Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4371259-183e-4461-aecc-d65c739378ec.roa
File: b4371259-183e-4461-aecc-d65c739378ec.roa (raw, json)
Hash identifier: gOGqMv4dXnJ3br+QI9w5cXy1XAeZJ76LqZyAMTFbgFw=
Subject key identifier: 13:4A:D8:D3:E4:C1:D1:AC:45:3B:60:40:CB:9E:05:1A:F1:D5:E7:6F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 42D4CD8B16B1F4FEB8C5E5F7C87D1C92C0BDFC5B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4371259-183e-4461-aecc-d65c739378ec.roa
Signing time: Fri 07 Mar 2025 00:42:28 +0000
ROA not before: Fri 07 Mar 2025 00:42:28 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d4:cd:8b:16:b1:f4:fe:b8:c5:e5:f7:c8:7d:1c:92:c0:bd:fc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 7 00:42:28 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:4e:ac:75:25:18:b2:2c:ca:fb:81:22:e6:
ea:df:4f:56:dd:b0:28:53:d8:22:8c:a3:d2:96:ec:
82:26:d7:cf:6c:61:d6:31:52:36:23:c5:b7:fd:b7:
39:66:1c:d2:22:8d:a6:06:48:94:69:ae:00:4f:d5:
8b:39:ea:1c:b1:74:64:61:6e:ad:20:f7:90:4f:bf:
dd:06:09:26:87:aa:61:c9:04:b4:81:19:9e:f2:0d:
5b:80:6c:71:42:d4:b6:b3:22:20:c2:73:e2:8b:22:
b4:dc:cf:71:52:99:95:34:96:eb:0a:28:30:1a:82:
f0:ec:20:21:cc:ec:f0:0d:4f:09:61:38:71:27:fb:
67:4d:9d:3a:2b:55:71:4e:33:a4:7b:3e:8a:0e:61:
3e:33:a5:48:d5:f9:e6:dc:e9:f2:99:cd:ff:a4:8c:
51:3d:ed:cd:80:69:c3:f2:1b:02:b9:65:9a:36:1b:
d9:45:fd:65:f4:2a:68:bd:75:17:95:65:80:90:2c:
d1:3b:a0:ac:5e:77:f2:01:81:50:22:d2:84:fa:33:
29:bc:eb:32:92:59:a0:f4:20:fa:98:be:7e:46:e1:
3e:95:9f:91:2f:6e:11:e1:e7:9e:5c:37:6b:8f:f4:
cf:7b:d7:10:ab:00:27:60:16:7d:e5:fd:68:d5:b3:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:D8:D3:E4:C1:D1:AC:45:3B:60:40:CB:9E:05:1A:F1:D5:E7:6F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4371259-183e-4461-aecc-d65c739378ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.103.0/24
Signature Algorithm: sha256WithRSAEncryption
97:07:4f:7f:83:7b:30:6e:58:b1:b4:67:57:f1:82:59:cc:b4:
f4:17:e1:70:4f:4d:48:01:73:97:7b:ee:6f:b6:76:ca:31:d4:
81:2e:de:d7:95:0e:57:ec:5c:49:00:7b:67:e8:13:91:1f:0b:
82:cc:16:e6:68:c2:2a:b9:12:4a:de:1d:cd:81:64:ff:d8:3e:
ab:bd:e7:cd:de:e7:0f:bb:d1:1e:b4:a6:82:49:c3:9c:0f:39:
2d:fc:ed:39:2c:58:d3:56:cb:99:09:66:ce:32:d0:ed:14:b5:
53:74:02:6a:c4:fa:61:31:cd:e5:f6:e8:ae:6e:a5:27:93:a1:
6d:ac:0e:a7:0e:52:f6:98:af:65:b3:62:42:8f:b3:b4:c9:70:
cf:90:15:0d:65:90:7f:37:37:00:18:6d:e0:b4:36:19:dd:a3:
ed:e7:62:31:76:01:2f:27:e9:ab:fc:6d:b6:bd:bb:5d:e1:25:
b0:84:00:0f:25:c5:00:57:36:72:87:45:4d:08:b3:78:f9:73:
79:2c:10:a7:24:67:eb:65:b3:8f:1d:81:a4:20:9e:1a:d3:c5:
3c:26:b0:02:48:38:64:c8:01:03:23:7d:cd:df:fe:da:db:4c:
5f:c1:7a:c3:22:f6:9a:c2:5e:c6:d4:07:78:94:5b:9b:59:4f:
d0:61:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:13 2025 by rpki-client