Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b40bfb3-01cb-4413-b38a-91e9ca5af920.roa
File: 5b40bfb3-01cb-4413-b38a-91e9ca5af920.roa (raw, json)
Hash identifier: /zjn26iOSjS7nBuYCRelVo4R6uqqsOh8y4OUC1A/FEk=
Subject key identifier: 76:DA:78:98:F8:16:F3:E4:69:88:1F:3F:40:9F:8F:43:D3:A6:9D:05
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2CB111FA3DA1EB0437D7349B9AD904808EA81B16
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b40bfb3-01cb-4413-b38a-91e9ca5af920.roa
Signing time: Mon 24 Mar 2025 16:40:13 +0000
ROA not before: Mon 24 Mar 2025 16:40:13 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.195.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b1:11:fa:3d:a1:eb:04:37:d7:34:9b:9a:d9:04:80:8e:a8:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 16:40:13 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=4149565750f6dfb52b2b526eb1bca51d42afeb4a18958a9666da7be41e40fcfa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:ae:78:48:44:70:ed:47:ea:c8:09:53:99:
8a:3d:08:fb:da:43:21:79:42:40:c6:05:c7:9e:00:
e5:d8:b7:ed:df:89:9c:8e:10:a6:9b:f1:cc:06:6d:
5b:78:24:d0:8c:7b:79:16:1a:2f:58:88:54:ab:35:
40:20:5d:24:b1:85:4e:f5:59:fe:e3:46:cf:8d:2f:
61:92:29:07:b2:0d:0b:72:47:6e:de:f9:7b:af:a8:
b3:48:df:a5:f9:f6:1a:fe:62:9c:0e:1f:7c:e6:f3:
8f:bc:49:d8:bf:a5:b7:e5:52:b5:3b:18:26:27:53:
9d:f3:5c:f3:e6:4b:ad:a2:e5:d7:70:93:85:f9:35:
61:0e:77:2c:f3:c0:df:09:27:89:24:6b:7a:ad:77:
14:01:a0:e1:66:9f:e8:aa:c8:01:10:dc:bd:c6:50:
c8:aa:e4:ca:8c:6e:ac:82:c0:3f:17:66:a5:8b:1d:
a6:87:1d:4e:bc:3c:a3:00:39:85:51:c3:23:fb:ff:
4e:09:b7:70:df:6b:dc:45:95:58:ea:e3:7d:8c:9f:
63:bb:9b:e5:55:5e:3b:b6:fe:9e:a7:ec:9f:83:8e:
d4:bf:b6:14:84:ee:95:6a:5e:12:3f:39:bd:63:5a:
65:4b:f0:2e:2a:da:4b:ab:f5:1e:b0:f8:87:97:a8:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:78:98:F8:16:F3:E4:69:88:1F:3F:40:9F:8F:43:D3:A6:9D:05
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b40bfb3-01cb-4413-b38a-91e9ca5af920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b8:c7:90:d7:2a:96:07:8a:b8:ba:42:3d:eb:51:5b:0a:ef:
5d:e0:bc:84:64:f4:a3:2a:37:fa:a0:dc:32:a6:17:5f:3a:85:
3e:22:32:05:ca:77:9c:6e:31:1e:b2:43:ad:fa:13:e5:01:5e:
e7:9a:64:da:75:a0:d9:04:47:25:2d:f2:47:90:e0:54:0b:0c:
ae:b1:39:3a:15:f2:f9:ec:12:c5:09:8f:a2:a5:29:9c:01:0a:
23:df:b1:80:af:6e:65:d6:84:37:5f:8b:d3:f2:f9:e6:6d:7a:
10:ec:2f:92:ef:6d:d2:05:4f:52:98:20:93:fb:ff:4b:62:b1:
ad:76:5e:a0:e1:10:7b:9f:91:7d:00:47:74:52:11:7f:ee:7a:
b4:95:b5:09:6b:cd:32:26:72:85:5c:12:f1:b4:2e:5c:e3:0e:
ed:b8:cc:fb:8c:59:f5:ac:de:c3:4a:58:e7:21:01:a3:b7:6e:
0b:62:8c:72:41:9d:9f:39:6d:2a:28:c0:6e:f1:2c:48:65:bc:
23:ad:44:02:60:8b:e4:a8:a0:5a:1c:d3:5f:8f:4b:de:a6:fb:
7e:a9:f2:82:5c:75:4d:3f:24:a0:dc:69:ad:4e:82:ab:23:32:
dd:c7:b6:20:41:b9:4c:c8:d9:25:bc:e2:9d:aa:fc:69:1a:34:
31:9a:51:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:42 2025 by rpki-client on console.sobornost.net