Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36dbc25-7f30-42c9-9655-13a4a2cc581c.roa
File: e36dbc25-7f30-42c9-9655-13a4a2cc581c.roa (raw, json)
Hash identifier: 7YqfOTcffPbNXwO/XGVp/kfAA2VEszUsVrn/hERViEk=
Subject key identifier: 2C:F3:08:35:44:CE:9A:CE:DB:3F:02:41:CB:46:00:5B:F5:0D:2C:03
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 309A03FA00A0C8EAA3F2FFF7587457C1761C9E18
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36dbc25-7f30-42c9-9655-13a4a2cc581c.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.193.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9a:03:fa:00:a0:c8:ea:a3:f2:ff:f7:58:74:57:c1:76:1c:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=dda5974aab0a7d6d719be717ba63c22a648a9ff4ced5b1348e1946d4288fbd2f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:b2:4f:4f:d9:5d:1e:38:c7:84:6d:fb:bb:
77:7b:ac:9f:0a:ba:78:c1:61:18:03:b5:79:e8:bc:
02:79:7f:8a:e8:77:06:f3:e0:7e:66:bc:2c:74:76:
1b:25:50:d1:a4:69:4c:f2:2c:18:19:f5:a7:58:60:
d3:d5:97:8d:86:ab:8c:1e:3e:27:e4:1d:dc:e1:76:
bc:47:89:69:46:1a:dd:c1:c7:1f:86:d9:91:e4:b8:
98:91:9c:84:9e:d1:80:80:0c:39:aa:ee:45:fe:f0:
7c:82:06:31:14:e5:ce:76:4e:f7:7d:ce:d4:b0:d9:
3d:59:45:b3:76:8a:52:f0:8b:03:bb:34:3c:27:bf:
6f:b8:e4:a4:63:76:3a:3a:93:0c:05:0f:05:10:0e:
69:17:fa:37:b2:5f:22:81:b3:2b:aa:7c:e1:83:a0:
78:de:fe:7f:38:c5:20:fc:ee:ec:16:0d:86:9f:ee:
09:96:d2:27:3e:2f:4c:2d:3f:cb:e4:f4:da:c2:51:
44:ec:de:38:f4:95:a0:d1:26:60:48:28:91:92:4f:
3a:c6:fe:eb:72:44:04:00:12:b3:f2:be:2c:07:05:
ec:36:84:0f:cf:4b:83:8f:9a:49:9c:cf:25:63:ad:
35:b3:ba:a6:74:be:61:5f:86:92:bb:8f:00:b1:57:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:08:35:44:CE:9A:CE:DB:3F:02:41:CB:46:00:5B:F5:0D:2C:03
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36dbc25-7f30-42c9-9655-13a4a2cc581c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.193.1.0/24
Signature Algorithm: sha256WithRSAEncryption
22:31:3a:3a:7e:e3:af:41:4a:1e:9a:cf:e5:a7:ad:67:6a:c7:
d3:54:74:87:34:ff:30:bd:f9:23:bb:46:b4:1e:1b:7a:13:8c:
57:bd:58:a8:72:f3:70:67:b6:bd:01:28:6a:34:ce:61:20:80:
38:23:da:e3:b9:c0:03:c5:8e:b8:fd:f6:e0:ca:11:a0:ce:7e:
bc:0a:9b:4d:0d:70:c2:8d:ca:78:5e:db:f3:4d:26:ac:40:a1:
c2:81:f8:3f:02:ee:49:6f:4a:e3:04:ec:d9:c2:07:21:0d:6c:
80:b0:ac:7f:fe:38:22:80:b7:c9:3a:f2:dc:46:bb:b8:ac:ef:
d4:cf:5a:a9:8f:44:2d:91:a7:d7:87:ec:96:3d:d8:02:2a:01:
01:e6:12:85:74:a6:40:68:b2:81:8f:f5:39:e4:77:c3:b7:a1:
e0:db:d1:e8:43:1f:4a:63:37:20:33:ec:e7:ca:4c:90:ce:69:
6f:c2:8f:a0:10:22:b7:cd:ae:cd:ae:e2:8a:3b:c4:6f:76:65:
e3:22:3d:d1:66:56:05:b3:f9:77:20:ab:27:34:40:59:31:f3:
4a:88:ef:ec:df:0a:e3:8c:f4:34:3e:cb:20:17:b2:0f:66:e9:
a0:58:76:30:8e:18:b2:e2:90:f7:1b:f0:c4:bc:c3:1a:de:18:
1f:b1:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:22 2025 by rpki-client