Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd95ec7-ed20-4bc9-89ad-e103c0d05c9b.roa
File: 9fd95ec7-ed20-4bc9-89ad-e103c0d05c9b.roa (raw, json)
Hash identifier: kj0ImvEtf/FBhJtJPnHg0bKilULIVGOlj+DkhFIGpYI=
Subject key identifier: 80:A3:BE:97:B1:05:6E:30:35:F0:3D:76:CF:F9:03:7C:8D:BD:1A:03
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 166D9EF23F20C75083D08D325A5595EC4B38A3CE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd95ec7-ed20-4bc9-89ad-e103c0d05c9b.roa
Signing time: Mon 24 Mar 2025 16:01:35 +0000
ROA not before: Mon 24 Mar 2025 16:01:35 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.46.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6d:9e:f2:3f:20:c7:50:83:d0:8d:32:5a:55:95:ec:4b:38:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 16:01:35 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=b296ee72aae6b50fbd99bcdb09376f3b6ccb7f4fde0d0a029ab6ed3472afb76a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:1e:24:bb:28:4a:72:80:6f:f6:9d:7c:13:
b6:8d:ba:1a:6f:82:66:d6:2b:a0:9c:05:be:0b:f5:
fc:01:eb:67:7f:dc:f0:b4:79:f4:76:4f:a6:4c:21:
fa:08:65:69:2e:c3:14:04:a2:55:42:82:46:92:dc:
e4:b4:86:1a:46:53:d8:f9:1f:45:df:92:2d:5f:af:
64:50:ee:8e:5a:12:07:f8:cf:04:4e:bc:b6:69:ac:
d4:9b:9e:91:4d:ec:0d:ee:26:77:79:5f:ca:87:d0:
4c:a9:fa:ab:4e:bb:15:cf:49:f8:03:5a:18:27:e3:
0e:0e:cc:ed:58:bf:f4:4f:73:9e:57:2a:61:6b:80:
10:3e:92:a6:5b:ba:17:d8:32:90:07:65:27:29:16:
1b:a2:d0:5f:7a:b3:42:e7:33:19:80:af:81:a7:a3:
02:57:30:4e:3a:a5:64:30:1c:95:fb:b2:de:3a:13:
d6:34:29:61:92:91:ca:1d:30:75:60:c1:37:e1:70:
d0:44:e0:96:1c:bf:ab:d4:c8:9c:fa:2b:f0:d0:76:
43:98:2f:8f:bc:08:93:5b:21:4e:8a:9e:ff:a4:9c:
30:b4:f3:8a:17:8a:02:55:0c:52:30:08:62:98:fd:
de:ba:bf:de:97:18:74:c8:7f:8a:85:f7:a2:09:03:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A3:BE:97:B1:05:6E:30:35:F0:3D:76:CF:F9:03:7C:8D:BD:1A:03
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd95ec7-ed20-4bc9-89ad-e103c0d05c9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.46.181.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:74:fa:6c:16:8c:b9:bf:a2:ec:bd:58:18:f6:8a:f5:04:bb:
a1:7a:7a:47:da:51:ce:70:db:0d:e2:f3:44:7e:ae:8b:47:43:
64:aa:9e:85:01:f6:59:23:52:ec:d2:84:2b:4c:8e:dd:61:a2:
36:1a:85:43:01:5e:2f:0c:2c:58:b8:1a:98:03:75:45:3c:05:
9f:91:4d:49:9a:5a:5f:e4:1a:9f:aa:30:cd:53:81:52:db:6d:
e9:2b:ac:82:dd:ff:20:8d:3c:23:fe:74:d0:07:53:ac:b6:0e:
da:69:4e:89:25:f5:df:2a:b5:b6:63:85:28:d5:e9:e7:dd:e9:
13:84:19:02:9e:40:39:48:ec:9b:22:d0:24:b1:d7:e0:3b:27:
e0:9b:c9:36:21:22:e8:1b:79:82:85:14:21:c8:35:1d:e5:b4:
1b:14:ff:fa:54:f9:51:20:8d:44:31:36:17:bc:e1:92:39:bc:
7a:63:ef:c5:fc:13:3d:53:40:5d:df:19:bf:a0:0e:ec:43:ba:
72:eb:35:f2:ef:a1:a3:e4:38:fd:67:61:8d:77:f0:91:d8:70:
5d:ce:b0:97:f2:83:6b:cb:9a:2d:d8:ab:be:3c:0f:af:f1:fe:
e5:71:92:ef:3e:34:fb:71:b4:e1:7a:58:3c:aa:6a:44:9e:16:
62:4a:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:47 2025 by rpki-client on console.sobornost.net