Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49ad8f1f-4a21-44dd-8c81-6e8532be7462.roa
File: 49ad8f1f-4a21-44dd-8c81-6e8532be7462.roa (raw, json)
Hash identifier: XAbJzd4KWFUyslxH5NWz2A2DWnPbesGtVYygQsSLel4=
Subject key identifier: 37:C1:7A:B8:FA:5B:7D:0E:A6:95:4F:C2:6A:0B:E4:1A:59:78:44:33
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 775BB11018DC4BE59431CB2F7F8BE95540D304BA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49ad8f1f-4a21-44dd-8c81-6e8532be7462.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5b:b1:10:18:dc:4b:e5:94:31:cb:2f:7f:8b:e9:55:40:d3:04:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=17343095a2b0f8f39ed21ed4a0803f266fe9cf1d20588f01c6001aecaafbeebf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4a:e7:38:68:b4:a8:11:1d:9e:da:56:74:5e:
51:0f:3d:df:8a:21:de:f7:02:59:84:c2:6a:74:69:
09:92:16:29:b3:cb:78:29:23:bd:6f:e2:d5:14:28:
b6:1b:66:dc:1c:de:de:94:bb:26:a4:f6:d1:4c:c6:
cb:78:ef:3c:4a:64:48:1a:e0:db:45:ac:15:ea:e1:
1b:ef:45:3f:54:1b:51:01:36:e7:9e:da:43:a5:96:
d8:86:47:25:c2:88:03:8a:cc:69:8d:8d:20:f2:57:
4c:b1:4f:83:25:03:2e:8d:38:fe:56:a8:df:92:6c:
58:23:3d:48:8a:88:63:0b:4a:29:67:59:c4:8a:a4:
e1:b7:59:89:9f:d4:d8:09:dd:3b:ff:30:a7:12:d1:
3b:55:20:58:7e:57:62:2a:61:98:0c:98:13:dc:be:
16:cd:26:48:2f:72:66:15:7a:89:ce:ba:24:cd:bd:
a0:ee:a8:5e:c8:b0:f4:4d:b5:79:f2:43:11:0e:40:
8e:d1:d6:d3:32:1f:c1:63:8c:f2:f1:91:d4:87:fa:
19:37:fc:af:0c:e4:6f:fe:ef:cd:1b:44:61:63:f4:
a3:f1:54:59:4c:26:ca:12:86:4c:26:ed:6f:ca:4b:
82:be:b4:8c:48:22:7f:50:fc:3c:35:0f:ba:93:b6:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:7A:B8:FA:5B:7D:0E:A6:95:4F:C2:6A:0B:E4:1A:59:78:44:33
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49ad8f1f-4a21-44dd-8c81-6e8532be7462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:c6:7f:ec:ed:65:2d:bf:10:57:ef:95:be:03:00:50:16:10:
54:5a:d8:03:dd:16:12:48:16:cc:ce:02:6c:fe:1e:f6:f9:3a:
21:a8:6d:8a:25:54:e8:bf:68:62:ef:c8:09:c1:3b:04:61:9e:
6e:21:6f:91:d3:95:f8:cf:67:28:6c:74:54:cb:f0:9e:e1:dd:
ce:33:85:25:fa:47:3a:29:7a:de:c5:7b:bd:7b:82:3f:d8:c3:
4b:ea:d3:62:43:5f:db:70:a3:50:32:b8:f4:ab:6a:a3:4b:08:
3b:2a:8f:e8:38:9c:7e:52:e8:88:39:e7:7d:8d:6c:f3:b1:df:
0a:d4:b5:20:49:db:9a:d3:55:a4:1a:50:8a:5d:fd:04:fc:94:
0e:89:13:21:02:39:54:ce:dc:6a:a9:86:4d:96:d6:fe:3e:04:
a5:37:0f:b9:28:86:51:2f:b8:15:79:7a:79:2d:30:56:2f:e3:
fe:4c:36:e0:79:49:3b:3f:06:f1:ec:ae:3d:7c:61:38:8d:2d:
dc:14:57:7d:7f:1d:b8:aa:36:97:50:01:9d:08:22:a0:47:df:
4e:b7:9d:ae:58:5d:a4:cb:9c:84:14:17:b7:29:09:6c:21:96:
c9:db:33:d1:00:86:d6:b6:af:16:52:f4:4d:1d:f1:50:f1:a7:
04:e9:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:50:04 2025 by rpki-client