Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9cae95f-c034-47fb-8daf-c375f823be5b.roa
File: f9cae95f-c034-47fb-8daf-c375f823be5b.roa (raw, json)
Hash identifier: S60WkGaew4W1gXbmvzNysx4diB43rLEaErjm29mGhPE=
Subject key identifier: DF:2F:EB:7E:13:F4:C0:C9:B3:2A:2A:56:96:AC:D3:14:9A:C6:42:E4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4F95BFDDC2287F9A7122FF247282206EA87120DD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9cae95f-c034-47fb-8daf-c375f823be5b.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.94.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:95:bf:dd:c2:28:7f:9a:71:22:ff:24:72:82:20:6e:a8:71:20:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:9c:e4:2d:7b:0d:8c:6b:9e:c5:51:fc:84:
af:f6:3d:fe:91:95:e9:82:05:cc:68:45:8d:c4:4c:
7e:8f:e6:99:e4:01:d7:f0:90:3a:74:b8:83:ba:93:
20:c2:e2:2c:eb:a7:2d:d1:67:4d:aa:a6:6b:02:f0:
d5:b9:9a:a4:6b:53:cf:6c:1d:92:3b:0d:79:f7:c9:
d3:3a:ea:08:39:f8:9c:83:09:6d:11:71:be:a5:76:
c5:62:bf:75:45:72:e1:d6:eb:97:49:99:6b:e7:cb:
18:8a:0b:63:53:8e:08:0b:27:46:26:6a:05:0d:bf:
f7:20:2c:62:98:83:39:5b:02:ec:55:cf:3c:d6:0b:
3b:a9:90:27:25:19:a4:48:e2:28:c1:30:fd:83:97:
f0:7f:95:3a:91:69:85:8c:87:7b:5e:b6:5b:be:1e:
f6:bb:15:2b:ca:a9:82:c6:ad:f5:52:79:a4:de:ec:
84:50:93:63:33:64:b4:a4:01:be:6a:04:5e:0b:f1:
86:27:4a:ff:46:8b:7b:06:33:88:00:18:ee:e0:b6:
bd:ed:8a:77:33:21:1b:fe:36:18:85:0c:c6:45:01:
74:6e:b7:39:70:a3:ee:63:ef:91:0d:bf:7e:dd:80:
c9:a6:fc:de:ed:75:71:d0:46:a4:19:58:8a:fc:6b:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:EB:7E:13:F4:C0:C9:B3:2A:2A:56:96:AC:D3:14:9A:C6:42:E4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9cae95f-c034-47fb-8daf-c375f823be5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.116.0/22
Signature Algorithm: sha256WithRSAEncryption
08:aa:eb:5f:fa:5d:82:3e:df:a8:dd:57:bb:e4:14:28:c8:a6:
08:5b:41:46:ed:bb:7e:17:6c:9f:7d:31:18:5d:5e:b4:aa:43:
16:de:61:53:23:f4:fe:52:ca:15:61:de:22:13:06:71:a3:0f:
e5:4c:66:cc:e0:14:15:ee:01:17:92:24:d1:79:0b:d5:31:66:
56:38:3b:39:15:69:22:0b:bf:4a:80:0c:f0:47:f6:78:1f:5b:
a6:b2:74:5b:95:a8:08:fa:ec:3d:b6:47:81:15:92:ca:dc:2e:
f7:cd:36:af:e0:e9:c1:b8:25:d1:06:fe:6e:5f:3a:c6:b5:17:
56:5e:bb:a4:40:ae:19:08:02:a4:47:16:b6:af:8a:39:81:21:
b9:bf:f6:f9:d7:e7:42:3e:a2:b2:4d:3f:88:1a:6c:b8:98:54:
5f:49:71:b6:1c:cc:d3:bd:e0:11:be:08:e8:bb:13:0d:06:9e:
a5:58:9c:41:5a:0e:cf:dc:02:fb:99:c0:ec:c0:64:3e:e1:8c:
03:ce:e1:f2:8f:c5:7c:ea:67:8b:bf:fc:92:cb:e6:40:98:87:
0e:e3:0f:d3:49:8f:b2:a1:08:a4:b7:5e:66:15:51:b6:e1:75:
94:0f:ac:2b:45:6f:3f:45:2e:fb:49:c4:8b:39:cc:ac:1e:51:
a8:41:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:47 2025 by rpki-client