Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa
File: df263476-feea-4096-8e6e-d4907dc5e98a.roa (raw, json)
Hash identifier: rPeY6uDgw9iCZ7e5ptgq1PLI3CGqiV7WiQuYsF2Y8FQ=
Subject key identifier: 10:04:55:DC:34:02:29:71:20:5F:A2:6A:AA:12:E7:DC:28:44:24:A0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 232CD085B6A8EE953E8C57D6DD1C1891F0526F5D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2c:d0:85:b6:a8:ee:95:3e:8c:57:d6:dd:1c:18:91:f0:52:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=d8909e6e8526a40deab06aa9decebd994e36bae0c25ced65b2caddffa1fa9160, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:99:fa:6a:33:fa:0a:9a:88:f7:9c:06:ae:
ae:5e:f4:2b:07:d4:dc:0f:ff:cc:e0:a9:7a:76:fe:
a8:9b:41:db:e2:bf:01:da:9a:b9:8f:fc:dd:a6:0c:
f6:28:21:c3:31:43:65:97:bf:34:7f:4e:e3:f1:10:
19:da:7b:0a:8a:3e:81:1a:fc:9d:b4:98:69:50:d0:
49:4b:ed:6d:7a:56:76:c1:3a:24:1e:0f:f4:db:bd:
d5:3e:f6:9b:1f:89:71:fc:f9:d7:75:ad:7d:00:8c:
7e:4a:d9:88:b9:75:b9:aa:84:bf:cc:e5:1c:94:9d:
97:f9:a1:43:84:cd:67:6b:47:7f:91:43:04:90:0d:
3a:a9:d7:de:f8:6c:c3:3b:3d:ec:57:c2:c2:36:2e:
ac:f2:83:c9:03:a4:4b:4b:7c:9b:5f:19:23:0a:34:
e1:68:89:e9:05:e2:7e:5f:7d:80:21:e3:a3:31:a1:
2c:4e:25:b5:53:ad:13:8b:74:93:ed:b3:90:e5:b5:
34:75:3c:47:e6:f6:bf:fa:11:87:4f:7b:5f:10:29:
4e:6e:91:dd:2b:6c:0b:3e:7f:00:01:4a:94:5c:06:
0f:ab:9d:57:fa:6c:e1:c5:6d:06:17:c4:6d:ec:b9:
0f:2b:86:73:e1:85:73:82:9b:f2:b3:24:e5:ec:06:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:55:DC:34:02:29:71:20:5F:A2:6A:AA:12:E7:DC:28:44:24:A0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.99.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7f:a9:09:a7:6a:c2:41:fc:2f:c3:7e:f7:dc:02:a4:fb:d5:
51:a9:9f:77:d8:f7:63:59:50:8d:49:0f:99:2b:69:fe:74:37:
af:fd:ce:ed:43:06:88:d1:c6:c6:cc:30:9b:18:df:14:71:2a:
98:aa:c0:a9:32:72:35:eb:c9:dc:7b:c3:55:67:a2:c2:19:ae:
be:37:72:0a:7d:c1:84:c6:14:c0:4a:54:b7:0f:1b:7a:79:e0:
bd:5d:5d:c2:98:d5:fa:fc:2f:ad:50:6e:ae:74:01:41:43:85:
07:ca:60:08:c8:83:c6:b8:7b:92:b8:e9:a2:d8:ee:43:5e:16:
67:d1:ea:ab:3e:21:e1:6d:e0:bc:d2:12:26:ab:67:6c:df:ae:
2f:5d:ee:32:a5:d3:0d:5e:4c:66:2a:b4:5b:20:7b:38:bc:ab:
6e:cb:24:96:7f:3c:a3:5e:0c:85:34:fb:d8:09:54:d1:b9:d4:
2e:6d:86:9c:ef:c3:ac:f2:c7:be:6e:84:72:a6:30:81:a8:e3:
19:f0:03:74:54:71:3e:89:9c:d1:1d:ff:b2:ba:30:93:43:94:
d6:fb:c9:19:e3:bc:c5:7d:39:ac:2f:1d:3e:67:f8:ce:6e:7b:
de:f3:ef:96:31:55:7d:8a:63:c0:03:a8:cf:d2:df:4b:66:b1:
21:f9:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:31 2025 by rpki-client