Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56194df2-6520-4c81-8d58-06bf6549e521.roa
File: 56194df2-6520-4c81-8d58-06bf6549e521.roa (raw, json)
Hash identifier: afsMAg1lEkDWsCiqsVfZCLp3aNnkCxklduY1NMkDeSQ=
Subject key identifier: 00:20:64:F2:87:CD:AE:B2:AB:14:43:A4:B0:C9:4C:04:79:1F:DC:6A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 08687E580AC476DD68AFF1024C65E9B45CC1FB03
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56194df2-6520-4c81-8d58-06bf6549e521.roa
Signing time: Mon 24 Mar 2025 17:50:09 +0000
ROA not before: Mon 24 Mar 2025 17:50:09 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.239.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:68:7e:58:0a:c4:76:dd:68:af:f1:02:4c:65:e9:b4:5c:c1:fb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 17:50:09 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=73a3830d9ba7ad0edace06aa0f81d3adaf4c02abb913b96e783d7b69ea551109, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:42:dc:d3:e9:97:ed:fc:ef:e2:c1:e0:79:
d1:a4:7d:22:21:1f:81:6a:80:a3:ce:bd:c0:db:f0:
e1:c5:82:5f:c4:d7:7f:6b:f4:cc:ac:2b:5e:d2:83:
50:bd:e0:2d:09:7f:32:e9:94:10:be:9e:bc:36:21:
ea:37:ad:ba:02:80:2b:55:48:c0:49:06:d6:bf:4c:
58:9b:b4:f6:67:e5:27:cb:84:e6:68:0a:32:b7:d7:
d0:ad:7d:bc:cb:23:a2:da:b5:7e:3e:22:72:55:6e:
f4:1f:b9:a7:2e:81:5b:20:c8:37:89:fd:ef:86:cb:
5e:38:af:e2:fe:8e:44:5f:c7:54:13:23:5a:7a:5c:
e3:03:e1:05:31:e9:e9:ae:6a:4c:0f:6c:3b:96:7a:
96:87:c1:0e:bd:65:cc:75:e7:f5:b9:d1:2b:89:54:
8e:6e:44:49:14:6f:bc:55:1b:4b:f0:de:f0:a5:32:
17:bf:e9:6d:e3:fe:ec:73:bd:7b:89:33:99:72:ba:
a4:5c:d6:cc:e1:18:0d:ab:94:4b:1c:44:a5:b0:26:
05:ae:e6:92:26:1e:5d:d4:03:e7:ec:79:7b:6e:b4:
6f:f2:e5:9a:2a:80:b4:d8:4d:55:ca:73:bc:af:5f:
86:5d:f5:ae:80:1e:ab:78:ce:4f:12:12:e0:da:2b:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:64:F2:87:CD:AE:B2:AB:14:43:A4:B0:C9:4C:04:79:1F:DC:6A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56194df2-6520-4c81-8d58-06bf6549e521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.239.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:9a:9e:d7:86:ab:70:3a:83:15:3b:31:d8:b0:d4:ce:d2:99:
8c:bf:81:e1:a1:77:2e:75:c0:52:61:a2:4e:fe:bd:3c:04:47:
ff:2f:f9:27:0f:a4:90:26:2e:e3:6e:21:67:5f:e9:0d:42:36:
29:03:6b:21:74:7c:c6:c5:d9:ba:99:9e:42:43:00:6e:aa:72:
36:bb:e9:6a:78:55:34:19:b5:d9:ab:1b:5d:94:b2:33:cb:15:
bd:2b:df:05:9e:16:bb:a7:b4:35:2f:f9:5c:84:19:8a:f4:73:
de:99:fc:32:6b:c4:3e:b5:15:de:60:2f:cf:e2:08:58:ba:3d:
cc:74:3a:c3:ee:0f:23:1b:5d:7b:53:f9:32:c0:8d:54:28:24:
f0:34:68:d9:cd:c1:0d:5b:62:89:56:50:f6:f2:76:0b:86:c8:
db:a5:f8:2c:bd:b0:e5:92:0a:41:25:41:8b:95:80:35:62:c8:
6f:31:0b:4c:ad:a1:db:40:e8:40:fb:5f:7e:7d:45:33:22:02:
40:66:65:56:63:46:bf:9b:94:69:94:44:3b:93:45:8e:b7:de:
1f:0c:ad:10:6e:8d:b2:17:29:62:54:ee:69:62:1a:59:66:eb:
0a:57:58:a6:78:d6:38:ce:4b:5c:c9:ba:05:54:a0:74:3f:e0:
eb:18:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:41 2025 by rpki-client on console.sobornost.net