Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa
File: 6f43e432-64c2-4e7b-9ec8-122af31247c8.roa (raw, json)
Hash identifier: 2I5Q4+UwpIAEe84pZyeMtWhzvzBaDx5SrnjLFTdudZE=
Subject key identifier: 30:56:7A:71:B7:FD:A5:0E:45:03:5E:69:B3:93:98:84:34:5A:6E:E3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 026C8AB81E5AAF039280855472150FF5769BD411
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6c:8a:b8:1e:5a:af:03:92:80:85:54:72:15:0f:f5:76:9b:d4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=239a875c09b2816f8a27d495f7e2d4fdcc7ef52170eefa3a318c4aba477af8bd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:de:bc:b5:bc:a9:39:aa:e1:2d:3c:d0:3a:
fc:95:ec:39:e1:d3:6e:e0:74:93:37:aa:a4:88:25:
9b:1e:82:39:ed:4d:82:43:54:07:c8:79:40:54:5e:
aa:60:f8:3b:bc:d3:74:62:86:05:cd:1e:17:4d:e8:
54:1d:a4:90:91:34:33:5e:3f:1d:30:39:7d:8e:05:
80:0a:bb:b0:3c:8c:17:c3:c6:01:b6:1b:a4:fb:b1:
98:e9:43:fe:65:26:c0:4d:6e:e6:d6:9d:bf:2e:d4:
4a:74:e2:17:ac:17:43:eb:28:78:2c:6d:b5:b0:5d:
58:5a:1a:60:24:0d:f4:83:71:fc:42:db:50:dc:ed:
c8:ca:31:79:2c:48:6f:69:5e:c5:86:0a:34:84:4c:
56:69:94:b5:45:9c:02:72:1b:bf:b8:22:07:a3:b8:
cf:a8:3e:09:05:63:00:f8:35:39:27:85:a7:f1:2d:
fa:cb:f3:5e:29:79:48:c8:09:36:3d:be:19:4e:4b:
09:de:a8:b1:ab:bb:87:68:d9:50:55:fd:d9:77:a7:
0b:1d:4b:9a:35:02:f2:65:4c:e3:59:17:1d:83:80:
6c:94:57:d6:d5:6b:8a:9d:af:62:ba:14:51:c1:17:
6f:aa:ae:f0:90:1a:21:22:5a:be:96:2c:83:e1:f4:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:7A:71:B7:FD:A5:0E:45:03:5E:69:B3:93:98:84:34:5A:6E:E3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
Signature Algorithm: sha256WithRSAEncryption
00:da:ff:d5:f9:63:a3:e1:52:20:22:bf:6c:02:33:5d:e7:58:
9a:c5:df:87:bb:a5:2d:94:93:0d:8a:da:e8:dd:2e:fe:19:eb:
51:30:53:eb:80:d2:a2:47:34:c8:58:20:c1:89:1a:d0:88:5a:
91:ad:4a:ba:a8:8c:85:d9:d3:75:80:5c:c2:c7:a8:46:74:e3:
a4:a4:a9:c4:eb:c9:ef:8f:dd:d7:04:96:15:96:27:f1:40:44:
69:ac:e7:f5:b8:f1:38:81:57:4d:4d:c5:4a:f1:16:fd:2f:43:
3f:ef:86:bb:d6:03:18:a5:03:e7:58:98:fc:ed:9d:a0:9c:4d:
58:9f:fa:6a:99:f9:01:0a:a9:e3:26:59:38:f9:a7:1f:a9:d6:
e6:04:b2:76:c3:cd:b7:62:71:9a:d7:04:af:c3:da:39:9b:03:
75:79:db:37:9e:6d:88:29:e3:f2:eb:cb:ba:64:7f:a5:10:84:
99:92:0f:c5:6a:f5:cf:4e:89:42:eb:04:9f:75:72:e6:73:2a:
06:c5:23:09:7a:b8:0b:44:4d:42:b7:01:d6:5b:ac:c5:c5:c4:
0e:00:00:0b:e6:90:c5:53:3e:29:81:68:c3:8d:c4:43:aa:02:
d5:46:fe:46:56:e3:9f:68:e3:56:0a:ac:b1:84:0e:d9:5d:24:
c1:9c:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:11 2025 by rpki-client