Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c151a2c7-3538-4f4f-a829-119c02bbf7b0.roa
File: c151a2c7-3538-4f4f-a829-119c02bbf7b0.roa (raw, json)
Hash identifier: HBZcwE66FcNktjL7LyaHkTKFKghi3KbNjrlanw9ElVg=
Subject key identifier: 2D:A6:4C:22:B9:7B:31:24:E9:08:52:46:45:24:E2:70:41:C0:16:06
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0A35743284D0A8244E9C139300F082E63BBA25D7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c151a2c7-3538-4f4f-a829-119c02bbf7b0.roa
Signing time: Fri 11 Apr 2025 00:20:28 +0000
ROA not before: Fri 11 Apr 2025 00:20:28 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.93.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:35:74:32:84:d0:a8:24:4e:9c:13:93:00:f0:82:e6:3b:ba:25:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 11 00:20:28 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=cb48deabeb4ba8c47b0df1f3a5fab129726848e5f09c179c9421a4887e790f40, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:4d:61:50:24:49:5d:24:ff:12:81:3d:b4:
81:70:3b:29:a3:d2:2c:e4:39:46:40:bc:f8:e0:d5:
38:ce:86:72:9a:a2:41:77:e3:90:48:e2:76:e6:01:
4a:f5:7c:2d:39:0b:12:08:12:43:af:c2:23:b5:b5:
41:82:ff:1f:e0:d2:d2:e9:8a:e0:9b:fe:31:58:65:
be:81:82:e8:b3:e4:13:98:a5:26:04:47:d5:29:e8:
27:8a:97:39:ea:22:09:f8:04:0c:5c:6d:dc:6d:bb:
db:72:83:2d:bf:d7:76:5f:d8:0c:c7:0e:72:11:6b:
8f:71:97:1b:0d:c7:37:dc:41:9f:4e:4b:94:db:66:
c2:2c:ad:06:82:2e:7e:55:13:1b:64:fe:fb:19:2b:
f6:17:ca:59:11:92:60:45:de:c2:e8:9a:1d:95:8e:
36:36:28:60:3f:84:08:16:3b:4c:4e:a8:9d:6e:94:
ac:c2:9c:e7:de:14:5f:3b:78:2f:a7:f9:ad:d5:1a:
ad:ed:3a:df:9e:29:8c:6b:bc:64:23:fa:19:dd:55:
1d:2e:2b:6a:2d:a7:7b:1b:38:c3:a8:ee:6b:16:ef:
2a:3a:36:58:e7:3d:33:a4:ce:48:e8:22:5e:f8:ee:
68:7d:6f:09:16:0f:dd:c2:07:7e:3f:f7:3b:89:94:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:4C:22:B9:7B:31:24:E9:08:52:46:45:24:E2:70:41:C0:16:06
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c151a2c7-3538-4f4f-a829-119c02bbf7b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fc:17:fb:e8:eb:a6:12:83:41:d6:e0:b1:c1:95:a9:f4:3d:
b3:13:1b:18:c0:ab:c3:8a:1c:39:24:23:55:52:58:ad:85:dd:
4f:28:f3:27:43:26:fa:08:83:e8:dd:5b:58:cd:2b:d5:d3:99:
b8:63:22:60:92:5e:7b:1c:e0:3e:c6:8e:59:c9:a0:69:2a:d9:
bf:7c:7d:3e:9e:3a:c4:35:1c:40:ef:33:c3:46:e1:d6:a1:ff:
05:64:55:61:b9:49:7e:86:58:fa:33:62:9c:34:29:26:8c:9b:
dc:41:0d:5d:fe:1a:8c:2a:92:91:03:b7:1d:34:98:e0:e4:59:
f5:2a:45:22:52:29:ec:3d:c7:c1:67:a6:2f:3c:79:d1:1a:99:
2c:40:84:14:d6:c4:a0:cc:50:27:71:25:2b:5d:6f:6f:c9:7c:
8b:9d:c9:75:6f:9e:f7:32:7c:38:1f:e0:9b:9c:b1:81:17:b8:
7a:cd:bb:b9:7a:41:0a:d6:b5:8b:31:71:8b:f1:59:4c:f3:61:
91:f4:44:fb:b8:ed:cf:9c:ec:51:06:5f:d8:0d:d1:b5:bc:3e:
c5:ec:47:75:58:37:08:5f:1c:1f:12:ec:d3:8d:c5:1b:e8:66:
c6:15:20:ff:d6:10:da:33:7d:70:59:d7:40:2a:86:e8:6c:28:
b2:32:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:50 2025 by rpki-client on console.sobornost.net