Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8daed87-89db-4194-8af6-be81dac9f524.roa
File: e8daed87-89db-4194-8af6-be81dac9f524.roa (raw, json)
Hash identifier: yfm1pfLA2u6qZ3e7xICmZ1ruVE8/rBtZLmPE/5dkQAI=
Subject key identifier: B5:24:4D:CD:A0:2A:75:0F:F4:83:1E:66:7F:4F:59:68:01:79:1A:38
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 60F3927C44777203B198C48B89BF5201B39220B5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8daed87-89db-4194-8af6-be81dac9f524.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.86.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f3:92:7c:44:77:72:03:b1:98:c4:8b:89:bf:52:01:b3:92:20:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:86:ff:4f:66:77:3a:3a:a0:d8:f8:88:2a:ba:
df:0b:ac:60:f7:23:e7:87:f0:ed:ca:c5:cb:9e:89:
d7:8b:46:32:58:b9:69:ff:c5:2d:27:c9:2e:d1:f5:
ce:da:ae:97:73:f3:54:79:6d:18:06:ed:56:0d:6e:
30:68:7f:e2:d5:ba:16:0d:05:14:63:02:ac:7c:93:
c1:75:65:6b:ac:73:05:4a:9c:81:d1:c5:76:fe:a0:
18:85:41:fe:2d:b5:7d:a4:22:5d:f3:c3:bf:ef:03:
27:6a:5c:2b:19:3e:16:f3:d3:8f:ee:a3:bf:23:61:
f1:b4:12:ee:2f:5f:6d:d5:89:18:25:7a:ca:24:6e:
70:95:f5:92:2a:63:25:58:6f:10:38:cb:d8:08:ce:
6c:34:e9:90:de:bb:b8:17:2b:77:50:7c:2a:03:33:
e6:64:a0:15:a5:9d:eb:90:69:b3:5a:6b:23:94:ac:
fa:a1:a7:55:9f:70:53:bc:60:30:4a:73:53:42:b2:
7e:05:40:d6:94:96:6f:f3:c3:0c:69:26:69:9d:ec:
09:94:b0:2c:6d:af:e6:e0:74:40:36:a9:88:6a:a6:
78:e9:de:62:b5:a8:ff:c7:1e:03:9d:3c:56:58:a7:
c0:8b:af:dd:63:1d:a4:9d:d4:d9:45:52:48:9c:7c:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:4D:CD:A0:2A:75:0F:F4:83:1E:66:7F:4F:59:68:01:79:1A:38
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8daed87-89db-4194-8af6-be81dac9f524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.86.0.0/15
Signature Algorithm: sha256WithRSAEncryption
40:8e:3c:77:c2:98:65:42:13:80:b0:73:08:6e:9a:24:68:07:
34:1c:c0:72:dc:d1:95:df:f0:29:49:1d:49:d7:fd:90:52:9a:
0b:8e:42:44:f8:f2:da:a4:2e:45:e9:41:95:37:49:3c:38:c5:
68:f4:33:d6:36:a0:7b:cb:a2:44:68:a9:f0:ea:85:88:1b:a7:
06:82:20:b4:ae:0b:4b:3c:f3:0b:41:60:9e:2b:2d:3a:af:40:
13:87:f7:7e:c9:05:96:37:f5:e3:48:20:2e:8e:f8:78:6d:dc:
70:32:fa:db:92:ea:51:03:90:9b:08:71:be:3a:b8:2b:b2:f3:
ed:7f:bc:c5:af:0b:dc:0c:8d:73:68:f8:1a:37:55:bd:13:4f:
8f:69:56:a9:b1:90:7a:87:59:03:96:55:73:f0:9d:2e:2e:20:
6e:6f:7f:62:b1:6c:61:0d:4d:3b:1d:0f:8c:78:65:75:24:4f:
f1:a4:19:fa:fe:9c:d5:19:23:db:79:18:e0:8e:4b:56:c5:4e:
cd:f8:16:c1:e1:59:2b:50:9c:d4:f9:a6:88:5e:1c:ec:f2:28:
e0:6f:1a:b4:16:c4:d3:b2:30:2b:4d:4e:d2:99:ef:6a:d8:2c:
88:86:fc:fe:cf:42:32:75:e4:ff:64:24:54:98:77:35:1f:85:
e6:14:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:35 2025 by rpki-client