Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c58af958-30ea-40e2-92af-e96d5d0e749a.roa
File: c58af958-30ea-40e2-92af-e96d5d0e749a.roa (raw, json)
Hash identifier: /rFQg1JTMcIpXR0WlEh0o2DRgg08qSy+aczlLUOJtvs=
Subject key identifier: 83:73:CF:71:65:E4:5E:1C:B3:91:DA:81:3B:02:6A:66:08:2E:C1:59
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4807CEA17E6669A41661BBADA9D05EBA77FFCC07
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c58af958-30ea-40e2-92af-e96d5d0e749a.roa
Signing time: Mon 14 Apr 2025 17:00:23 +0000
ROA not before: Mon 14 Apr 2025 17:00:23 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.190.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:07:ce:a1:7e:66:69:a4:16:61:bb:ad:a9:d0:5e:ba:77:ff:cc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 14 17:00:23 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=ccf8118d68cf430adf1526eb93f1f5641f8dfc860e3753f26396ed92085bba5a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:67:af:93:13:ee:35:87:78:b7:30:ff:61:
b9:12:6b:65:29:29:a8:08:cc:cd:94:a2:fe:34:f2:
77:ab:16:03:c1:48:08:2a:d5:a9:47:c7:5c:fe:29:
ba:ee:c2:d1:22:bd:66:fe:54:fb:2f:64:2c:06:a6:
fc:8d:08:a6:98:49:bb:eb:e6:69:67:0c:56:e6:7a:
07:b2:9a:b2:53:f7:48:ec:7d:f6:4f:0d:89:b6:26:
89:73:ad:97:e7:fc:b3:e6:08:65:c7:75:37:58:eb:
b7:35:99:7b:e7:7b:2f:bf:fc:9e:46:06:19:ee:1c:
53:ca:ce:78:24:76:b2:2c:84:df:41:4f:77:69:cc:
bc:58:03:f8:6d:97:58:73:1a:77:02:30:18:03:b7:
77:74:b4:ee:0c:55:18:8d:be:90:9f:19:d9:c9:17:
d5:08:53:ff:74:37:d2:58:6b:97:bf:bb:4c:34:69:
99:35:17:bc:7e:53:ee:44:f0:a0:54:2e:9a:e8:21:
a1:39:2f:df:35:f6:ed:54:5b:74:34:c6:ac:b0:ca:
7b:c3:f5:db:f4:ef:6a:10:77:5a:fe:73:82:b0:77:
59:a5:0e:72:b4:1c:36:94:ff:0c:b9:6d:ac:99:74:
1f:db:39:ba:a0:e2:69:c4:2c:76:ba:2f:53:ff:3e:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:73:CF:71:65:E4:5E:1C:B3:91:DA:81:3B:02:6A:66:08:2E:C1:59
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c58af958-30ea-40e2-92af-e96d5d0e749a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.190.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:0f:f9:3f:9d:f9:fd:f0:a9:d8:68:43:d4:c6:78:88:84:ea:
1e:75:fa:2c:75:78:4f:d8:3e:43:0a:f4:d3:ef:c0:0e:70:6e:
bc:a1:b8:f4:0f:a8:fa:97:34:e5:4a:bc:3a:bc:d5:19:b5:a7:
b9:ff:c2:fc:19:da:ba:68:50:46:2a:d6:ee:6e:ba:e7:d8:35:
91:dd:61:6e:18:7d:60:4b:aa:55:9e:31:06:ea:e0:e0:7d:45:
ef:9b:1f:6e:6f:ba:2d:80:9f:ad:16:cd:7a:3d:50:8a:38:a9:
fd:cc:6c:2f:ac:62:25:d1:3a:c5:0a:0d:1d:76:e2:63:f2:f4:
7a:21:7d:6d:05:15:80:72:25:9d:65:57:e8:8c:67:c2:95:7b:
61:a8:74:64:0a:23:7a:0d:64:3f:16:d3:43:d7:e5:72:5f:c6:
ca:7c:a8:29:5c:4e:3c:30:3f:f7:96:a1:b8:7a:02:82:81:36:
5b:6e:65:9c:9b:22:b3:3c:34:ff:c7:54:8d:1f:61:d2:05:f1:
e6:41:8d:85:ae:85:bd:c3:a7:ff:23:c7:d3:df:24:e2:cc:d0:
7c:21:47:39:4a:31:94:ac:16:19:ad:94:dc:e2:91:1d:a3:f5:
05:9f:93:99:1f:e0:65:08:d2:a3:89:9b:57:d3:8f:01:88:d3:
7e:6b:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:50 2025 by rpki-client on console.sobornost.net