Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edd09bd6-fda0-480c-ba20-8a56d0379fb1.roa
File: edd09bd6-fda0-480c-ba20-8a56d0379fb1.roa (raw, json)
Hash identifier: QlgkwzvO66zfRjqY3T+XLOBzD9/xVSnMTnI9Bk4I2FE=
Subject key identifier: B9:13:C0:74:5B:D8:3D:BD:65:DA:EE:25:D8:55:87:85:FE:0A:39:39
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3DE00DAD34E934BEEDB882792EE7C3D611A70AFC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edd09bd6-fda0-480c-ba20-8a56d0379fb1.roa
Signing time: Fri 28 Mar 2025 18:10:25 +0000
ROA not before: Fri 28 Mar 2025 18:10:25 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e0:0d:ad:34:e9:34:be:ed:b8:82:79:2e:e7:c3:d6:11:a7:0a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 28 18:10:25 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=87607d47e1ffde65fddfea76d0f59f9a3e45e048c68077e9825f94494b6ac4ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:fc:54:0c:81:8d:d2:55:8a:2d:b9:4c:8e:
76:8b:b5:78:55:7d:96:ef:ab:1b:34:38:65:4a:73:
bc:98:62:1a:5d:c2:bc:b1:18:c6:b7:d0:b6:ae:ff:
41:7e:59:fc:68:d1:cb:f1:58:38:5b:b8:f3:4a:a7:
45:35:15:bc:25:7e:b0:5e:c1:30:ad:c5:43:da:48:
f3:d7:73:05:d9:4c:8b:ce:28:1b:b9:6c:41:7c:1b:
cd:eb:45:60:5b:a5:ac:1b:ee:a9:bb:a9:b0:da:fc:
fd:58:7c:cf:fb:9b:c2:e2:77:1d:1f:c1:49:be:2c:
e1:d7:9d:26:0f:d4:69:5e:72:bd:36:69:5c:5c:b0:
d6:5c:c9:71:d8:bc:c5:f0:77:69:70:9c:fe:87:df:
46:66:78:c6:a0:09:ab:87:24:32:b3:d9:12:3d:7c:
54:a3:07:0e:6b:aa:26:ff:43:46:4f:89:66:cb:7c:
b9:e4:94:93:ad:d7:f7:04:68:04:bf:21:60:2c:1e:
f3:86:6b:b3:5e:73:42:18:ad:21:9d:9d:9c:65:af:
0f:e0:84:9b:f2:ae:98:52:c8:79:c7:3a:3f:37:57:
b3:e6:3e:e0:8e:e7:d8:55:b5:6c:b2:7e:5d:ae:fa:
bc:d7:6e:82:6a:0d:6b:a1:f2:8b:09:60:90:af:28:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:13:C0:74:5B:D8:3D:BD:65:DA:EE:25:D8:55:87:85:FE:0A:39:39
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edd09bd6-fda0-480c-ba20-8a56d0379fb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:e1:c9:b6:2a:12:b6:7f:d0:49:b7:c0:21:14:18:8b:10:39:
e1:2d:9d:30:dd:0f:10:18:f7:50:a5:52:f4:a6:56:c4:5e:92:
2e:65:cb:ce:d7:84:9c:51:b3:93:87:6c:0b:7f:c5:61:a5:10:
64:ca:2c:94:fc:e3:a7:fd:48:bc:69:36:73:d8:40:dc:cc:1a:
42:03:2d:c0:87:fe:ba:31:e8:8a:5b:fc:04:8c:58:09:d0:01:
c1:e8:27:f9:10:40:4f:e6:48:51:9f:f8:7d:1f:7c:1a:fc:66:
bf:4b:62:6e:0b:f7:4b:f6:f1:0c:01:72:06:de:17:fa:8f:22:
9c:0e:a5:84:76:47:4d:b7:6f:f7:fe:d1:74:33:6e:35:d5:d0:
54:b0:57:88:ff:82:58:08:cc:53:5f:f5:88:d8:35:32:81:06:
32:b8:d0:fa:fd:ca:8d:54:ba:87:86:87:ac:08:c3:df:05:40:
12:4a:0f:3d:3d:ec:0c:b0:55:77:76:22:3b:cd:9e:66:31:f8:
92:7b:6d:7b:6e:7b:18:9a:00:5c:35:4c:c7:ea:4a:3b:c6:89:
6e:b4:a8:7b:c3:bd:72:e8:e4:05:45:7d:9e:22:ba:57:61:8e:
66:bd:bb:7b:c3:5d:ed:67:42:f4:87:54:e6:76:d1:d9:98:b8:
fa:b4:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:53 2025 by rpki-client on console.sobornost.net