Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa
File: 97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa (raw, json)
Hash identifier: 4zrZtpcZwi2+jX1a5xT5FiuWbvgIwDcT41/LmF0Wz4U=
Subject key identifier: EF:37:8A:0C:7F:57:91:78:ED:D1:CD:28:65:B0:BB:3C:D9:F6:68:3A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4F0E8DE4AD8D07D4D4C4DCD64AC54838D2A3D8BD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 167.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0e:8d:e4:ad:8d:07:d4:d4:c4:dc:d6:4a:c5:48:38:d2:a3:d8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=e96a490dfd9a60fdee94dc0e2ba5c3bb0dc1ec3e2b357153c215b9041982d140, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:5d:b6:b3:5b:08:b4:15:f1:5c:f6:17:32:
26:6f:4e:8b:7e:d4:2d:c7:d8:41:6f:12:2d:1b:33:
a8:e0:0a:4e:9a:5d:92:33:77:e9:9b:c8:40:78:e0:
36:cc:87:e8:74:dd:48:b7:cd:15:66:dc:b1:82:db:
94:72:22:07:f5:1c:b7:03:f5:0e:bf:5a:a2:34:2d:
a5:c2:ab:ab:e3:ca:48:0c:f7:24:de:5e:34:91:f4:
88:dc:a0:2f:81:6f:98:71:9b:8b:4f:35:58:a6:4a:
5d:ce:50:06:e2:85:00:08:1f:09:58:22:12:5f:88:
78:02:9b:a0:8d:c3:6e:ac:78:6d:84:b3:64:37:12:
39:d7:02:21:ad:fb:c0:90:ea:af:9a:51:1f:a2:1b:
ef:35:0f:50:35:6c:3d:bf:f9:a0:14:ed:f1:85:b0:
83:a4:cd:cf:b0:e9:75:7f:40:96:55:71:25:1b:78:
14:5c:b3:77:69:67:f5:c2:54:c4:01:24:9a:f3:1b:
f7:64:3e:60:53:b3:87:c0:a2:af:08:45:2e:88:0d:
93:1f:7c:e4:58:e6:99:26:c3:99:1b:60:c8:9e:c4:
69:d9:7e:b1:af:9d:c0:f9:f1:c3:31:55:91:09:4e:
a9:0b:8d:b9:fd:6b:30:00:19:eb:98:3e:66:61:ef:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:8A:0C:7F:57:91:78:ED:D1:CD:28:65:B0:BB:3C:D9:F6:68:3A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:e4:89:3a:ed:16:a1:c3:25:ae:da:c2:99:9f:d1:3f:1d:6c:
50:cf:d9:30:45:7e:92:d2:0f:1b:c6:d5:28:c2:45:4b:7a:21:
56:67:d3:2a:eb:9f:f7:68:45:2b:7e:fc:e8:dd:a4:3d:c5:0f:
5b:3d:de:31:8e:80:5b:83:86:c6:8f:cb:b3:04:6b:fc:6b:04:
e3:3b:a9:fe:46:1b:b5:95:b6:ac:74:73:1b:a2:28:46:02:63:
99:fc:68:05:48:38:42:9c:83:72:00:47:4b:30:3a:9e:ab:ba:
36:07:f5:a8:67:cc:8c:67:73:22:5b:f9:b7:04:f0:dc:d2:70:
6c:24:74:31:b3:ba:bc:38:3f:c6:29:f4:e0:98:01:da:26:36:
6b:6a:9a:72:7d:23:bc:fc:b9:1f:b1:e7:70:62:7a:5c:84:1e:
c3:b8:f7:2c:b5:2d:6f:32:5d:8a:9a:01:44:e6:65:45:0e:42:
46:61:e3:9d:27:05:3b:27:26:fa:ef:94:8e:1f:e5:87:09:07:
f0:27:5a:6e:7c:a5:d8:4d:94:f1:5f:25:96:77:20:29:82:c1:
24:ad:37:96:83:75:e0:41:45:d9:be:55:52:3b:ca:f9:70:b7:
e3:8a:3e:c8:18:45:d9:02:ed:20:19:74:01:54:d7:1a:57:e2:
06:67:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:26 2025 by rpki-client