Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa
File: d64498fc-b63a-4ccc-8da8-df5718749032.roa (raw, json)
Hash identifier: /fzc5GEWlOaQebkRpdefpoPUJoS2tEvWpzrMUYbF+HQ=
Subject key identifier: 88:ED:17:A4:1D:5E:7F:7B:18:2D:BE:AC:06:16:14:99:CA:C5:EF:18
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4E3C57FA3F614E2FD08FFD2261F2FD83FA03AF8B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3c:57:fa:3f:61:4e:2f:d0:8f:fd:22:61:f2:fd:83:fa:03:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=3f7e2a96b50a78395ff864d0f8804abf98962851e59d3449884ad5daab632c99, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:12:f7:c6:db:83:71:ca:eb:46:f0:36:71:
c6:42:ad:74:67:4a:0a:44:c8:40:3f:68:84:3c:86:
60:8c:eb:5e:c0:55:a8:30:31:30:ce:b2:11:11:5a:
df:65:88:4c:60:08:21:b2:30:2e:04:b8:e0:f6:24:
4e:4b:1e:f1:1f:f0:cd:5b:ad:49:d3:20:3c:fb:d5:
ce:d3:57:af:16:ac:84:a4:1a:ff:0e:35:85:63:a7:
b8:3c:05:06:7f:90:40:ab:64:35:d9:28:54:a1:a0:
ab:dc:af:eb:e1:ab:2a:f5:fd:e7:43:6a:ab:fe:f2:
82:f4:3f:91:25:c0:f5:e7:c2:25:c3:50:c2:3b:cc:
46:ae:60:f0:c4:93:11:51:d2:96:da:dd:b5:49:0c:
a2:c9:ad:5c:76:98:9a:88:63:ea:e3:33:dd:ec:d7:
d6:25:02:63:54:ed:e2:ad:a1:3a:8b:e1:67:23:57:
42:a9:27:82:2c:c0:30:f4:84:20:41:af:29:48:b0:
c7:8b:19:63:e3:cf:2d:ce:f1:66:bd:9b:22:91:8a:
a2:35:a5:e3:7b:7f:b0:fe:c1:f7:7f:11:09:b2:ad:
64:6e:9d:28:4e:32:d2:b8:af:e9:5a:56:4f:bf:97:
01:e9:ef:74:05:53:75:44:cf:b8:6e:40:f7:44:7f:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:17:A4:1D:5E:7F:7B:18:2D:BE:AC:06:16:14:99:CA:C5:EF:18
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.100.0/24
Signature Algorithm: sha256WithRSAEncryption
12:df:0e:9a:40:51:6e:6f:71:49:de:66:1b:18:21:06:17:1c:
89:7e:95:11:f9:48:ca:2c:c2:61:cc:73:46:2b:ae:bc:8d:f6:
cd:dc:26:a4:a6:a6:83:a6:b8:98:24:b3:25:a8:de:08:5a:65:
7c:52:2a:0b:1d:73:82:9e:15:1b:dc:6c:cd:4a:d6:89:41:34:
91:3d:4d:3a:cd:0a:e6:c9:80:19:67:5f:7e:fe:b0:a8:d5:bd:
e1:43:65:fa:c9:f6:35:db:1b:94:b4:5c:b9:60:1a:b1:ec:c9:
e4:d3:80:9b:66:ce:f4:ca:60:c3:ae:48:88:66:5f:3f:c5:cd:
ad:18:e3:9b:5b:a6:98:17:b1:fa:e5:e3:44:ea:f1:f7:ba:fd:
af:fb:0c:de:e3:13:f1:69:84:ac:4d:ae:d8:bc:01:a6:50:6a:
06:85:7c:3e:92:04:e5:12:e6:bc:92:37:69:63:65:00:39:7f:
fb:f2:23:f2:53:30:db:9e:14:61:53:5f:11:db:2f:e0:20:b6:
ec:45:5c:90:55:87:e2:23:d6:67:00:65:62:31:fb:2f:bf:ca:
00:12:57:fe:bd:7a:fa:41:12:a3:8d:2c:9d:ad:9c:f1:af:f6:
b0:9d:86:96:e9:e5:5a:00:4f:8f:ad:d8:4a:c0:45:22:96:92:
8a:93:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:20 2025 by rpki-client