Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dc7048d-9085-40d1-bc39-ec8dce65479a.roa
File: 1dc7048d-9085-40d1-bc39-ec8dce65479a.roa (raw, json)
Hash identifier: hxaN+gnbEQVfnmS/qADD9a0jaVKJy/0HeNmOJGp/gmw=
Subject key identifier: C4:B8:3A:F8:9D:3F:ED:9A:29:CF:46:75:56:BF:0C:2B:94:CB:2A:29
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 12F8A1CD951F8A40EAF9561E0D9FD5EBFE5FED28
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dc7048d-9085-40d1-bc39-ec8dce65479a.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.71.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f8:a1:cd:95:1f:8a:40:ea:f9:56:1e:0d:9f:d5:eb:fe:5f:ed:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=b06da2c249f98ac4a3da47e23eb96126b53ac65a0f8c58f31ae5d42197703c22, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:14:0e:8d:05:7c:8e:ce:20:12:26:f4:25:2d:
8f:bc:11:e7:2d:d8:46:1f:f6:ba:10:6f:2e:84:3a:
e2:62:46:e5:ed:77:ce:7c:d3:6a:78:2e:43:66:51:
e5:ca:f6:95:cc:0e:85:dd:2d:50:88:01:cf:0c:34:
93:7f:e0:27:fd:55:18:45:0a:35:77:7e:18:81:91:
95:9b:da:6a:35:14:da:e9:4c:9e:94:41:e7:32:85:
a2:af:e5:43:30:2e:90:5e:09:5f:2a:90:27:5a:ed:
d5:ae:85:c2:5c:49:fd:ca:ae:03:cd:b3:65:bb:71:
17:f2:8a:1f:2e:f5:d8:8f:d1:bd:ee:d3:fa:21:07:
06:1c:0b:46:ae:4a:87:7b:5f:05:7d:ee:9f:49:57:
ba:cd:55:5b:4f:8c:1a:76:87:93:93:c6:65:6a:27:
b7:27:e9:c0:9c:64:9c:3c:a6:4d:4a:f9:49:3f:a5:
bc:82:a1:4f:8d:79:4b:58:00:65:ae:d9:50:8f:df:
63:5a:04:c4:28:8c:c2:88:d8:1c:9c:84:a4:b7:33:
98:4d:46:0c:80:9b:f4:2c:a9:0a:5c:99:95:bb:51:
28:29:7f:fe:cd:97:b9:81:a1:15:5c:55:6f:ba:a0:
d3:f5:cc:7f:d4:46:9f:22:f9:ae:cd:c7:07:92:e1:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:3A:F8:9D:3F:ED:9A:29:CF:46:75:56:BF:0C:2B:94:CB:2A:29
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dc7048d-9085-40d1-bc39-ec8dce65479a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.71.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ab:5e:ab:1a:60:8c:a1:7c:a8:1c:2c:77:9e:d9:46:ac:35:
fb:db:1c:f4:1c:64:5f:d3:bd:c6:b7:eb:84:7e:ca:66:7a:b5:
da:7d:b8:e2:1f:35:a1:5a:60:4d:14:ba:ab:b3:e6:1d:3e:dd:
4e:04:27:db:b5:87:b8:0e:c5:9c:3a:02:88:72:a6:7f:99:88:
cf:7c:cd:18:58:b6:5b:b1:ba:c0:05:45:70:a8:8d:33:d3:97:
21:21:ff:03:ec:d1:7c:50:ea:3c:2a:24:85:70:3d:d7:10:2a:
dc:19:a5:19:a5:c1:9b:3a:8f:6a:f5:3d:37:03:bc:49:23:be:
72:79:f8:de:76:6f:5d:e8:99:7b:0a:c2:12:58:39:56:21:52:
b2:39:1d:2f:85:5c:94:ab:68:f3:4f:f7:28:23:e7:fd:e2:b7:
66:f7:d1:2c:25:7e:0a:c7:82:49:06:aa:fc:b1:0d:94:da:70:
00:a3:49:4b:1d:f2:96:e8:e4:ab:c1:53:d2:7b:1d:8f:25:4a:
b1:65:26:dc:51:74:49:79:33:a6:4e:5b:45:e1:dc:c4:9c:05:
ee:12:b9:19:9e:b8:05:5e:86:fe:32:a2:a8:32:b8:c9:3e:17:
00:30:b9:6b:8a:9a:e6:c7:07:84:f5:5f:0d:6e:89:26:f2:d9:
35:94:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:49 2025 by rpki-client