Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc053ac2-492c-47b2-8128-38b9dd0d88cb.roa
File: bc053ac2-492c-47b2-8128-38b9dd0d88cb.roa (raw, json)
Hash identifier: W3BUzwHsfWZ0+l3xzQDRN0+3Cj3OO+lSszc0Ur08vVU=
Subject key identifier: E9:71:07:96:6B:A5:0F:3C:6F:31:57:12:88:B5:BB:19:C3:D8:7D:22
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1B123CC7E6262E4A4D95A8D9C7498E90D132232B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc053ac2-492c-47b2-8128-38b9dd0d88cb.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:12:3c:c7:e6:26:2e:4a:4d:95:a8:d9:c7:49:8e:90:d1:32:23:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=d77aaff6332f80e6ec97618d06132717e5c11ef370cf5a44831fac9361a8fbde, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:09:2d:14:3a:79:8c:c0:43:bb:e2:1f:09:
8e:8b:2e:b6:67:12:06:23:97:21:51:9a:67:19:b1:
7e:dc:c6:9b:ff:14:14:d2:b3:ea:e4:32:94:28:4a:
46:38:e1:76:da:2d:36:25:83:d0:d2:f7:06:79:88:
01:11:a3:d2:f4:bf:81:9f:f7:3d:98:55:f7:60:bc:
bf:a7:da:85:33:f5:ef:90:d9:bc:68:2c:02:6b:75:
4c:61:d4:e5:35:3d:e8:c5:a9:dd:8b:70:c5:97:fc:
5c:5e:fd:66:2c:f4:0d:37:06:e2:f1:03:90:ed:52:
2f:1e:22:6c:6f:32:92:b4:66:9c:b9:aa:3d:e9:b7:
9a:c9:10:e5:4c:01:eb:c1:3b:cd:77:60:d5:d5:7f:
96:05:45:9e:2d:b1:47:d7:58:1f:f9:cd:f7:9a:f9:
74:9d:bd:f9:10:cb:4c:58:f1:eb:58:68:27:58:07:
bf:d7:e2:a5:32:68:a1:12:47:0e:35:47:be:5d:97:
b2:18:92:f8:2f:9f:23:90:bb:77:6c:88:99:d5:de:
f2:e2:d9:0a:17:29:fd:54:5c:75:11:56:21:cb:e8:
83:ed:78:90:63:ce:52:21:03:4b:d0:3e:8e:2e:ca:
e5:5f:e7:e0:04:59:36:a1:a3:f8:90:88:02:6e:4d:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:07:96:6B:A5:0F:3C:6F:31:57:12:88:B5:BB:19:C3:D8:7D:22
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc053ac2-492c-47b2-8128-38b9dd0d88cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.146.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:67:1a:76:3d:23:f7:bd:23:43:9d:76:1a:c8:8f:fd:dd:a0:
a6:d5:50:94:20:55:14:86:c7:6d:e3:cb:ec:8f:2c:da:53:38:
47:88:20:a0:f6:8d:48:b6:eb:5a:53:f9:c4:a0:ee:2e:82:ea:
bc:da:b5:ea:f5:23:b6:11:80:70:55:6f:77:97:d2:8a:91:51:
14:42:4d:f7:d1:51:a4:35:85:60:ed:7b:61:b4:68:56:cf:32:
31:6e:07:c8:aa:ad:01:b8:03:11:35:fa:e9:1c:6e:4a:b6:86:
79:f3:0e:ca:c1:06:64:e3:d5:c4:f9:32:30:b3:54:38:f7:f1:
76:b2:71:23:a9:e4:5e:b7:89:5b:c6:ac:b9:9a:fa:45:3b:68:
8e:d0:69:66:d4:d6:c7:5a:62:1d:bf:ee:95:7c:3e:54:bc:74:
05:01:d6:bf:2d:87:58:a0:88:dd:e0:4c:96:49:21:5f:df:b0:
ef:7d:6d:23:14:93:bf:91:8b:da:58:87:d8:f1:0b:6b:76:38:
3d:15:b6:01:a4:bb:b0:f5:21:dc:03:01:19:f4:30:68:b5:5b:
78:8e:6d:f2:9a:25:ed:17:0c:cb:a5:fb:52:74:09:10:eb:f9:
e7:d7:79:7f:e8:47:6a:6c:f5:34:a5:45:ce:5c:f3:33:81:5d:
4d:ea:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:37:13 2025 by rpki-client