Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fc092-e580-400a-b2d8-503cebd78c57.roa
File: cb4fc092-e580-400a-b2d8-503cebd78c57.roa (raw, json)
Hash identifier: VMMX+4b8XbxACy1OvkP6VFlCQZpD6SoCj4560p4wBIk=
Subject key identifier: 9D:7C:87:D0:79:6B:77:9C:BF:7F:45:C0:A6:FD:7A:5C:E8:67:D0:9D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5EF01CC8ADBA6BEDF449224764BA9F18A374623B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fc092-e580-400a-b2d8-503cebd78c57.roa
Signing time: Fri 28 Mar 2025 18:11:42 +0000
ROA not before: Fri 28 Mar 2025 18:11:42 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f0:1c:c8:ad:ba:6b:ed:f4:49:22:47:64:ba:9f:18:a3:74:62:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 28 18:11:42 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=cfc8f096b2d8b16c5e82af625678df022a63ddec5b2d87cc5c41a977b61a40c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:f7:1d:6c:49:3c:50:97:a4:94:87:17:19:
82:bb:27:d5:f3:9e:04:4e:a2:c9:52:71:17:d9:03:
d6:94:90:cc:25:94:04:2a:5f:74:9b:b0:f0:0d:34:
37:bc:b0:f5:79:06:f3:d3:b0:45:c9:c2:0c:63:d9:
a0:17:61:27:55:1e:85:9f:d0:ef:5f:bb:24:f5:3d:
6d:f9:07:13:78:c8:33:89:75:75:22:14:a0:41:f6:
57:1e:85:b0:d8:05:d1:59:6c:dd:45:9f:63:cb:51:
1b:78:60:de:b0:f0:ad:35:27:3f:0d:fb:ec:93:b4:
30:38:57:29:cf:9f:bc:12:14:21:9d:6c:99:9d:09:
34:05:6b:26:98:84:36:63:60:d0:27:46:ea:99:e5:
5e:15:1b:97:52:30:42:ab:7c:c0:fa:60:fb:97:1f:
c0:aa:63:03:42:6c:57:b4:ba:5b:5e:91:36:fe:85:
4c:8a:02:72:ef:c5:92:59:ce:d8:c9:fc:72:b6:ac:
06:3f:3c:13:95:d1:7c:ce:cc:02:01:72:8c:7a:83:
57:a4:d4:09:5e:98:43:f9:a2:1b:e9:77:8b:6e:8b:
f9:1b:1b:29:e4:19:c4:b9:a9:25:e7:d1:8e:d1:93:
83:94:5c:77:f8:bc:9c:f4:2a:30:c4:9b:27:b7:11:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:87:D0:79:6B:77:9C:BF:7F:45:C0:A6:FD:7A:5C:E8:67:D0:9D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fc092-e580-400a-b2d8-503cebd78c57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.60.0/22
Signature Algorithm: sha256WithRSAEncryption
02:4f:11:b1:86:b2:e1:c8:80:e3:07:c5:f8:ed:04:6c:70:f4:
97:28:57:41:1e:3b:cc:1f:60:a2:86:5f:e6:bc:62:47:02:93:
c2:eb:81:45:10:b8:7a:22:1b:c0:96:20:86:69:f0:ca:9d:7a:
b7:e2:3b:23:4b:33:79:79:1e:e9:8e:47:43:14:7d:03:15:be:
11:0f:2f:fc:c6:20:98:8b:74:9a:4a:08:06:0d:26:e9:f4:9c:
b4:db:11:87:08:22:65:78:4d:87:d7:70:0b:3a:02:fd:85:b7:
75:e8:ae:f1:a3:27:39:7c:ae:da:ff:9d:2a:90:5e:2b:9d:80:
c0:95:d9:e8:12:21:29:6a:23:62:bd:ab:8e:5f:1b:c5:a2:12:
87:04:29:c5:17:03:40:c8:1b:5c:af:ca:d4:a5:1f:06:85:bf:
b8:e0:cc:e0:23:a0:0c:cd:90:a8:f6:25:73:9f:11:79:74:5d:
26:92:c2:6f:c3:79:b0:5c:44:98:5f:c9:37:7b:65:9e:6b:ac:
44:3b:8d:79:36:a0:09:f9:57:7c:35:8a:1b:fe:9e:dd:8b:7a:
b4:1f:02:ed:85:a4:93:bd:49:aa:36:19:42:5e:83:db:b4:88:
f7:3e:90:c2:37:0a:b8:af:3b:26:85:4d:b4:46:56:ac:71:02:
d8:e5:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:50 2025 by rpki-client on console.sobornost.net