Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbd11792-5e8c-4f3b-ad4c-a4001839bd22.roa
File: bbd11792-5e8c-4f3b-ad4c-a4001839bd22.roa (raw, json)
Hash identifier: e+w7hdK0/silNWZ+VsZErldKLQ8o4rXq2LSh5om7Urk=
Subject key identifier: 90:0F:CB:13:84:AD:75:F5:72:68:33:AB:68:DA:81:BE:D5:45:81:D1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 79AE594E2975A1DB349A4CE8A8DAD3D5AB95CB6C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbd11792-5e8c-4f3b-ad4c-a4001839bd22.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ae:59:4e:29:75:a1:db:34:9a:4c:e8:a8:da:d3:d5:ab:95:cb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=33525320ee56ee252b8549c4c1e2631fdbcee9ec1459bcbc83236dd776cc4fd6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:a7:83:fd:e7:90:97:37:44:12:bb:45:e6:
b4:b4:96:ad:2a:b5:51:28:77:ba:9b:37:91:16:a4:
64:b0:ad:63:68:65:f0:2a:33:e3:81:17:b0:ed:6f:
55:e2:5e:35:a8:d1:e5:45:31:6d:6b:a1:84:13:f5:
f6:e0:51:b2:40:b2:5e:97:d5:c4:ac:37:ad:74:34:
66:6f:4d:75:b1:f6:a4:b2:59:85:7f:63:02:b7:98:
21:3e:0c:aa:6a:73:01:6e:7d:d8:32:3b:b9:7f:d4:
1c:2b:de:a2:65:15:98:77:50:4d:c2:c6:12:ca:88:
0e:b2:68:c2:ce:f1:8e:a1:59:2a:c0:f1:4d:23:e7:
a8:05:49:de:0c:10:92:e0:c5:05:cb:d5:eb:b4:66:
51:a1:97:d5:e2:d1:b5:27:13:4d:c4:c0:fb:83:88:
6a:54:5c:85:3d:b3:60:b4:27:76:89:d0:11:5a:98:
27:8e:94:e3:62:7e:d6:3a:91:68:a1:46:a3:69:5f:
49:d6:91:ce:ee:27:60:16:1c:9a:c6:b6:5e:ee:68:
d7:6c:46:ea:77:b3:34:7f:15:cf:75:22:b9:e0:90:
01:65:61:3a:fe:8d:90:3d:35:82:a2:b9:6d:1c:97:
e9:de:1a:d9:66:56:0f:96:e9:33:b9:7c:a0:df:26:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0F:CB:13:84:AD:75:F5:72:68:33:AB:68:DA:81:BE:D5:45:81:D1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbd11792-5e8c-4f3b-ad4c-a4001839bd22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.108.0/24
Signature Algorithm: sha256WithRSAEncryption
84:eb:23:01:e7:e8:65:51:a5:ff:0d:25:91:6e:e7:d2:e2:cd:
d2:97:15:54:80:cc:9b:23:83:42:81:30:e5:a7:0d:e4:74:49:
b2:fe:c2:3e:76:40:a7:84:b8:ef:d4:cd:27:82:c9:4d:91:ca:
c1:ca:5f:0b:2a:2a:19:1f:df:b8:a4:b5:ee:8a:8f:27:1e:8c:
b5:3e:d0:4b:d5:40:3c:45:2f:ee:7e:eb:9b:42:d0:57:9b:6e:
91:59:63:93:50:39:d2:99:a2:7d:ef:2c:f0:9d:20:2c:03:fd:
9e:44:1e:00:9b:90:0c:51:ec:9a:a2:fd:37:43:68:fe:1e:43:
b5:0d:56:3a:37:5f:19:b9:78:fa:e3:09:9a:0b:18:fc:ec:a0:
30:5c:a4:e0:ae:97:e7:7c:80:45:a5:8d:d2:54:06:c2:1b:68:
d9:bc:b6:b1:f6:47:69:45:04:f9:eb:44:31:53:67:c2:06:6b:
f7:d0:f8:4b:87:7a:5c:0d:d2:76:06:ca:d0:d9:fa:01:3d:2d:
89:a8:db:74:04:6f:25:e8:49:8c:3e:48:32:88:e3:da:c2:06:
cf:88:64:9f:ec:ff:d4:5d:64:ad:e1:c3:d8:37:6c:56:b3:7b:
96:47:fb:f9:99:03:50:e7:3c:38:a8:00:e9:cb:4b:76:3d:87:
4c:c2:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:49 2025 by rpki-client