Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa
File: 4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa (raw, json)
Hash identifier: PW5e6aCt/6M8hg7ReYBtFDOx/1t/sW0XudqXMU1x6UA=
Subject key identifier: AF:F1:FC:5D:21:BC:05:81:DA:CC:5B:27:41:44:65:2C:0D:B6:72:CC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6BD60D8F4FFFCBCA0E743D1E5BA172AB3F6926DA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa
Signing time: Mon 24 Mar 2025 16:00:09 +0000
ROA not before: Mon 24 Mar 2025 16:00:09 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.157.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d6:0d:8f:4f:ff:cb:ca:0e:74:3d:1e:5b:a1:72:ab:3f:69:26:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 16:00:09 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=38e5eabb2f3ab8f55a3ac5678779880fe513b70743d2bef08368763cccac876d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:57:b9:e5:a8:1b:6c:56:56:d9:32:b7:e7:
ff:ff:2f:d3:de:7c:c0:e1:e0:7c:62:f9:0e:6f:c4:
26:74:7d:9a:c4:1c:a0:1c:d5:3d:cd:b0:84:e4:3f:
d5:b7:42:7e:ed:dd:13:b0:7d:45:1d:10:d4:24:cb:
7c:23:92:0c:9e:3b:fd:ee:c2:d4:d5:73:19:0f:b8:
e0:ac:b0:d6:6d:c1:fe:2b:b6:00:86:79:61:ec:d8:
e0:18:ed:a2:5d:52:9d:1c:e2:19:e6:a8:fb:03:cd:
85:e8:f5:2f:82:f8:fa:01:39:ed:65:c0:ec:60:22:
aa:e2:c1:70:95:a2:9f:f8:26:ab:c6:0f:e4:a5:46:
6f:65:e3:01:6c:23:28:b2:a6:1b:30:c3:c2:c9:72:
5f:53:fd:b1:fc:b7:e5:bd:f8:10:49:03:39:e5:8c:
0d:a8:bb:2a:3d:15:5d:7a:85:bf:b4:c4:48:2e:bf:
e2:b4:2e:82:ff:a2:e5:d1:37:ae:82:9d:e6:50:84:
3c:4b:b2:51:57:1c:49:1f:2b:b1:9e:ce:02:20:32:
66:6f:48:c3:c7:54:82:e3:72:a5:12:0e:8b:08:86:
33:2c:72:54:8f:6b:55:ca:6e:6f:eb:4d:0e:64:86:
8f:d0:22:a3:d3:1e:6b:73:37:59:d8:44:aa:7d:65:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F1:FC:5D:21:BC:05:81:DA:CC:5B:27:41:44:65:2C:0D:B6:72:CC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.157.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:64:db:e5:c4:31:8d:c2:2c:f8:65:b1:a9:72:79:da:57:32:
80:89:e9:cb:1d:8c:6b:1f:c0:cd:3f:bb:74:6f:60:91:22:48:
4a:c1:a9:43:15:b4:e4:79:59:4d:ef:61:95:5a:0c:7d:32:86:
a7:90:db:1c:34:2d:ca:45:73:08:22:ce:35:78:a3:34:16:ac:
09:56:2b:1e:31:6b:a7:57:a6:6b:ba:0c:d3:1d:80:95:fb:e3:
01:9a:46:5d:c1:5e:31:26:ac:fc:f4:f6:f2:6f:ab:47:c5:c4:
75:b1:f3:b6:b7:26:44:7d:ab:08:41:2e:bb:fc:32:aa:64:97:
5b:fd:76:58:bb:df:f1:18:98:d6:86:a9:bd:8f:32:a3:74:74:
fc:71:33:18:81:b4:bb:38:9f:4c:ab:2e:5d:da:39:50:86:b9:
e1:a6:b1:46:45:0d:6b:8e:da:21:f0:22:ac:1a:47:0b:0f:19:
d0:13:25:66:de:80:6e:88:3f:a0:24:58:54:1a:73:fa:c0:e5:
d3:26:16:b7:b5:7a:25:6f:bf:b2:a3:37:7f:c7:77:45:88:65:
de:a3:cb:24:0e:2a:e4:6a:21:ee:ee:0d:ac:12:25:dc:33:0a:
2b:cc:1f:01:87:34:62:02:ee:b2:57:1f:fd:36:97:0e:a2:dd:
a1:96:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:41 2025 by rpki-client on console.sobornost.net