Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c7ecbc-aacc-41eb-9929-66846025e26e.roa
File: 37c7ecbc-aacc-41eb-9929-66846025e26e.roa (raw, json)
Hash identifier: 6flxwtVz6NQmyjeDrGWyo5k+qUm/TfX+p1lMOhbiH0k=
Subject key identifier: 82:A2:33:85:4F:2D:BE:C3:B1:B8:83:B7:C7:42:EB:4D:DD:DF:82:61
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 71B4F7BBAFAFA9EA86353D16F48D6E165A739CB5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c7ecbc-aacc-41eb-9929-66846025e26e.roa
Signing time: Mon 24 Mar 2025 18:32:01 +0000
ROA not before: Mon 24 Mar 2025 18:32:01 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.243.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b4:f7:bb:af:af:a9:ea:86:35:3d:16:f4:8d:6e:16:5a:73:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 18:32:01 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=55b44e02d31ddf27f6c11c0a58b29861418ee051e0d483bb1d2df22f91a4f031, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:6d:37:c6:79:89:af:fd:48:e5:ff:cc:a7:
f9:dc:0b:00:c9:e0:08:68:1e:b8:da:83:d2:07:fe:
a7:97:cf:16:51:87:87:3a:39:43:29:17:6c:b9:07:
55:0f:7d:df:8d:8a:b9:e9:ba:a2:51:a3:6e:b1:ea:
dc:40:c7:02:eb:f5:c7:30:28:23:b9:9b:f3:0e:1f:
10:fd:d7:41:e9:51:fb:7b:60:7e:71:cd:3b:32:f5:
f2:90:55:83:27:75:80:d5:81:5e:2e:40:a7:b8:d7:
d6:60:52:d1:dd:63:92:70:fc:ad:2e:be:79:f7:60:
7b:91:c2:00:e7:cc:e0:7f:e2:2e:fc:96:4e:70:bf:
10:c2:2b:e7:c0:66:b2:07:51:b6:32:a4:93:49:47:
bb:6d:ea:24:37:e1:6d:99:af:50:4b:73:5b:1b:02:
70:12:36:af:42:df:e3:be:4e:30:6b:b2:72:c6:ea:
e4:e0:5c:bb:b7:66:b8:34:ef:50:75:55:31:05:26:
52:dc:c2:41:b8:3e:e8:ca:20:db:2d:d6:1c:4d:8d:
ee:94:91:e8:e7:a1:b8:db:04:3b:ad:d9:4c:0c:9d:
b6:3c:75:0f:fe:92:e9:07:48:3b:da:df:cf:4a:4f:
e0:6b:2d:3f:1b:c5:11:72:a9:50:8b:15:3d:85:06:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:33:85:4F:2D:BE:C3:B1:B8:83:B7:C7:42:EB:4D:DD:DF:82:61
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c7ecbc-aacc-41eb-9929-66846025e26e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.243.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ec:4c:c7:a8:f8:10:d2:9f:8c:cd:31:d6:53:51:68:e4:ba:
28:e0:3e:a1:75:55:e4:c3:5b:69:cb:66:d9:72:e8:08:fc:76:
f8:43:81:0d:11:79:aa:db:86:c9:c0:ed:1a:fb:2e:b8:32:29:
7c:52:fc:ec:a1:cc:d4:96:83:c9:67:05:ce:4a:6d:c1:d5:f8:
dc:f9:f6:05:15:97:09:56:93:e2:34:6c:c0:a3:b4:c5:a4:8b:
db:a0:ae:84:55:8d:d6:ac:fb:05:e5:17:f1:65:e3:bc:07:bd:
f7:51:4c:38:4b:8e:c1:2b:ff:9f:4e:c8:c8:01:2f:47:ab:e0:
f3:31:94:fe:fd:2d:9b:ed:83:e5:3f:af:2c:a5:fe:36:a0:19:
ac:9b:4c:a0:2e:9b:94:9c:f3:e4:bd:db:29:c8:4d:fe:aa:d4:
b3:0c:c5:18:2b:a9:df:39:55:f4:45:b5:20:ac:ee:47:20:12:
90:7a:fe:56:4a:e6:fd:32:07:08:fd:f0:4d:8d:da:97:bb:3e:
b9:64:42:4d:dc:a2:5a:a8:1c:41:4e:0c:88:1b:51:c9:cf:fc:
a1:32:10:ca:0b:55:1e:34:2c:1b:b4:2f:de:57:f5:a6:b0:36:
3d:cc:a2:08:ce:1d:a0:8c:56:ab:38:f7:50:49:7d:e8:5b:8e:
c3:d4:f8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:39 2025 by rpki-client on console.sobornost.net