Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b4cdb9a-0769-41d8-8fb1-fa4258f0745e.roa
File: 5b4cdb9a-0769-41d8-8fb1-fa4258f0745e.roa (raw, json)
Hash identifier: 5AglGsy7wnEajvA++cUZhp3QgLfvbBYD0Nc6Jx9sq6o=
Subject key identifier: 76:9E:1E:42:FB:59:A4:2C:F3:84:34:73:1B:1D:44:CF:53:DD:E2:FC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 52B90396EE2F4A59669771A26D42C73B91A99CE0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b4cdb9a-0769-41d8-8fb1-fa4258f0745e.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b9:03:96:ee:2f:4a:59:66:97:71:a2:6d:42:c7:3b:91:a9:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=fc307991a71fbf2562101f97b0d6d386b0651e1f26e042e928c1a710dff1c7d8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:9f:45:2b:c7:16:d7:0d:14:0f:29:f1:c6:
9b:1e:5d:18:86:dc:08:be:2a:13:74:fa:3c:dc:60:
84:8c:1a:94:a3:79:fb:f4:c6:af:a1:ba:27:e5:14:
13:9c:5e:8d:67:31:ed:ab:4a:a0:7a:ed:db:0f:f5:
8b:95:c9:0f:46:93:2e:c5:4e:93:47:8c:7c:60:cf:
b6:7b:d8:d0:15:db:c4:dc:73:81:75:f6:a1:48:48:
b9:0b:d2:0c:64:50:4a:4c:4c:93:84:45:fa:d0:36:
77:ba:0a:c9:c6:f1:ad:a5:fc:07:d4:50:0f:2b:9f:
56:e5:85:56:ea:32:48:bc:a9:09:68:37:ab:9e:44:
1f:fe:27:ea:5a:62:3f:f7:5d:d4:48:16:cf:c2:49:
72:b3:b4:55:d6:8c:f7:25:59:e6:02:8f:83:6a:75:
9f:be:8b:65:e5:db:b1:40:0d:c5:42:92:8b:87:a5:
d8:6b:2c:1c:54:31:15:4b:39:a2:86:51:26:47:dd:
cf:0c:1a:ec:e6:6c:e0:bb:53:45:15:79:db:a0:53:
d0:39:75:fb:11:84:82:2e:53:6c:f9:d7:6c:65:a3:
3d:34:db:4a:4a:53:6c:f1:9a:5c:8b:07:a2:2e:df:
2c:36:9f:4e:62:39:42:87:fc:10:d0:4f:a0:c9:37:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:1E:42:FB:59:A4:2C:F3:84:34:73:1B:1D:44:CF:53:DD:E2:FC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b4cdb9a-0769-41d8-8fb1-fa4258f0745e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:9e:81:4b:4f:df:fe:c9:f6:9f:d6:98:b4:c5:26:10:d0:c3:
0e:c1:84:87:39:67:1a:68:4e:19:7c:8e:6b:65:0c:d4:57:49:
71:c7:4d:ec:c6:f9:93:1a:76:0c:08:b2:66:b0:d0:0e:15:21:
40:89:b6:9a:cf:8a:df:cc:4f:46:83:e7:63:d1:a0:ac:07:60:
7a:6e:4e:81:5b:3d:e1:85:af:87:c2:af:a8:a9:33:d6:b1:e8:
3e:c1:37:6d:d4:ea:f6:9f:7e:78:d8:38:94:58:dd:24:ec:d7:
78:e6:40:fc:28:67:6f:55:48:85:07:b6:2e:0e:66:ff:8e:a9:
d4:b7:11:0e:e8:93:e4:d6:2d:04:0e:f9:a1:c8:33:eb:6c:41:
d4:d7:8f:01:db:61:7c:07:61:df:a4:05:12:9d:52:aa:e6:ef:
16:b8:36:15:ef:6d:a8:57:7b:e7:5c:cb:c9:cc:88:8c:38:ee:
f0:5f:7b:53:2c:44:c0:dc:66:8c:8c:40:4c:3c:0d:6b:43:01:
44:2c:f7:e1:4d:ec:d3:55:95:ee:be:9c:f7:b3:c6:48:33:b0:
a7:85:db:86:19:f4:ce:da:2e:92:9d:1b:af:22:1a:45:64:cc:
c9:79:b5:f0:21:27:60:73:70:4d:4d:0f:b0:78:ff:d2:49:13:
a1:35:6a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:18 2025 by rpki-client