Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c00bb77a-bf87-433c-8520-37a88e9af99d.roa
File: c00bb77a-bf87-433c-8520-37a88e9af99d.roa (raw, json)
Hash identifier: EwcziVoCx1NLV1dLCs5SWANIVLb0XczzRMNNbLy9Fbs=
Subject key identifier: 28:B8:F0:C3:8F:87:7E:05:A1:18:D3:EF:AC:E4:54:CA:84:0D:9F:4A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 671A2B5DEEB2CA4C089571776184D2B2ABC635F1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c00bb77a-bf87-433c-8520-37a88e9af99d.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.193.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:1a:2b:5d:ee:b2:ca:4c:08:95:71:77:61:84:d2:b2:ab:c6:35:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=09571e4dc35486b23939c7ec408340505ce37797f7eb71a3c43a3e5f48dd59e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:c6:63:32:4b:18:ea:b7:53:9c:61:9d:98:
7b:c2:16:b0:82:39:a6:7c:de:b1:cb:e3:25:63:63:
54:e6:69:4c:89:21:d0:bb:2e:e5:dc:b2:97:ec:2f:
2f:d1:5b:93:24:1d:07:3e:00:2c:08:6c:9c:97:38:
1e:0e:21:f0:36:b3:87:aa:ad:c9:c0:e9:35:ae:19:
55:80:31:53:7d:bd:26:76:d8:6d:25:54:15:0c:93:
b2:e1:f6:db:68:31:49:5b:6c:ed:0d:b5:03:c3:21:
fb:60:45:e0:63:21:63:51:9d:99:53:75:0e:08:c5:
cf:e9:bb:4e:ee:a7:0b:1c:b1:c3:c7:71:a2:4c:4b:
e6:d9:03:6c:f2:ab:d8:87:ce:f6:12:6d:92:40:20:
df:fa:a7:d7:04:59:bb:e5:b3:51:e8:16:b7:52:03:
6e:25:04:82:21:70:39:a4:0f:c7:1a:24:90:b7:7a:
bc:f1:5e:78:f0:29:07:74:40:4c:20:d2:bd:a4:73:
36:f5:90:60:28:90:84:c9:96:a1:0f:db:25:43:ef:
d5:95:0d:12:83:03:a0:02:de:e3:46:7e:dd:82:58:
92:54:13:f7:cb:13:33:c9:84:e8:dd:d0:1b:99:e1:
5d:5c:7d:4d:29:63:f2:da:60:d2:6b:0b:98:d6:bd:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:F0:C3:8F:87:7E:05:A1:18:D3:EF:AC:E4:54:CA:84:0D:9F:4A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c00bb77a-bf87-433c-8520-37a88e9af99d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.193.4.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8f:b5:62:db:c8:6c:6f:f7:a7:3e:b9:7d:9a:de:1d:73:a8:
99:14:d7:f1:35:ea:6a:74:5d:2e:98:64:4e:99:d2:52:ba:a7:
f9:df:98:04:4a:25:a7:c3:6d:74:41:69:01:95:70:58:4c:48:
9a:38:28:a2:ff:ac:89:60:c5:1c:6c:dc:ea:06:da:44:a4:57:
11:a1:34:3e:cd:af:34:46:f0:58:8d:bf:d5:be:0b:94:43:b0:
bc:8c:f9:9c:23:48:61:28:1d:53:c3:21:df:9e:4d:01:3e:59:
1f:ec:de:a9:6b:1a:2d:4b:1c:9e:21:99:79:1d:c7:da:7f:87:
18:2f:e5:6e:19:03:6a:6d:58:38:86:01:e6:65:21:98:10:9a:
c7:76:4a:15:35:15:dc:6d:2d:19:e5:6e:36:ab:b3:5b:17:16:
a1:12:84:73:16:2d:16:c5:37:67:65:0e:6d:7f:67:e9:dd:92:
0a:e3:02:5a:e4:b4:0e:ac:1f:67:5f:b6:66:8d:7a:9a:5b:b0:
c7:a0:29:52:b4:f4:14:e0:d4:0b:4d:e6:fa:a7:be:99:90:75:
5b:ce:7e:56:bc:08:2c:b0:d3:43:d2:65:f6:63:6d:ee:e9:53:
84:23:7e:51:5f:ba:3b:44:de:0e:b5:fb:73:46:a5:2a:2a:74:
d1:1d:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:35 2025 by rpki-client