Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242f6655-451b-4bab-9c74-e01e9280696c.roa
File: 242f6655-451b-4bab-9c74-e01e9280696c.roa (raw, json)
Hash identifier: XqCItYHRt6NPDNEWnkY9TmeZYv06bREaDUfNYa12tkk=
Subject key identifier: 78:71:FC:3C:EF:24:F9:D0:1A:45:B1:3A:FB:5A:5B:47:41:0E:FE:0E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7D24B29D9BBA79054532FC045C9E9ECFD74CCD9B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242f6655-451b-4bab-9c74-e01e9280696c.roa
Signing time: Tue 01 Apr 2025 00:30:18 +0000
ROA not before: Tue 01 Apr 2025 00:30:18 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:24:b2:9d:9b:ba:79:05:45:32:fc:04:5c:9e:9e:cf:d7:4c:cd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 1 00:30:18 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=ef8dfd0bc7838edf1683c549f07101c6800bd5b3f4c726a5ee6c00381ac438f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:1f:64:1b:e6:78:03:a7:77:64:9b:29:47:
c2:6c:0a:8a:69:f9:9f:47:4f:94:12:56:44:6c:1b:
b1:3e:1c:f6:4a:c3:9c:76:db:eb:f8:16:d0:ea:80:
03:df:c5:0d:84:e0:a3:c9:45:29:a4:c6:91:a2:a4:
21:29:ad:07:61:3e:6e:e0:1d:3f:78:6f:c9:0c:42:
29:80:b2:bb:bb:20:0a:70:46:71:b5:b1:95:9d:cc:
b5:57:bf:19:00:6b:60:f1:a0:30:f0:38:93:f9:90:
07:f0:f2:60:31:95:b8:75:f6:3d:05:00:bc:da:07:
71:14:0a:00:2d:e6:be:15:48:57:ec:4b:c9:a0:30:
21:22:1b:bf:f3:42:cd:aa:e5:9c:82:5d:ba:98:58:
ed:94:31:50:4d:ec:d1:e6:77:a9:9f:0c:c9:69:46:
4b:1b:59:49:d3:ba:ff:e7:ee:a4:8e:17:98:41:ef:
d4:ef:4d:1f:b2:87:cf:5f:30:86:22:cb:50:11:aa:
72:1e:79:c2:a7:92:5e:42:01:0c:4b:6d:82:41:d8:
ed:62:65:4c:35:03:11:88:1c:83:8d:9d:6e:a9:54:
02:dd:fd:6f:42:32:a7:c4:de:2e:80:dd:2c:82:a2:
b2:36:8c:4a:2d:60:b0:e1:5b:5c:af:56:0f:81:c3:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:FC:3C:EF:24:F9:D0:1A:45:B1:3A:FB:5A:5B:47:41:0E:FE:0E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242f6655-451b-4bab-9c74-e01e9280696c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.253.0/24
Signature Algorithm: sha256WithRSAEncryption
68:df:30:64:54:76:c2:da:4c:1f:af:07:6b:33:fb:43:8e:36:
77:07:d3:97:d3:e1:0b:a3:d0:1d:39:c7:8e:61:92:f7:ac:e4:
51:19:8c:a2:de:d3:10:7d:8d:5d:39:bb:2f:28:e9:66:98:cc:
09:24:54:1f:76:e1:93:e8:44:18:1b:9e:42:85:47:f5:16:3c:
b1:71:9d:9d:5a:ef:2e:bb:19:b0:b8:cf:48:86:a2:fe:f6:3f:
4f:be:d3:1c:e2:67:b4:04:ee:eb:27:c2:bc:9c:fb:aa:32:85:
b6:50:a0:35:61:eb:3c:3e:6b:15:c1:8f:f4:01:03:53:d9:4f:
d7:a4:ae:32:30:bc:91:7c:b6:8c:c1:8a:14:fb:9b:cb:6d:78:
31:ff:dd:d7:d6:d9:6f:66:03:fb:de:8f:4d:28:37:84:3e:f1:
6a:7d:64:31:4c:ad:f3:92:b5:72:c0:ef:de:a8:7d:a7:2d:57:
d4:9c:72:14:00:04:6c:b1:95:45:df:04:ca:6c:92:3a:90:e7:
80:3f:2a:92:4b:2c:1f:ce:2f:26:ac:8b:bf:46:2e:f3:e4:e3:
74:98:2c:76:fb:6b:3a:66:5f:32:a7:24:2e:0a:d9:b8:8a:b3:
e4:0b:73:51:9e:5c:cd:7b:c7:a9:fd:dd:c5:49:64:51:59:9e:
a3:64:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:38 2025 by rpki-client on console.sobornost.net