Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa
File: 91910661-4e01-4954-945c-027bff21beb5.roa (raw, json)
Hash identifier: A4YM6bx7uwp2++tp1Q4YqHRHKK12sUGB8b07EG2RbNM=
Subject key identifier: 16:35:9E:F2:DC:2E:76:6A:CC:51:AF:7B:CF:19:CA:B8:77:67:AD:1A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 79F0B3DD18760BAAD56364EE2C9FD86E8D4C7190
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.232.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f0:b3:dd:18:76:0b:aa:d5:63:64:ee:2c:9f:d8:6e:8d:4c:71:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=a5bbbbe8ac0c63862ff9b8bd20c1b7fd5f37bee71ef66b28661b877c058ccc83, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:7f:05:94:0e:3e:5d:36:4a:77:3b:b7:74:
85:db:21:73:ad:3d:95:42:81:35:b0:dc:27:d7:67:
5e:dc:b8:6b:17:ab:8c:e8:d5:cf:e7:88:0b:ae:60:
b0:ef:c7:c1:4c:8d:58:f3:9b:89:b8:cf:fe:0f:18:
31:fb:07:6e:e2:1c:e5:75:81:a0:1e:b7:e5:a8:0f:
d0:18:f2:c3:49:78:5b:55:8f:8d:bc:e4:13:f1:3c:
45:53:ae:aa:0f:e3:6d:f4:ca:9b:8d:b7:50:65:4d:
40:39:a9:fa:82:e3:9d:2c:c7:cc:1e:79:38:68:1e:
d7:b2:3a:ac:2a:80:8d:71:a7:6e:9c:e6:84:95:9a:
3e:a1:02:5b:79:d2:7c:42:b8:b3:ef:e6:ec:9b:54:
35:aa:d6:72:1a:1e:bb:86:bf:02:18:16:fe:69:af:
01:b1:27:f0:65:79:c6:6d:aa:5c:26:ae:04:6b:72:
af:57:cf:f4:f1:8b:b8:4b:3c:3e:16:50:07:b4:79:
ac:e9:24:b0:69:c9:67:5f:fb:07:1c:fe:f5:d6:dc:
1d:e7:b8:08:1c:60:1b:1b:58:ef:8c:f4:65:b2:70:
cb:23:68:90:6d:98:54:3c:37:ad:34:e6:e3:09:9e:
04:3d:9f:1e:9b:08:04:f6:a7:05:fa:72:5c:fd:ba:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:9E:F2:DC:2E:76:6A:CC:51:AF:7B:CF:19:CA:B8:77:67:AD:1A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.232.0.0/13
Signature Algorithm: sha256WithRSAEncryption
10:a2:05:d8:68:0b:03:7d:59:ce:f3:53:ee:be:80:81:17:da:
db:9b:16:d9:9d:66:bc:17:be:c0:e5:7f:23:f0:8b:15:c8:c3:
3b:62:be:47:80:09:8a:b8:58:89:6a:c6:3a:b8:0d:b0:49:0b:
62:e9:45:d4:85:a2:c8:65:6e:b1:45:cb:84:01:bc:b4:91:b2:
e2:08:fd:36:78:5e:1a:c1:31:af:af:2b:75:72:7b:54:59:e4:
dd:4e:32:cd:a5:9c:b7:a3:ea:0b:58:d1:09:2c:bc:31:ef:e6:
bc:ee:aa:41:f7:d9:d0:77:53:9d:0e:a7:cb:09:2a:e2:8d:82:
ca:41:ae:7f:31:74:e2:e5:73:25:8c:2d:a7:4b:5e:fc:2d:20:
dc:71:b8:ae:a7:51:40:8f:7c:9f:6d:89:46:f7:f1:df:67:78:
eb:67:fd:ba:f3:eb:1c:4d:ee:46:34:61:77:19:48:76:74:3a:
e9:c0:04:18:8a:aa:84:de:3c:83:88:cf:36:c5:5d:e2:fe:92:
7a:3c:d5:b0:0e:e0:d5:54:1d:5b:58:d8:ba:05:0d:e2:48:a7:
47:37:90:10:df:14:de:00:10:37:20:4f:a1:98:46:a8:d1:35:
09:33:b9:3e:3b:d1:f0:c1:03:bb:94:74:40:1a:0c:af:b2:27:
50:88:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:47 2025 by rpki-client