Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6db66f3-065d-4a01-a706-b0b673036f1d.roa
File: f6db66f3-065d-4a01-a706-b0b673036f1d.roa (raw, json)
Hash identifier: xA5/KQmH1xoBxge5eZKy5y2mcVnGdlyRYflfMjMMTeg=
Subject key identifier: 6F:62:C2:67:3F:6B:5D:30:2A:88:C1:FE:D2:29:8C:96:C9:74:F7:A1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 16CFAEB97A026E1A94D5786E00176DEC07D05E59
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6db66f3-065d-4a01-a706-b0b673036f1d.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cf:ae:b9:7a:02:6e:1a:94:d5:78:6e:00:17:6d:ec:07:d0:5e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:90:5a:63:6e:77:a1:4b:b8:81:cf:93:f2:
8b:c2:b3:80:8f:33:d5:84:6c:d5:f7:9b:19:e8:4c:
8c:5a:3c:e0:d5:94:2c:65:29:93:1c:ae:09:e5:61:
70:95:cf:95:48:08:e1:1e:e8:eb:bc:31:64:1f:9a:
27:9b:42:a6:59:d0:64:58:f6:87:9a:f4:c3:ac:68:
35:8e:06:e5:2a:f2:95:c4:0a:1d:a1:bf:79:5d:a1:
61:be:29:4e:c1:b4:1b:b8:ef:e1:5f:83:5b:ac:c1:
e7:1b:be:57:87:d9:83:d0:e7:f8:07:a8:30:f8:f4:
d4:17:54:75:c8:e9:81:0c:27:60:d7:50:d8:46:58:
e6:9c:43:d3:ba:0b:67:86:c4:24:bd:65:82:cb:08:
0c:f1:9f:68:7c:47:3b:da:11:cc:b4:63:fb:1f:9b:
8e:01:b2:a9:39:2d:f4:f3:2b:bf:dc:81:27:a7:57:
e7:8a:75:6d:21:94:16:56:19:31:ff:86:a2:37:60:
16:72:86:a0:1e:fc:35:38:2c:c6:aa:34:4f:5c:c7:
1e:0d:c4:e6:ac:c3:fc:e4:8e:ed:b8:81:38:41:25:
57:0e:99:c7:52:ac:0b:b2:f8:6d:2f:a5:9a:04:31:
34:b5:73:63:9b:f0:40:8e:0e:35:1e:f9:10:3a:fe:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:62:C2:67:3F:6B:5D:30:2A:88:C1:FE:D2:29:8C:96:C9:74:F7:A1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6db66f3-065d-4a01-a706-b0b673036f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:09:95:56:9b:85:88:2f:ea:db:4e:24:5f:9c:65:78:b9:94:
8f:64:cf:9a:2e:af:04:b9:b4:2f:4a:6c:63:b1:d5:e2:57:d9:
ee:6b:1d:72:a4:42:84:a3:0e:b3:28:50:3a:c9:d9:cc:e6:bd:
9d:5e:25:44:91:83:83:f9:21:8d:a2:6e:19:c6:ae:dc:72:ae:
0a:1d:88:74:0a:fd:36:ef:0a:f7:6b:14:b2:c8:b0:63:f5:af:
e7:5b:18:63:47:ad:eb:69:6f:11:0c:f9:85:1f:3f:59:f9:d1:
77:6d:77:cf:18:6b:27:80:53:e2:ce:32:9a:df:81:6e:63:bc:
e8:96:00:64:33:fa:e5:e0:3d:9e:b4:e7:7c:85:77:e9:8a:af:
d8:33:0b:46:06:02:01:87:3f:5e:64:a5:92:29:6c:82:16:de:
40:94:72:ac:4d:b3:41:e1:09:c3:2e:36:6f:7a:25:9a:04:a8:
4c:33:9d:05:34:18:ef:9d:50:52:1f:08:b1:bd:69:12:2b:42:
6c:d6:ae:31:89:9e:ad:2a:c3:26:07:d8:ad:10:4a:0f:74:d4:
0b:5b:c1:8a:1e:f7:67:15:32:fa:0f:d6:fb:2f:6d:96:66:7f:
0d:9f:df:d7:4f:09:97:48:fa:33:84:a4:2c:ce:09:ca:35:03:
cb:b8:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:35 2025 by rpki-client