Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d30afd-7657-4d7b-996a-bf7a313920f5.roa
File: 12d30afd-7657-4d7b-996a-bf7a313920f5.roa (raw, json)
Hash identifier: e0/j/4xAUjC/0KmEIiGlb9AbUNlhPa3YxFDYRPaq3vY=
Subject key identifier: 9A:1D:7F:3A:EA:98:70:86:89:4A:3B:16:2B:F3:78:A7:3C:EA:EE:50
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 329F5983C0580994B4186D135B9CDDBBAEF79B49
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d30afd-7657-4d7b-996a-bf7a313920f5.roa
Signing time: Tue 01 Apr 2025 00:41:50 +0000
ROA not before: Tue 01 Apr 2025 00:41:50 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.239.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9f:59:83:c0:58:09:94:b4:18:6d:13:5b:9c:dd:bb:ae:f7:9b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 1 00:41:50 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=82396cd9e9ba23b6f6ce7aae3dadd71bba7dd9cdf1be674fea20243bea918b1d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:2d:46:20:45:8a:a9:ec:09:95:07:d4:0a:
ae:27:6b:a0:d8:6e:0b:f6:43:b2:f3:9f:ec:4b:0f:
ec:fe:99:2f:83:b4:d9:8d:19:8e:47:1e:79:c4:df:
0d:eb:7b:4a:44:1f:4f:f4:5a:1c:e8:d7:0f:58:a1:
89:78:67:3b:13:c2:8e:06:49:f4:85:49:98:3c:73:
d6:69:3f:da:ad:4d:9a:48:aa:b2:1e:0a:dc:5a:7a:
9f:be:ef:5a:3a:73:f1:88:64:24:44:08:d5:41:9c:
78:53:d9:81:f9:94:dc:b0:0d:b0:c0:be:96:00:a7:
3f:3a:3d:a8:fa:25:eb:89:75:9a:48:d8:83:59:16:
0f:b5:46:8e:a2:26:4d:17:89:ee:46:31:f6:c0:c6:
06:70:40:f1:4b:e1:db:6d:db:43:d7:2f:d7:92:bf:
fa:1e:f3:7d:4f:95:85:29:a4:b9:23:76:10:ad:7a:
e2:4e:6e:03:a0:71:88:09:43:01:8e:b2:7f:14:5c:
a2:8a:78:5b:ca:7c:f8:ac:dc:8a:26:fd:a9:ef:34:
82:eb:e6:da:b6:2c:49:ca:47:34:58:2a:21:50:9a:
f4:14:5a:d6:d8:e5:a0:0a:a0:16:cf:07:a7:b8:3b:
be:1c:9e:a3:9d:a7:bb:86:e9:e5:a0:26:09:42:01:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:7F:3A:EA:98:70:86:89:4A:3B:16:2B:F3:78:A7:3C:EA:EE:50
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d30afd-7657-4d7b-996a-bf7a313920f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.239.64.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:98:6b:e1:4a:f1:d2:55:af:f5:8e:71:08:bd:7c:e5:39:f5:
0a:83:93:7c:96:24:7e:13:dd:04:e9:18:dd:25:7d:1d:41:2b:
e3:b8:05:11:cc:d4:3e:aa:6c:34:aa:68:99:03:c6:f3:37:58:
92:62:96:51:68:92:bb:4c:5b:52:c8:a8:c8:90:6d:ce:44:02:
a7:ce:85:ed:60:2a:90:d9:63:21:6d:6a:7f:d9:ef:79:0c:51:
8c:ae:5e:07:81:3e:30:cf:a7:6a:49:a7:67:e4:0f:07:73:de:
82:fd:e7:fb:01:5c:4d:49:1c:f5:ef:f6:31:95:cf:b3:c3:37:
af:7b:ff:f4:26:d9:2a:d0:41:d7:0b:21:c5:e4:17:57:22:fe:
9a:12:47:b1:66:5b:11:38:6d:f7:74:e4:e4:f5:9a:1b:55:42:
4f:f4:cc:07:a5:58:97:dd:a3:df:8f:7d:69:6f:65:92:71:9f:
2a:b8:32:99:90:e8:cc:4a:6c:a0:3e:17:ad:a8:35:18:83:6d:
05:49:d6:cf:63:09:67:83:80:6b:11:9b:6a:d6:85:5a:bb:5d:
74:0e:a5:a0:ce:a9:7f:9e:5a:43:16:fb:59:5f:d0:d1:8b:56:
89:fe:93:fd:2d:0d:ab:77:54:95:86:cd:3f:fa:f0:34:74:f3:
03:5d:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:36 2025 by rpki-client on console.sobornost.net