Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/338879f4-5125-47a1-9635-871b9315e8b0.roa
File: 338879f4-5125-47a1-9635-871b9315e8b0.roa (raw, json)
Hash identifier: tUoXFno/BFHrUCUYorcyY/ZU/3AgxU7KbpQa5wPUsMY=
Subject key identifier: 1A:BE:93:F4:51:45:BB:40:88:D6:D7:8B:15:D0:CF:8A:83:85:21:FB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 16CF4E2E0C0DD504D94DE0FDD973BA3B1689FDF8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/338879f4-5125-47a1-9635-871b9315e8b0.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cf:4e:2e:0c:0d:d5:04:d9:4d:e0:fd:d9:73:ba:3b:16:89:fd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=f5052f0c1fac330c536188ba3fe55beae0274a0dfd5af7aec48abf0720a8c5ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:c2:d7:2d:97:22:df:45:05:e8:23:6d:fa:
54:8d:17:89:a8:2f:7c:24:2e:9c:79:6d:83:a5:44:
0d:50:8d:36:ce:a4:d3:7e:79:51:c6:8c:d6:61:f9:
07:f0:70:98:33:0e:81:3b:b4:31:78:64:ae:f9:bd:
44:fe:f5:f0:b4:c0:d2:e9:46:fe:b6:1a:d7:f7:1e:
54:f8:de:2b:99:02:e0:e0:11:79:87:c0:e8:c5:6c:
6b:38:3e:55:b0:03:ac:3c:af:bd:55:71:dd:b3:48:
86:06:7f:f6:a9:3b:6a:f7:01:a2:6a:f3:ae:ee:c1:
f3:f2:80:3f:70:ac:ae:19:44:61:07:84:16:be:cf:
73:4f:75:d5:77:5d:d6:4e:f3:4c:dd:3a:4a:52:d9:
28:3b:6f:cb:f1:b6:56:ea:dc:94:9a:b9:53:c9:6e:
ca:8e:3a:67:43:a6:64:64:8b:29:51:d4:6b:55:da:
c2:5c:1c:3b:2e:c3:f2:0e:3e:48:e5:80:b6:26:fe:
b9:05:21:59:3e:40:d9:59:e9:59:0c:4d:9f:12:b9:
bb:39:a2:5d:98:78:bb:96:5a:a0:4d:cd:a2:8c:91:
f2:f9:cb:56:42:8b:64:26:08:49:89:40:2b:48:ff:
9f:37:ac:d7:9d:70:82:33:c0:63:1c:ab:cb:81:f6:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:93:F4:51:45:BB:40:88:D6:D7:8B:15:D0:CF:8A:83:85:21:FB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/338879f4-5125-47a1-9635-871b9315e8b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:aa:d9:ac:db:81:b1:23:66:23:a5:c4:c6:bd:8b:2a:e7:9e:
df:b9:5b:61:22:12:a8:1f:4a:95:8c:1d:64:2a:b5:22:f6:25:
ca:87:3f:a1:73:62:46:66:d5:d4:be:b8:d0:f4:dc:31:2a:ef:
d8:fb:f3:3e:9e:20:9e:dc:28:88:1c:cc:c2:88:af:f6:2e:44:
63:4d:3e:3c:c0:72:a8:7d:5c:32:66:e9:5e:64:be:b9:17:50:
b7:1f:85:f8:ab:ec:36:48:d6:89:6b:3d:5f:c2:31:12:41:66:
a9:ed:88:9b:1e:63:39:9b:5a:68:bb:c6:56:67:d2:fa:4f:dd:
65:97:41:56:41:29:33:4f:07:ce:37:47:3d:61:ad:11:4b:be:
e0:1b:72:81:28:05:75:5e:56:8b:ee:f2:7f:c3:33:79:1b:49:
b2:b5:49:6f:4e:13:e2:ce:75:bd:90:75:47:d2:a2:9a:35:73:
d4:47:af:c0:9b:2a:d4:fb:61:b7:31:7a:7f:08:e2:a0:d1:52:
42:32:72:7d:4a:4e:f7:e4:39:0f:be:aa:ec:e8:75:af:dd:bb:
24:3a:f0:58:ec:8b:59:0e:8b:14:95:98:22:e1:06:64:41:e3:
16:43:01:23:40:2f:57:ce:57:fd:d3:47:49:61:ca:3a:98:3f:
65:d2:56:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:01 2025 by rpki-client