Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc159d3e-cc4a-4d16-a129-ff2bd172215a.roa
File: cc159d3e-cc4a-4d16-a129-ff2bd172215a.roa (raw, json)
Hash identifier: GJN4i00UUY91GhQ9o1IPAEK3Qp04vfIOwU+tC/ce1Dc=
Subject key identifier: 25:AC:93:03:EF:69:D4:80:2B:D9:CA:83:03:04:2C:6F:8F:A5:1C:23
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 106EE024DB77E18F7BEF1BBD768DE23498883897
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc159d3e-cc4a-4d16-a129-ff2bd172215a.roa
Signing time: Mon 14 Apr 2025 16:21:00 +0000
ROA not before: Mon 14 Apr 2025 16:21:00 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.13.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6e:e0:24:db:77:e1:8f:7b:ef:1b:bd:76:8d:e2:34:98:88:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 14 16:21:00 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=7b1e4d748fb89aed1db5ded58075bd0b7b911f7ce85a9b4d899abdc430431614, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:ab:f0:10:d0:7a:70:5c:c9:48:9a:68:10:
09:1d:b1:26:df:e3:61:fe:f5:d0:c9:42:48:b0:b4:
c7:36:59:0f:70:da:8a:14:f7:59:6e:02:3f:1f:d3:
69:96:81:10:d5:07:13:88:7c:c9:91:79:af:92:97:
5a:d5:e4:b7:8a:27:0e:e2:27:d1:58:fe:e6:da:c9:
e8:17:b1:e8:ef:0d:42:46:ef:cc:1b:a0:77:46:70:
b4:eb:f5:64:cb:4e:55:70:ba:50:ce:01:43:3c:b1:
1e:cf:79:57:a4:d1:7f:d5:fe:6b:f2:67:e3:85:94:
76:3f:81:4d:cb:97:fe:90:db:7f:b2:a2:2e:38:2e:
60:c0:ae:52:c3:c2:85:7b:0a:ef:5a:27:19:dd:9d:
10:cf:7f:30:88:07:65:9e:22:1e:1e:a6:d0:f0:00:
ea:bf:b0:18:5b:62:37:de:8b:d5:03:63:84:b6:df:
ae:d9:7d:93:41:7c:52:4c:52:93:f1:35:df:5b:d4:
6f:8f:17:d5:65:00:f7:1f:6d:2b:9a:0d:74:73:38:
fb:5e:2e:e0:47:63:bc:d9:a7:a8:37:b8:16:97:31:
dc:3d:ac:85:cd:ff:b1:6d:42:e9:0f:91:a2:eb:7d:
66:42:db:8e:63:8f:b8:9e:51:49:4b:2e:e4:ba:bd:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AC:93:03:EF:69:D4:80:2B:D9:CA:83:03:04:2C:6F:8F:A5:1C:23
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc159d3e-cc4a-4d16-a129-ff2bd172215a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.13.255.0/24
Signature Algorithm: sha256WithRSAEncryption
74:90:89:ce:ff:a4:bf:c0:cc:43:9d:03:21:b5:6a:56:66:bc:
b4:66:bc:d1:a8:22:be:64:64:a8:26:92:8a:3f:7d:1c:34:50:
cc:b5:d0:60:a5:42:c6:e8:bb:ea:b9:75:a2:66:3d:10:8a:2b:
e9:62:f9:21:c0:a1:b8:e8:07:ef:97:71:1d:84:34:10:36:53:
07:7a:55:ab:df:72:93:0a:5a:93:a3:9b:ec:0d:60:73:66:e0:
e1:22:a1:17:90:e8:53:34:1f:ad:f8:94:1b:a4:76:83:df:ba:
a5:5d:9c:be:e8:71:8f:67:29:b4:84:6c:47:c3:df:c2:7a:67:
4d:e4:53:cc:f8:bd:c3:f9:45:5c:33:07:51:17:28:10:b0:15:
c4:25:48:4c:31:ab:eb:a7:0c:d6:73:9b:fc:75:f3:ce:39:11:
28:25:dd:9e:ba:ee:06:55:0a:9b:6d:76:74:5f:fe:1b:05:da:
2c:b1:1b:dd:c9:89:46:8e:af:d1:e1:9d:94:25:66:6e:fa:9e:
b0:94:95:d7:f6:67:e1:c9:65:23:07:42:ad:d4:17:8e:fe:e8:
5e:c1:78:15:35:c4:21:7c:eb:5e:70:52:fa:49:e2:8c:27:b9:
d8:cc:52:c5:58:79:51:b8:e1:07:3f:46:de:18:1e:50:c8:71:
b0:b0:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:50 2025 by rpki-client on console.sobornost.net