Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20211995-e238-4efe-a49a-d1ca0246b9a7.roa
File: 20211995-e238-4efe-a49a-d1ca0246b9a7.roa (raw, json)
Hash identifier: SpSv3d/awkzw1icX3s7YASPCTqIsRVdDBmU8ShoMPdA=
Subject key identifier: 44:2D:02:79:00:5C:48:70:67:67:56:E9:38:FA:CD:36:0C:C6:AB:D6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5C53DF97BC91870AF149F671A4CD92654F5C9BAD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20211995-e238-4efe-a49a-d1ca0246b9a7.roa
Signing time: Mon 24 Mar 2025 15:51:59 +0000
ROA not before: Mon 24 Mar 2025 15:51:59 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.157.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:53:df:97:bc:91:87:0a:f1:49:f6:71:a4:cd:92:65:4f:5c:9b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 15:51:59 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=f02a14908904a824f545c3779fbdd845ab9a15a9be9f75604aa21be44fb5fb77, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:e4:c1:ce:48:5e:dd:26:07:20:4b:5b:dc:
5c:b5:ad:04:fd:89:9a:3a:6f:34:6e:43:da:1d:73:
c0:a6:89:21:0d:ef:3f:9c:b6:00:41:99:07:f3:18:
cc:f1:8e:3a:a2:da:9a:44:df:03:0e:f2:b8:f2:96:
6b:ab:8a:12:eb:41:ca:34:35:31:60:b1:57:46:53:
d0:09:10:93:e1:d2:61:b7:a9:e2:8b:14:66:5e:57:
04:95:1d:a3:be:99:af:d4:2a:c2:c7:75:75:6b:d3:
38:71:0f:5b:95:51:9a:da:fa:d7:b4:82:ca:90:c9:
1f:ae:75:88:be:ae:ff:bd:34:a3:c8:a2:9f:33:41:
3c:90:56:5d:f4:7c:ab:7b:82:be:71:6a:ad:30:5e:
81:3d:fc:fc:ba:4e:e7:fe:53:a4:34:0a:40:20:0f:
b6:11:d1:d2:f3:fa:e8:a2:13:ef:c6:3e:67:76:40:
8c:f5:f8:b9:2e:df:31:6b:2a:7e:42:06:3a:e3:20:
84:b0:e7:3a:97:57:cc:07:75:1b:1b:51:46:f2:99:
fa:7e:36:07:b2:55:49:94:ec:ed:80:d9:29:d7:65:
96:df:2c:c6:97:af:03:a1:b0:1b:70:0d:43:83:31:
47:22:4d:d3:a6:88:18:b9:3f:46:6d:93:dd:c0:fd:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2D:02:79:00:5C:48:70:67:67:56:E9:38:FA:CD:36:0C:C6:AB:D6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20211995-e238-4efe-a49a-d1ca0246b9a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.157.94.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f0:8f:8d:cf:e7:19:0d:ec:e9:56:a1:f9:a6:2a:05:79:fa:
df:78:ac:04:5c:88:8d:96:8b:53:a6:d5:7c:f7:c2:06:44:73:
29:23:46:7b:8c:bb:ce:06:22:c7:7f:62:74:7d:5b:94:9f:57:
6f:af:31:35:61:de:8c:f1:8d:09:e9:12:3e:51:b3:ce:8b:d7:
41:77:a6:27:5a:55:b7:16:93:64:3d:33:8e:74:65:49:63:1f:
1a:6d:da:01:d8:be:d4:ef:aa:6c:6c:81:38:4d:36:e6:df:59:
37:5f:2f:dd:95:a2:6b:15:b9:f9:81:3b:db:18:49:b1:cd:46:
f7:a9:d5:de:90:89:30:65:f5:71:21:a9:e7:67:62:4d:50:86:
b7:79:0a:89:6e:ca:3f:71:84:67:23:88:82:3d:a7:c1:77:3d:
5d:4d:b4:96:65:cd:b9:27:d4:41:e6:56:06:0a:df:d4:97:bf:
b2:f0:3d:12:09:7a:ef:a9:58:f4:be:4d:bb:38:4a:9b:49:0c:
98:ef:f0:8e:26:cd:b9:9e:d8:5b:81:27:91:fa:3e:77:c7:7f:
11:50:af:ec:2b:63:6a:b0:27:37:00:0b:77:22:63:58:aa:e7:
19:88:04:01:66:7c:47:07:ec:84:5c:8e:e5:40:6e:78:a4:39:
50:58:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:37 2025 by rpki-client on console.sobornost.net