Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a324e17-7433-414a-adaa-75924fda97b8.roa
File: 9a324e17-7433-414a-adaa-75924fda97b8.roa (raw, json)
Hash identifier: AVwRNsK1Qxke905gUmKI13NDEQGcQbFMYYiML498naw=
Subject key identifier: D7:02:BF:3A:C4:89:09:38:38:71:02:67:1D:1F:CB:34:C7:F3:65:71
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 704ED7FC6AE9B80EA140C54083A70D841BFD9BC5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a324e17-7433-414a-adaa-75924fda97b8.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4e:d7:fc:6a:e9:b8:0e:a1:40:c5:40:83:a7:0d:84:1b:fd:9b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=dcb453a5e0680cefcaba989bd0c434ffb5578e433bfb5dba72347c108ea77407, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:46:58:78:e4:11:95:c3:92:f2:ab:86:24:
a2:28:1c:af:a4:91:42:61:89:3d:d1:81:63:3d:ab:
ee:b9:2c:46:ff:be:5d:91:c1:e1:c7:fd:0e:a5:cf:
b2:08:76:f6:3d:86:63:9f:d8:97:e6:26:05:dd:0c:
f6:34:a1:57:07:ab:d4:03:ca:b3:73:52:ae:ae:38:
4b:76:50:b7:b2:53:90:c4:ba:0a:c1:a6:3f:bd:ca:
58:cc:34:cb:fb:f8:49:96:e8:bf:8b:67:c9:4a:81:
9b:3c:13:75:89:1a:1f:be:c7:95:be:f7:2e:5e:18:
e0:54:aa:ee:5d:dd:9b:b0:66:85:72:42:99:8d:62:
5c:df:8d:d6:85:19:5c:aa:af:00:ae:b7:a7:b3:7d:
1e:1b:ab:a4:b4:e4:a0:c8:23:f9:14:b6:61:a6:33:
e7:85:a2:c2:cf:08:83:f8:05:71:99:89:77:37:d8:
89:3b:fc:5a:4d:ff:ee:87:71:34:16:a1:a8:da:fd:
ba:f0:83:76:25:ae:cd:f7:97:a1:e7:17:89:ec:84:
b3:b5:c3:13:82:16:9e:12:60:75:cd:db:0c:f3:ab:
55:41:ad:3e:cf:e1:8d:28:cd:dc:20:4f:9d:b8:98:
0a:69:3a:93:75:3d:74:61:77:5e:f8:1a:c2:17:0b:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:BF:3A:C4:89:09:38:38:71:02:67:1D:1F:CB:34:C7:F3:65:71
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a324e17-7433-414a-adaa-75924fda97b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fc:8f:4f:0f:0b:0b:10:c4:5c:b8:2e:a0:37:fc:d7:48:6a:
6a:92:08:7f:e3:ba:a8:20:5e:ab:4c:4d:10:a7:55:68:a6:c5:
3c:e6:b4:db:6a:49:f7:48:0c:78:44:a7:a1:da:18:09:67:dc:
a7:cf:d2:1a:f5:39:09:0d:b4:6c:d9:52:38:e2:6c:ac:08:2d:
71:e5:71:4a:8b:75:84:47:0c:df:bd:cd:5d:f8:a4:0e:ff:f6:
0c:3c:61:39:3b:36:67:17:11:ae:81:48:6e:a3:58:9f:40:e6:
1c:ad:7b:e3:98:1e:b5:33:ea:15:fa:38:56:38:f6:07:34:2e:
9f:1f:be:eb:8e:c8:ee:74:b5:1c:6f:93:ff:c7:cb:b6:6b:13:
43:0f:74:b5:8c:e8:1d:eb:e5:49:b6:22:96:41:10:a9:2c:59:
cd:83:fa:e9:56:fa:de:98:1b:65:a5:a7:3e:5e:2a:8a:55:11:
ae:10:68:30:23:2a:e0:b1:54:4c:67:ae:c3:c8:15:c3:59:e9:
44:bf:c2:bf:e0:8f:c7:fd:47:ee:31:35:60:46:bc:b4:3c:75:
c5:03:70:f6:88:9c:37:f9:ed:4f:13:03:de:fa:b7:df:bc:50:
aa:f2:ba:66:f0:87:ba:8b:33:a7:82:1a:94:f5:64:cc:0b:bf:
2b:56:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:12 2025 by rpki-client