Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5db3b97-adc7-4ff7-a4d9-c8e6e0ef0013.roa
File: a5db3b97-adc7-4ff7-a4d9-c8e6e0ef0013.roa (raw, json)
Hash identifier: jBsUVWP+k1WtEN3OBNwUK09M2KIaKBn+xp+bgd0UzjQ=
Subject key identifier: BD:03:8C:BD:C9:43:4B:89:1A:64:C1:FD:6A:04:24:E3:16:59:61:F8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 509F3969F525F653B59213F963398F8D8C104D47
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5db3b97-adc7-4ff7-a4d9-c8e6e0ef0013.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.170.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9f:39:69:f5:25:f6:53:b5:92:13:f9:63:39:8f:8d:8c:10:4d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=872eb7ba0df394e5d1258f1a7ef957f1cdbf8597e73c9b2faaab328b67253996, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:71:a3:24:b7:9f:f7:cd:77:46:0f:20:b2:
e3:33:b8:75:9b:19:22:f2:c0:98:c9:b7:9d:52:84:
88:2c:98:d6:df:e2:72:ca:5a:e5:bd:e2:eb:ba:30:
4b:bd:ca:26:43:1d:09:81:d5:d3:d5:b8:a0:3d:2a:
24:4c:dc:ce:e5:06:5c:76:90:08:ca:48:0c:94:71:
02:fb:2c:c4:f5:f4:c5:8e:a2:72:a4:ed:16:70:e5:
1b:cb:9c:00:67:41:08:4a:eb:b9:fc:89:f1:cb:81:
98:7a:65:74:f6:00:25:42:1f:34:c6:b3:76:19:6e:
b6:cb:26:77:fd:df:92:39:a5:76:7e:17:a4:0d:34:
dd:ec:65:16:ee:55:b1:fe:10:9b:2f:4e:bd:72:11:
b4:f9:8e:b4:9d:fd:37:f2:93:29:c9:3a:09:54:0c:
a5:90:3f:5d:ed:f7:7a:1d:b6:80:5a:ea:6e:87:8b:
dd:32:51:a0:5b:08:0c:f6:1c:51:e5:41:a8:12:c5:
89:35:4f:ef:7e:5a:a0:bb:59:49:a2:5a:9c:0a:68:
f7:e0:8d:8c:2e:77:54:4b:ca:65:47:97:57:75:e3:
ca:74:b9:e2:1a:d7:a2:eb:fa:0d:2f:69:19:52:ec:
95:e4:ee:11:03:e3:ef:30:1c:c7:ac:bb:bb:a5:39:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:03:8C:BD:C9:43:4B:89:1A:64:C1:FD:6A:04:24:E3:16:59:61:F8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5db3b97-adc7-4ff7-a4d9-c8e6e0ef0013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.170.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:bc:a7:b1:23:cc:61:63:88:f0:7e:8c:d9:ff:43:39:96:9b:
de:16:ba:95:74:3d:4f:e2:ec:84:b2:4b:54:b6:7b:4e:0e:c6:
7f:6b:79:16:b0:39:12:2a:95:f0:17:60:d9:b7:f4:6e:cf:5a:
8b:d2:75:3f:1f:4c:5b:58:a6:f5:a2:89:05:49:05:f9:9c:f8:
dd:a4:03:64:dc:37:1d:e4:74:f3:d7:23:7c:a1:92:b0:a4:b4:
ba:e3:93:5d:30:7b:03:9b:75:07:58:4c:2d:48:89:29:55:70:
1c:38:07:e2:d2:3f:cb:1b:23:0c:ab:4a:73:7d:d9:b8:3d:8b:
95:0f:42:dc:f4:05:cc:06:ca:62:3a:f1:5b:34:b5:e6:f5:01:
46:e2:3a:39:d4:a4:37:e7:2a:39:3b:00:9a:cf:e6:41:9c:5c:
02:74:2e:4a:f6:23:27:74:4c:83:0f:25:09:6a:1b:87:e9:3a:
34:93:ae:30:dd:07:d6:b2:3b:60:69:fb:b1:cf:22:0f:31:2b:
4e:6f:4f:15:5a:52:88:78:aa:30:e4:48:ac:70:39:f2:9b:12:
c0:c7:ba:e6:a8:80:b8:6f:9d:4d:00:15:d7:29:86:54:33:60:
42:77:15:0b:b8:fd:80:48:f5:18:d3:2a:22:24:8f:28:49:e8:
b4:56:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:46 2025 by rpki-client