:b0:
de:ac:13:db:48:d7:b8:1c:be:11:2a:38:ef:a4:0a:a1:2c:f3:
47:7a:26:dc:b0:19:a5:a2:7b:d9:0f:0a:a9:a9:eb:06:8b:e6:
f1:b3:6c:f3:b2:7e:40:d2:f1:f8:cd:e0:14:cf:78:b5:5f:66:
af:a5:33:e4:57:f3:b6:52:74:eb:20:26:ab:3d:fa:d0:a4:ec:
ef:13:1b:97:0e:31:8c:ef:29:98:ab:53:a5:b2:f0:1f:98:b7:
ff:7c:79:c3:6a:97:04:51:8f:f6:4b:99:8f:d1:ac:be:b2:40:
f7:f9:9a:01:7b:bb:2d:fe:1a:38:19:ad:8b:2a:8a:db:1b:ee:
d6:55:13:0e:0f:8e:19:15:4d:81:2c:5c:03:9b:67:15:03:13:
94:79:d9:c9:80:28:28:99:e2:37:08:04:27:35:0f:2e:96:d7:
30:bc:56:22:ab:4a:e0:d5:c7:3f:38:6f:d4:15:31:ac:d2:93:
67:e0:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:11 2025 by rpki-client