Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f35f654e-0ee0-473b-84c1-00d7715a6771.roa
File: f35f654e-0ee0-473b-84c1-00d7715a6771.roa (raw, json)
Hash identifier: 7fOG+DYOcNwDWea7twXULGBdaoLa3d1nURmqqeIhsow=
Subject key identifier: 36:73:E8:BF:5D:F7:29:CB:B7:B6:E1:0A:9E:C3:8F:71:F0:AD:D2:35
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 600C2E743555739357326619D727E7A2D918358C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f35f654e-0ee0-473b-84c1-00d7715a6771.roa
Signing time: Mon 31 Mar 2025 17:50:08 +0000
ROA not before: Mon 31 Mar 2025 17:50:08 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.93.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0c:2e:74:35:55:73:93:57:32:66:19:d7:27:e7:a2:d9:18:35:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 17:50:08 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=7218fd41cc90aefad1b2d4f2a01da489f40248497c594b28c9b7c575a2bf967e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:6d:30:e7:d7:23:12:84:61:cd:68:fa:1b:
4e:7c:07:e3:fd:c1:03:05:5f:f8:92:41:2c:3f:2b:
77:34:46:e6:af:2b:07:a5:83:1c:28:d2:91:88:86:
96:a0:b4:e0:d7:51:30:84:46:7e:10:c5:3c:89:2c:
df:3e:75:a6:ea:d6:54:ec:8d:80:4d:2a:cc:1f:13:
9d:e4:a5:0e:7b:84:2e:84:d6:e1:b3:ff:15:c4:6d:
a8:72:64:a0:5e:a0:af:04:c0:e9:15:36:92:d2:3e:
ed:b8:3a:c9:01:27:00:45:a4:5f:fa:e8:97:43:38:
06:83:28:84:fb:10:cc:19:6c:67:6d:f9:40:e6:d6:
2b:86:bd:6b:b2:5b:54:42:59:6a:fc:d2:49:79:f5:
92:ec:4f:d1:11:dc:28:42:11:b6:38:31:7b:77:f2:
4b:15:e7:36:24:f6:ad:c9:2a:d7:ef:b8:1c:e6:bf:
88:a4:de:a0:fd:35:f1:00:17:58:ab:1a:3b:f6:e4:
bf:0a:a6:2d:17:a7:5e:0a:f6:b0:b0:ae:b3:f1:1f:
8c:3f:dd:8b:85:da:fb:b6:e9:ed:75:6e:2f:d2:cd:
f2:c4:88:66:71:cf:e7:2c:be:25:f3:d0:d9:31:55:
11:91:7e:97:a9:13:e2:51:b9:3f:71:a7:78:fd:f8:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:73:E8:BF:5D:F7:29:CB:B7:B6:E1:0A:9E:C3:8F:71:F0:AD:D2:35
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f35f654e-0ee0-473b-84c1-00d7715a6771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fb:00:96:32:35:b1:4a:f9:34:a3:7b:c0:71:d6:d7:94:40:
63:4e:8b:29:ff:07:4c:20:f3:d3:ac:f9:aa:bf:21:6f:81:84:
64:93:34:c1:96:e5:a7:72:13:9a:68:2a:8a:c6:d7:a1:e4:29:
96:a0:91:ad:98:33:7d:5f:06:89:41:c1:70:e3:f4:92:7b:7f:
da:c5:0f:e5:6e:dc:7c:e1:87:5c:e8:a8:1d:d6:06:a5:cf:87:
ed:bc:ff:db:a1:7c:cd:6e:22:28:9a:30:d5:f1:5b:55:f8:96:
0f:77:2d:c7:b3:ad:9c:66:3b:7b:7f:7d:42:c1:73:1c:54:f0:
5e:79:78:a0:08:db:ee:f3:23:73:f8:e5:0e:84:3c:5c:a8:88:
27:e3:75:e8:d8:b4:03:08:87:99:ef:cd:ba:6c:07:06:94:7f:
93:11:57:f2:c3:a1:38:77:ef:34:03:e8:90:8b:f2:8b:62:7c:
78:3e:72:42:14:11:8b:c9:22:2f:28:8e:02:d3:f5:c5:48:f1:
39:1f:38:34:b5:30:57:f6:5e:61:2e:99:9f:d3:7e:42:d4:48:
51:06:23:93:51:78:4f:8f:af:98:bf:46:22:cf:e7:9d:72:bc:
60:32:32:b6:c7:b4:3b:0d:1d:63:3d:0f:57:39:6a:62:d0:9c:
57:d7:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:54 2025 by rpki-client on console.sobornost.net