Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62f17585-3f69-4590-8cb8-5395eac6d352.roa
File: 62f17585-3f69-4590-8cb8-5395eac6d352.roa (raw, json)
Hash identifier: j9LLdRs6kbbuzftd+t639k8vDfVrqnQ1T9eDY7Jwjko=
Subject key identifier: 0D:91:C8:C0:40:A2:CC:71:AB:83:53:55:B0:C3:F8:15:12:FB:2B:89
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 22F610FFCFD71B1297C2EDCAD06BD7850363BED6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62f17585-3f69-4590-8cb8-5395eac6d352.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f6:10:ff:cf:d7:1b:12:97:c2:ed:ca:d0:6b:d7:85:03:63:be:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=e415fd690b2de1e756ab22e615aadfe44fd1265890bc76198250f92f94767fc3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:a0:a2:81:d9:d0:77:17:73:91:aa:10:e3:
6d:0d:90:c3:da:fa:50:19:3c:e8:0c:7a:b8:0d:40:
a0:31:80:8c:a7:fb:09:8d:d5:b0:ba:74:04:af:69:
57:61:48:7f:2c:1e:24:2e:e8:f8:58:a4:ee:b7:ee:
ee:c0:6e:89:38:c9:d6:e7:aa:5a:06:20:45:f5:61:
19:a7:e2:e6:49:47:2a:a0:a8:1e:af:2e:e1:0a:f7:
b0:14:20:d1:a5:35:02:6b:f0:97:94:61:2d:52:82:
35:f1:fd:8d:b8:36:b7:fb:6c:5f:6f:b5:f1:fc:8a:
71:59:6a:70:70:60:b0:56:90:91:37:c8:f0:fc:37:
4c:21:f6:50:16:36:91:45:6a:a4:66:0c:75:ce:a8:
0d:a7:b3:8c:f0:b9:1f:fc:2b:6c:14:55:75:5b:b0:
7c:09:a8:88:3b:be:41:b1:ce:48:85:79:96:cd:cc:
51:14:d3:11:6c:ff:5e:f6:86:47:c4:63:1a:b8:7a:
e2:0b:25:a3:8c:17:67:48:4d:a9:f2:47:aa:f1:b1:
1d:a3:3a:a6:e1:13:4d:a9:5c:5e:18:56:17:08:0c:
9b:2e:f6:89:dc:4a:e0:5b:d8:16:8c:2d:5f:17:0b:
94:49:c5:50:af:fc:6c:b1:dc:bd:e9:43:36:89:55:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:C8:C0:40:A2:CC:71:AB:83:53:55:B0:C3:F8:15:12:FB:2B:89
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62f17585-3f69-4590-8cb8-5395eac6d352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:15:f8:10:86:b3:1b:73:d4:0a:4d:e8:24:36:be:32:dc:60:
61:63:d7:52:e1:fe:0f:9e:a6:30:80:58:33:83:64:40:0f:94:
d1:76:20:f5:b0:07:87:6a:21:6c:36:72:22:d5:7a:e0:cb:a8:
76:2e:bd:73:0f:a0:27:47:13:b6:70:9b:e8:93:69:c2:12:c9:
b9:3a:0f:1e:fc:cf:c6:d3:8e:e2:13:40:e7:cb:02:f5:40:55:
7a:a6:93:ff:93:e1:75:44:74:24:ac:63:e3:ea:85:07:bf:43:
fb:5d:e4:a7:49:ed:00:a8:56:6b:1c:5d:e7:cc:ff:c2:3a:fa:
e8:b4:7b:f5:11:95:fc:e8:a7:8f:79:e6:9c:c2:d0:88:10:ce:
04:a8:1f:c7:32:e9:e9:e9:19:6d:13:3c:ac:25:f5:57:42:6c:
36:72:eb:4e:20:63:95:89:1a:19:11:4a:d9:e8:e3:95:5d:c9:
05:41:2f:4c:73:90:c1:f0:ec:be:36:1f:8c:b6:9b:34:3a:1d:
13:6b:7f:ee:64:5f:76:84:75:65:d6:17:aa:fc:95:fb:af:b3:
f8:b8:3f:20:cc:19:4a:84:dd:5a:93:9c:02:34:1e:8c:d0:2b:
53:b9:5b:91:70:26:69:4b:dc:72:c1:a3:18:f0:80:ec:ce:09:
fe:8c:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:17 2025 by rpki-client