Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/734bc6a2-2072-459a-80f9-d585f44cd80b.roa
File: 734bc6a2-2072-459a-80f9-d585f44cd80b.roa (raw, json)
Hash identifier: ecnwM4FX7TwhOjDPj4zpTiXz9XoHndzkXIDmApElTUQ=
Subject key identifier: 5A:7C:F0:22:D8:6E:1D:9D:5B:7E:27:D1:3C:E6:C2:54:6E:F2:E8:6A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 328BF8BCBDA18931ABF63EE502FF8387281CD9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/734bc6a2-2072-459a-80f9-d585f44cd80b.roa
Signing time: Mon 24 Mar 2025 17:01:42 +0000
ROA not before: Mon 24 Mar 2025 17:01:42 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8b:f8:bc:bd:a1:89:31:ab:f6:3e:e5:02:ff:83:87:28:1c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 17:01:42 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=57bfad39c543aa2f0b3415b3a71d33bc58854aca589a914df1957d2a367e35aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:4a:3e:4e:3f:1f:47:f2:75:9c:37:3a:cd:
1c:41:f7:b4:6a:6d:aa:6f:73:3e:8a:bc:bd:9e:0a:
fe:2f:3f:0b:19:ba:7a:3d:b5:f8:de:a6:d6:4e:16:
6a:f4:c1:64:4f:68:30:9f:43:27:c5:96:8b:b9:5a:
0c:e3:71:0a:bf:e5:6e:5d:ad:6c:0c:5b:dd:18:2b:
5a:63:15:c2:09:ea:5c:4f:c9:b2:ba:43:6b:ac:d4:
da:d2:77:cb:4b:0c:89:65:1e:54:29:91:8f:5a:89:
99:06:3e:08:3c:5f:f2:b8:fc:fe:72:4c:da:9c:9d:
e7:9f:e4:14:5d:f6:2f:c9:8b:99:50:49:e0:d3:30:
d8:82:2e:43:51:f9:fa:3f:f7:b4:93:be:1b:d6:ab:
7b:e2:9f:2a:62:bb:c9:0e:d9:fe:5e:d1:75:70:62:
39:a4:a0:71:a3:7b:6a:7b:db:4d:87:6b:6a:13:84:
aa:f8:32:2b:ff:de:c0:d6:10:d6:b6:72:30:91:a0:
7d:75:e5:ba:70:72:97:0f:c1:25:27:4e:dc:b7:b3:
73:29:ac:42:e5:14:0c:de:9c:56:05:ac:f3:3a:ec:
b7:31:f8:ae:04:28:0f:54:65:42:c8:13:ea:06:76:
46:04:b9:ea:3b:f2:d8:d7:8c:ea:bf:76:4f:5f:74:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:F0:22:D8:6E:1D:9D:5B:7E:27:D1:3C:E6:C2:54:6E:F2:E8:6A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/734bc6a2-2072-459a-80f9-d585f44cd80b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:f6:2f:a0:68:f5:b9:28:9c:77:cd:ee:9f:ff:6d:0e:b0:f8:
b2:0a:bf:e5:1d:66:fd:29:c0:00:b9:73:c6:5c:27:77:77:ca:
01:ed:fd:e8:25:d4:e8:24:a2:5c:1e:9d:c8:18:23:f1:4a:03:
5f:6c:e7:95:5c:04:a1:ef:ed:c1:1c:cc:3f:09:58:47:7a:d1:
b8:51:d0:a6:a7:4f:0e:db:bb:46:a0:46:9b:02:b8:2f:8d:2e:
48:3c:1f:6f:64:f0:a2:04:b7:84:db:88:80:d1:a2:94:8e:23:
d4:07:ff:86:32:21:7d:01:e3:ab:91:86:bf:9c:08:cc:e7:e3:
4e:02:ed:16:16:ed:9b:7c:c7:57:67:88:6f:81:b5:25:05:2c:
c3:35:4e:3c:f6:ee:a8:00:4a:1a:91:f8:1b:77:a3:49:2f:b3:
3a:73:e7:cf:17:8a:3b:4e:24:e5:8f:08:6e:57:b7:3e:c5:fe:
ec:f4:38:c4:ce:cd:5b:e0:d9:40:69:0f:2d:eb:27:2a:05:80:
2c:09:3a:99:76:53:37:8c:0d:59:67:e4:fe:14:b4:1d:2a:d0:
63:c9:a8:83:1f:88:b8:18:ea:0b:5d:94:58:50:2a:6a:77:40:
39:33:e5:72:2a:16:d9:fc:62:ac:1d:98:51:b1:38:23:3b:9d:
ab:ce:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:44 2025 by rpki-client on console.sobornost.net