Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de09c8fa-c953-4130-8e93-0bf39b348156.roa
File: de09c8fa-c953-4130-8e93-0bf39b348156.roa (raw, json)
Hash identifier: RjsJEu9ScSR4TQYHQ5uZ7+dmHgIbP7rtjVjpigkE4nk=
Subject key identifier: 80:B3:AA:03:F4:6D:76:A5:1F:B5:F0:D7:B7:66:79:69:A3:2D:A1:9E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 39F78C1FFD9D58531B02F4D93858BA67FD89900E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de09c8fa-c953-4130-8e93-0bf39b348156.roa
Signing time: Mon 24 Mar 2025 17:31:56 +0000
ROA not before: Mon 24 Mar 2025 17:31:56 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.195.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f7:8c:1f:fd:9d:58:53:1b:02:f4:d9:38:58:ba:67:fd:89:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 17:31:56 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=309b5bd7e99c213b75aaf7a42e6901d890ecc360dde291b3aa4080f292a55b85, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:00:3b:d5:fb:5d:20:5f:3d:eb:de:9a:40:
4f:05:33:26:bd:32:45:f0:7c:89:6c:a4:71:9f:cb:
a9:3f:ad:e5:88:f5:7c:cb:32:16:39:78:c6:67:bf:
32:e6:fb:1f:27:ea:0d:ae:a2:77:70:97:bf:a5:2b:
d5:67:25:0f:e7:1d:9d:37:b1:31:fe:8d:e7:6d:54:
39:39:b6:e9:25:f2:85:ee:b1:28:cb:47:b2:70:a8:
14:8d:89:9c:fe:d9:f8:70:5b:e0:6d:a7:e3:29:ae:
4a:19:c7:cb:57:d4:5a:0e:78:7a:5d:46:71:c4:ea:
84:95:3a:73:9c:59:51:b6:40:a0:62:6b:aa:6e:9e:
09:4d:50:f2:77:13:a9:b6:83:27:45:6e:02:1b:0c:
36:b0:05:ec:52:7b:27:29:08:61:f7:2c:d2:26:a2:
8d:a6:79:54:a1:86:f2:29:f5:9a:95:cb:84:eb:18:
16:f8:60:fe:34:98:15:49:9d:70:2b:63:83:fa:0b:
b7:0f:65:b3:a2:e3:dc:be:14:fc:c6:16:9c:9e:1e:
d6:94:f0:ba:05:2b:70:fe:bc:f7:04:ac:96:54:28:
80:83:15:a2:53:43:39:f2:aa:4a:11:bc:ee:df:72:
c2:2d:83:6c:04:2f:39:74:6b:e7:ab:7f:ad:9a:ec:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:AA:03:F4:6D:76:A5:1F:B5:F0:D7:B7:66:79:69:A3:2D:A1:9E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de09c8fa-c953-4130-8e93-0bf39b348156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.195.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:65:32:f1:46:8b:2f:ed:ee:da:d1:9b:5f:b6:f6:9b:9f:bb:
ac:e2:1a:f0:2a:77:41:e4:b3:7c:c9:5d:d4:89:40:7f:5a:f3:
68:2d:10:96:21:f8:71:e3:0f:08:dc:ea:6c:34:99:b3:df:41:
6b:03:33:e4:b1:6f:38:7e:b7:50:29:78:0a:53:a0:00:4f:a4:
e1:06:e8:47:e1:27:0e:24:cc:79:ed:a9:f6:33:c8:4e:43:c7:
a4:68:53:97:f8:3e:ca:b5:ea:49:4b:35:ca:5a:ce:b4:8f:5f:
03:89:10:8c:93:df:7e:26:2b:09:96:0c:0a:28:35:80:53:9b:
a4:14:be:f4:92:44:64:26:24:b6:14:0c:9a:1a:08:ee:0f:de:
1d:97:ed:0d:31:f9:76:c8:46:ec:73:83:db:76:3a:14:8b:dc:
02:37:34:f9:a4:a8:fb:dc:f7:05:98:6f:d3:ae:a2:13:25:03:
77:a0:d7:81:e2:91:ce:11:32:4e:35:d3:17:8b:d6:b0:f7:09:
13:f3:75:5e:37:df:c6:68:e1:a0:5e:af:69:a3:b9:2a:f6:89:
30:5f:08:ac:09:d4:d9:55:e5:ce:15:90:8d:72:5f:86:7c:b6:
c2:91:4b:3e:cf:25:d9:9c:75:a3:c2:b6:85:af:d5:00:c4:6f:
90:90:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:52 2025 by rpki-client on console.sobornost.net