Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b255cce8-ebad-48e9-b108-fea396565ec3.roa
File: b255cce8-ebad-48e9-b108-fea396565ec3.roa (raw, json)
Hash identifier: NbISjWr7dr0m1wEANizQjrLLOcYRi4YQyr847EPvosU=
Subject key identifier: CF:A4:CF:AF:AA:BB:FF:58:DA:B5:BD:11:97:50:7D:77:D2:10:71:CE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5241EEF6A898932421A59C53E69323342C5114AD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b255cce8-ebad-48e9-b108-fea396565ec3.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.34.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:41:ee:f6:a8:98:93:24:21:a5:9c:53:e6:93:23:34:2c:51:14:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=00507d5ded2d57ff2d266828438d0e4975ccd22e6d28b82acfed7d16e91e321a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:81:87:a8:3c:4d:96:e1:ba:70:0b:f8:46:
86:83:c1:d2:f2:85:91:93:54:59:ea:95:81:e9:ff:
8e:96:65:0f:61:bd:44:65:2a:54:7e:65:97:a0:78:
97:7b:c8:6d:e8:d6:49:b0:2a:7b:1a:2f:11:fb:3c:
08:3a:8e:df:02:26:0c:92:94:c5:c4:17:92:23:5c:
b1:b2:77:10:3e:41:cd:4b:3c:83:6c:f8:84:6b:5a:
47:ed:c0:6e:e7:57:99:c9:e8:75:12:2d:a1:9d:c4:
f6:f9:d3:c3:4a:a2:1c:a7:2a:79:ac:d4:30:94:6f:
9e:b8:ae:ff:d2:99:6d:35:3d:57:83:51:a7:83:70:
b1:f0:20:fc:eb:57:af:a0:db:6c:3a:9c:94:90:c2:
78:00:44:9b:b9:95:b2:72:a8:51:15:9f:31:69:0c:
e7:39:94:54:eb:ae:6e:ee:42:2a:71:eb:d8:ff:09:
4c:4a:4f:e5:f0:c4:2c:9e:52:a4:38:ab:66:3a:54:
1b:09:e2:e8:27:d1:dc:69:41:f4:82:90:bf:db:d3:
db:e7:fb:68:47:53:74:89:db:90:26:3c:34:1b:b8:
98:01:f0:10:e6:87:df:c7:b1:b5:25:54:2a:e0:de:
57:ad:49:0e:5d:3c:04:3f:3f:cb:c3:bb:e6:fa:bd:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:CF:AF:AA:BB:FF:58:DA:B5:BD:11:97:50:7D:77:D2:10:71:CE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b255cce8-ebad-48e9-b108-fea396565ec3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
15:ef:2a:8c:91:38:61:20:b2:1f:62:2d:1e:31:97:f4:a8:b5:
71:d4:bf:46:d0:26:c7:0d:48:fc:31:64:cb:01:08:45:b8:f7:
ae:f4:ed:2d:4b:84:6d:e0:6a:42:5e:c3:df:20:53:88:3e:1c:
7c:f1:e7:d5:7e:e1:bb:a8:38:e8:3b:7b:1a:a3:07:87:50:2b:
8b:d9:84:9b:74:31:a3:92:aa:07:4e:3d:cc:19:4b:ce:8f:e4:
86:58:ed:cd:83:b6:78:5e:4b:e6:85:23:82:b7:1e:01:d6:66:
03:8f:43:7d:ab:4f:54:7b:a7:d7:2e:32:6c:d4:ad:eb:88:ad:
9d:cd:aa:82:48:cf:d2:51:7e:95:9e:45:e1:15:80:74:e7:2c:
65:06:b8:76:7e:3b:f6:de:99:a9:95:30:81:a0:4f:2b:96:4e:
29:f8:e9:33:4f:bc:d3:d2:c7:49:94:a6:f7:d1:82:17:fe:5e:
70:18:a9:3d:0a:e1:88:f4:78:9c:48:fd:bf:72:92:78:02:f9:
5b:9b:41:e1:63:26:8c:57:03:26:46:1a:68:0e:c5:68:1b:a4:
f1:4a:b7:90:2c:f9:2f:c7:a4:40:74:25:0b:23:7e:75:34:f9:
43:ee:3f:21:c9:08:bb:91:1b:2e:b0:6b:53:1b:8a:fe:37:99:
ab:dc:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:11 2025 by rpki-client