Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bb0f98d-0455-4635-b590-caaaa8613b07.roa
File: 4bb0f98d-0455-4635-b590-caaaa8613b07.roa (raw, json)
Hash identifier: RVbwI80vbn3ZSIz68pRqr8SA8PWHdYCW/hsNCuqsWVU=
Subject key identifier: FC:C3:74:BD:88:3C:1A:45:59:66:20:24:61:BD:8C:06:E8:C3:7B:A4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5A9049C98054C3DF2179D65E2C891B8D28D74921
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bb0f98d-0455-4635-b590-caaaa8613b07.roa
Signing time: Mon 31 Mar 2025 17:51:54 +0000
ROA not before: Mon 31 Mar 2025 17:51:54 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.94.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:90:49:c9:80:54:c3:df:21:79:d6:5e:2c:89:1b:8d:28:d7:49:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 17:51:54 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=5c544a365154c4e88d4a9d6c74573c0cc348d4aa309b18ec58391202a931984c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:9e:b6:ce:61:a8:60:0d:64:0d:a8:a5:6f:
03:98:cc:a9:14:e3:55:d9:f9:a7:d7:b8:2f:b8:c5:
d9:cd:18:e9:94:ff:e2:ce:13:f2:7b:0c:ca:ad:54:
04:9a:50:40:14:a8:93:8e:1e:f6:91:b4:9d:e2:99:
04:2b:a3:c1:40:f5:45:c2:31:b1:70:50:8f:12:61:
b1:5e:30:fe:cf:74:5f:36:12:ee:12:a2:c9:df:6a:
9f:dc:71:76:15:9d:03:97:56:53:7f:c3:c7:ca:52:
6e:34:80:68:81:df:56:dd:df:fd:93:5a:a4:0a:c5:
ae:9a:9e:a0:de:0e:18:a5:41:07:a8:36:d1:6f:8b:
8f:fd:22:db:4d:f9:71:e0:5e:b2:7d:15:cd:e9:8d:
be:28:3c:39:ea:da:75:30:8f:5f:16:8c:f0:dc:9d:
ed:35:a6:cb:79:2a:c1:9c:f1:e3:1e:8a:64:b3:d3:
10:4b:f8:75:b6:d5:8e:7f:18:87:52:4b:cd:0c:b8:
1d:20:91:d9:15:5e:fd:50:0c:ce:8b:b1:66:5a:93:
dd:0d:91:1a:67:65:ff:eb:b5:7a:d6:a3:4f:d8:d1:
3e:88:1c:29:05:22:56:bf:ba:bf:c9:bf:88:ce:17:
da:42:64:89:a1:7e:04:ec:67:68:0c:82:89:aa:a8:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:74:BD:88:3C:1A:45:59:66:20:24:61:BD:8C:06:E8:C3:7B:A4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bb0f98d-0455-4635-b590-caaaa8613b07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.240.0/22
Signature Algorithm: sha256WithRSAEncryption
27:1a:b7:e0:4f:1c:46:3e:9b:c2:d0:35:5a:28:4c:f2:06:49:
01:c7:18:2a:82:ee:48:57:f6:96:08:62:4d:b7:63:b6:4e:72:
c0:5a:67:3d:33:b6:e7:d8:38:39:72:e6:b9:3d:85:5e:6c:f6:
20:87:20:4b:d6:3d:f1:9c:67:01:e1:f0:d0:2e:97:0b:87:79:
6b:8b:fd:5b:53:af:f9:36:e7:e0:28:fa:d1:28:e8:0d:2f:52:
03:c2:d7:14:04:85:2a:df:f4:92:98:f7:77:4f:90:8b:6e:0b:
10:cc:72:aa:64:c4:5c:35:33:1f:35:15:8a:6f:30:1e:09:61:
04:6a:f8:a1:e9:40:c5:e1:c3:64:ad:55:9e:e7:f4:33:4b:cc:
d7:dc:17:fd:63:c8:c1:ec:32:41:4f:4d:66:25:99:27:44:14:
94:02:f0:5c:a3:f7:de:6c:ff:f3:a1:ec:2e:06:cf:2b:38:61:
90:1d:dd:78:38:40:4b:6d:bb:98:a5:62:fc:a7:48:8f:51:d7:
88:86:3f:ea:fe:cc:5e:45:c5:5e:66:fd:09:75:e5:18:22:bb:
3d:a3:c0:76:a5:1e:ba:f3:45:45:1d:c5:aa:31:73:c0:c2:ba:
fd:31:57:43:af:55:35:19:af:e6:bf:70:b7:59:4d:4f:7b:7d:
d9:3d:17:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:41 2025 by rpki-client on console.sobornost.net