Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/655dc0ae-967a-4b01-b1da-150fe587b90e.roa
File: 655dc0ae-967a-4b01-b1da-150fe587b90e.roa (raw, json)
Hash identifier: m6VGKB/qnnr2JlDQ3iXoa3r9MSxFTSjdrZMsMJBAnpo=
Subject key identifier: 0B:E5:9B:1F:8A:76:6F:B7:10:32:56:6A:64:11:26:1B:55:85:EB:A4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 67F447C273498F587D5E3643C7400D54BB547B24
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/655dc0ae-967a-4b01-b1da-150fe587b90e.roa
Signing time: Mon 24 Mar 2025 17:30:10 +0000
ROA not before: Mon 24 Mar 2025 17:30:10 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.227.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f4:47:c2:73:49:8f:58:7d:5e:36:43:c7:40:0d:54:bb:54:7b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 17:30:10 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=77867d31583ffb5299c63ded8cb39db475c8870a8df25100d4bff60d9d5b1d30, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:07:4a:f4:ec:65:c4:eb:40:be:8e:c3:40:33:
67:bd:03:11:34:85:aa:c6:70:27:21:a3:fe:21:6c:
e0:06:64:9e:27:4b:e8:60:fb:9d:a9:77:31:30:53:
5c:be:7c:54:f4:52:02:10:26:26:2f:3c:63:45:a0:
bd:fa:ab:59:a6:61:bf:5b:bc:93:8c:32:a2:77:39:
39:09:59:a2:6e:01:22:61:8d:ea:84:9a:e8:1f:53:
12:7c:02:08:e5:a5:64:7f:fa:2d:17:f1:e9:09:d0:
be:5c:34:f6:cd:54:1f:44:ba:7f:4f:8d:c5:e1:4b:
cb:41:1f:ec:0c:4e:fa:0c:4a:c7:12:45:59:be:bc:
e5:01:69:14:c7:f8:01:21:d4:9b:c0:db:53:8f:42:
ce:cd:30:bd:c1:d9:4b:d0:97:3c:31:6c:76:14:21:
89:eb:14:fe:4d:13:b0:0c:b6:99:d1:2d:1c:10:01:
95:39:bf:e9:6e:73:cf:36:48:12:78:61:c1:c4:47:
9f:62:1e:20:38:08:84:fc:f1:d7:97:50:ff:9e:8f:
ac:c3:73:13:9b:75:d3:59:96:d6:72:10:cc:10:59:
3d:93:99:21:1d:50:7d:fc:f0:0c:82:a2:a5:40:6f:
43:01:f0:5a:50:0a:32:6f:72:67:3e:80:60:fc:73:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:9B:1F:8A:76:6F:B7:10:32:56:6A:64:11:26:1B:55:85:EB:A4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/655dc0ae-967a-4b01-b1da-150fe587b90e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.227.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:11:4f:61:b4:70:d7:73:0a:2c:74:58:ff:c4:72:43:b3:f2:
bb:db:5b:02:4c:cc:9a:c7:f6:19:a7:e2:6c:99:0e:5d:1d:af:
d5:b5:d8:a7:1f:99:88:e3:95:00:ca:1f:1e:2a:39:7d:05:a0:
20:58:8e:4e:b8:37:bb:7d:7e:06:d5:38:64:77:d7:b4:16:d5:
72:d5:d7:b2:e1:f7:9b:d9:12:42:20:a3:6b:a8:87:7b:a0:48:
7e:a8:28:01:03:b4:dc:fe:27:0a:9f:1c:b1:61:6e:91:30:67:
ed:20:7e:5c:ae:cf:ad:f8:63:c2:34:dc:84:ef:43:7e:a8:6a:
4e:46:cb:86:a8:50:75:ca:49:00:b8:66:11:16:ac:93:39:a4:
e5:78:e5:f8:fc:e4:91:e0:f3:d6:fa:35:1a:74:09:1b:ab:62:
3c:54:32:56:55:9c:bf:23:d8:d8:72:33:3a:5e:e1:3b:1e:39:
42:33:d6:6b:de:2b:3d:df:4f:b7:4e:58:eb:17:5b:3e:1f:11:
ca:c9:25:e9:43:fe:10:f8:7d:22:2f:5c:a1:49:e3:10:1b:63:
06:ae:71:8b:68:68:7b:a1:3c:88:b8:5e:bc:f2:bc:f3:78:fe:
bd:64:e0:55:19:3a:79:b8:fc:39:29:b2:6f:b1:87:c4:2d:99:
1d:00:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:42 2025 by rpki-client on console.sobornost.net