Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b13f9f88-73ce-433b-a49b-33fd8c2fc202.roa
File: b13f9f88-73ce-433b-a49b-33fd8c2fc202.roa (raw, json)
Hash identifier: 0KwJhvC4NMSGPBdl6f3T1EQkUSDUp0p3gJK4oFWwTto=
Subject key identifier: 76:97:D8:87:C4:29:21:47:54:2B:8E:E9:57:6C:39:A4:0D:C1:CA:68
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 67D232CD9F3ECB86407BF88C49B5F36C1CEFFB23
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b13f9f88-73ce-433b-a49b-33fd8c2fc202.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.4.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d2:32:cd:9f:3e:cb:86:40:7b:f8:8c:49:b5:f3:6c:1c:ef:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=6c5d96db3441234d4a309912950fd2588bf372558487d22117de2ecf69e767ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:5b:92:97:ba:b4:68:a0:4c:7e:c3:29:22:
6f:e3:df:6a:09:76:55:93:08:42:fb:b8:d4:bd:68:
c1:3a:44:f6:86:2b:6f:51:d0:da:71:87:03:2a:04:
25:04:2e:96:92:da:80:4b:ce:be:94:37:67:dc:c6:
10:6b:3e:40:30:ac:a4:2f:0f:e7:33:37:32:3c:00:
03:e6:1a:11:cf:0b:fa:19:2a:80:3c:54:ca:ad:88:
ab:29:62:a5:d3:21:30:79:95:c9:25:d9:a9:85:05:
5a:23:2a:5e:ca:be:83:bb:10:c7:62:f7:24:d3:01:
56:18:b7:c3:0b:bf:d7:77:fa:86:62:6a:17:da:69:
7c:b8:ec:0f:30:d8:66:57:a1:59:ae:ca:3a:03:02:
01:79:ca:39:21:e9:24:6e:35:37:9d:17:fb:dd:ab:
10:87:35:58:0b:71:4e:3a:be:50:c5:84:a5:cf:57:
1b:97:0d:f1:3a:64:14:ce:f0:0d:67:36:0e:0c:91:
6f:70:ae:a9:28:98:19:ea:0c:08:d2:23:4b:8c:a5:
10:35:6f:5b:97:c3:36:36:99:cd:39:7c:8c:68:86:
c7:7b:3e:cc:b3:07:53:6b:3c:8f:a5:19:20:9c:fa:
c7:ac:37:5d:27:d7:d6:8d:07:46:b4:b0:c1:74:38:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:D8:87:C4:29:21:47:54:2B:8E:E9:57:6C:39:A4:0D:C1:CA:68
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b13f9f88-73ce-433b-a49b-33fd8c2fc202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.4.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ba:26:34:0c:66:84:d7:51:77:bb:84:57:1f:1f:3b:0f:fa:
53:92:0c:5f:18:68:21:e2:fd:80:5a:43:7a:d7:69:f4:24:45:
5a:7e:4b:c1:71:f7:18:a1:0b:0b:4d:0e:cb:6d:69:52:00:5d:
38:7e:db:99:84:4f:8f:65:8b:f6:c7:79:93:e0:3c:43:78:05:
6e:04:7c:aa:af:d7:de:58:9d:1a:eb:48:df:30:b7:d8:cd:00:
bc:91:d2:42:76:d5:fa:60:b4:76:3e:8d:84:98:3b:e3:8a:3c:
89:5b:ad:1e:a3:7a:78:ba:4d:fe:18:99:a9:37:63:6f:8a:ae:
a1:57:aa:5e:20:1e:e3:eb:1c:bb:c9:e2:14:3f:26:7a:c1:f1:
6c:10:d9:53:03:8a:a0:20:9e:26:3c:3d:7b:64:aa:7c:55:e5:
4f:3d:ea:24:88:07:c1:9d:42:c8:2e:d9:eb:3f:7b:be:c1:1d:
0e:11:29:9a:63:7f:e4:57:ae:72:7c:d1:c4:67:3a:51:ba:43:
48:bf:aa:53:9b:3b:22:f3:e3:f2:5f:69:ef:cc:25:97:20:7d:
13:d1:dc:d3:e1:0c:ca:7f:c3:ed:79:f8:53:6c:36:69:11:a4:
9e:7f:1f:a2:f3:f4:ff:00:99:ca:56:64:18:d2:80:36:62:03:
6b:5d:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:33 2025 by rpki-client