Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0d279a6-abda-42f2-bc2d-ce341bf9b9b5.roa
File: e0d279a6-abda-42f2-bc2d-ce341bf9b9b5.roa (raw, json)
Hash identifier: TZdUfTq9MWHchg6EYaRK1/3yBeywolezf1j4XAj3a9I=
Subject key identifier: 8B:5F:F5:0F:FA:3C:EE:45:B7:4A:F3:F4:F0:AE:7B:DA:D0:65:08:88
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3329B249587BCF5E929FE96384632AA95551DED0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0d279a6-abda-42f2-bc2d-ce341bf9b9b5.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.248.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:29:b2:49:58:7b:cf:5e:92:9f:e9:63:84:63:2a:a9:55:51:de:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=084823cf1d18c8799a5bc030e5f1bec99a7af787077abd2e7ed552aea0056648, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:cc:cd:d8:2f:6e:36:0e:00:2b:74:5d:a6:
95:71:b8:c2:d9:fa:9c:f0:5a:00:6a:1f:6b:9e:32:
98:c5:7b:b2:49:e0:b3:01:cb:28:62:72:ef:93:d6:
1a:11:7a:79:6b:86:e4:85:78:50:c5:6e:96:76:9c:
d8:01:b5:e0:4b:b2:7f:b8:8a:40:19:99:e0:bd:da:
e8:d4:c6:d2:93:0d:15:f8:61:dd:da:ec:e0:15:e1:
b0:6e:84:d9:a3:ae:d9:13:e4:78:ba:4d:a3:84:86:
fd:49:ec:6d:28:74:84:f5:2b:ab:51:50:3b:c0:02:
62:49:e5:bf:e6:a0:d2:89:51:1c:41:a2:1e:06:bb:
60:66:4a:d0:93:91:5c:76:4e:7f:11:14:bf:0c:e6:
50:8e:42:2c:9a:8c:20:9e:0c:0b:7d:37:2c:bb:a9:
6c:5b:d2:f5:0a:d4:78:d0:b9:bd:a9:37:6a:ee:53:
69:18:ca:ca:47:44:26:32:c9:37:9b:d7:5d:9b:36:
70:76:a6:e2:24:5a:39:95:cb:d2:7f:d0:c8:ac:2f:
30:76:4f:5f:19:bd:2e:2c:60:2d:a4:c9:45:a8:41:
6a:75:c9:7c:17:c7:58:e9:46:d9:98:f9:2a:7f:c1:
bc:a1:26:87:26:9b:82:04:91:e1:73:85:24:a6:32:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5F:F5:0F:FA:3C:EE:45:B7:4A:F3:F4:F0:AE:7B:DA:D0:65:08:88
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0d279a6-abda-42f2-bc2d-ce341bf9b9b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.248.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:94:bd:fb:8f:c6:37:8d:98:87:9a:6d:2b:68:08:bf:4f:0f:
72:49:0f:f2:2e:cd:0c:67:a2:d1:54:7f:b9:23:95:01:05:f0:
df:83:2a:18:e7:53:d7:3d:b7:72:df:08:d8:6d:34:70:b3:0f:
61:f3:13:3d:4b:28:24:66:f1:7b:1c:52:63:86:d6:5f:ed:17:
bb:19:d2:32:e1:3e:f1:a1:f7:96:41:1f:d1:11:4a:9d:12:af:
f1:ba:4d:96:9f:4e:7c:31:d4:30:ea:11:3f:5d:65:d6:c5:50:
46:9e:68:9c:ab:3c:0e:bb:1c:f6:75:ad:a8:89:6f:f1:85:89:
47:9c:45:b2:cc:ed:82:19:4f:28:47:e0:e6:4b:f3:bc:31:1c:
d4:f9:f1:75:e5:31:11:d8:ba:db:f5:d2:be:87:bc:e8:09:96:
cf:3b:b9:69:85:f8:d3:dc:46:c3:a1:ba:bc:58:d3:a3:b2:38:
15:09:46:6c:f6:5e:17:54:fd:9c:5e:3e:6a:58:4b:6d:0d:1b:
c8:ac:f7:76:cd:fc:9e:51:cf:53:ec:97:db:de:63:87:1d:3b:
33:3a:ac:3c:32:31:ea:07:0d:ec:80:a2:a9:f4:95:e3:64:57:
0e:3a:d6:d5:41:4f:53:e6:82:b3:4b:dc:86:33:70:3c:f1:be:
5e:be:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:27 2025 by rpki-client