Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4f8f010-e5de-4d73-89e3-47e708acbb11.roa
File: e4f8f010-e5de-4d73-89e3-47e708acbb11.roa (raw, json)
Hash identifier: HE03TZTSxmIxvRe+PFZm1g7UxehELXlD5HIbOsYNWPs=
Subject key identifier: DD:AB:6A:49:DB:6C:FA:AB:EB:44:14:1A:7B:DE:F5:6F:B5:AE:76:0C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 68AF8044328586FA8C10948671E83C13ADAD5FFB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4f8f010-e5de-4d73-89e3-47e708acbb11.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.3.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:af:80:44:32:85:86:fa:8c:10:94:86:71:e8:3c:13:ad:ad:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=3534fb82d27295aab3c400d8b557911e0f802cb560edeba76ecf5d0399240598, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:37:95:7d:41:8c:dc:8f:c7:d6:1c:33:a3:
8c:af:d2:9a:80:cf:52:10:0e:e1:e5:eb:d8:67:66:
1a:bc:d7:57:ea:08:c0:cc:ec:8c:78:c7:bc:14:e3:
31:af:cc:eb:27:8d:f8:48:52:c1:1d:a2:a1:32:50:
f6:35:af:e5:8a:e5:83:60:47:ee:9d:af:79:bf:9b:
c8:0b:72:12:55:0a:61:77:10:dd:0d:f3:25:ca:84:
9f:6b:d0:f5:e2:d4:0e:b2:d1:b2:f6:71:c0:23:d6:
50:21:37:53:35:8b:9a:c0:05:00:0a:c9:8d:2c:72:
bb:7e:5c:4a:3f:ae:1d:7d:32:f6:81:6a:e1:9d:5b:
64:1f:3c:22:a2:b6:73:bc:63:33:14:74:52:97:76:
d1:c2:e0:81:e1:87:1b:20:b9:f8:6b:1e:65:a7:0a:
1d:43:05:b2:ca:fc:56:e6:0c:16:3e:29:5e:26:66:
0e:9b:cc:87:86:3c:4e:d6:d8:4a:59:98:0f:4f:07:
8d:b8:ac:b5:e8:e9:4a:7c:14:ac:cf:8f:96:c2:56:
cb:50:e1:61:6a:86:f6:ce:e1:c8:dd:ab:e6:53:14:
3c:ee:d9:59:aa:34:a5:c3:e8:78:cd:5a:87:8d:29:
8a:a9:47:00:a0:09:0b:b2:dc:b4:da:a1:9f:ed:a7:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:6A:49:DB:6C:FA:AB:EB:44:14:1A:7B:DE:F5:6F:B5:AE:76:0C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4f8f010-e5de-4d73-89e3-47e708acbb11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.3.28.0/22
Signature Algorithm: sha256WithRSAEncryption
61:7a:3e:c8:59:29:64:13:9d:ea:0b:46:b3:3b:37:28:c3:39:
e7:73:98:1a:22:f6:7c:76:43:b0:f3:f6:b6:ca:b6:b2:f6:c5:
fe:85:cc:70:0d:ba:1a:92:55:d5:6a:74:21:21:1e:45:de:89:
3d:3e:79:fd:79:ef:96:e1:2b:a6:5a:16:6d:37:bd:53:8b:c8:
a3:b9:7f:40:b3:1a:7f:e4:bc:4d:29:9b:c3:6b:00:71:41:af:
e5:de:be:69:bf:16:80:3d:e2:1b:23:4d:e0:46:3e:97:a6:39:
c8:38:f8:c0:b9:90:c3:5f:67:02:3d:5f:37:87:7b:b9:88:3c:
ad:5d:87:29:8c:b7:ec:fa:90:c4:2b:0c:7e:21:23:95:78:5a:
d2:c3:ed:a8:06:35:04:60:a7:71:97:fb:68:94:e5:0c:0b:07:
21:70:9a:4d:3e:80:35:8d:3e:79:69:dc:3b:06:c6:33:6a:83:
a5:49:4b:b5:85:35:96:8c:e4:0d:79:2c:a1:7d:cc:4e:ee:40:
a4:b9:9f:ad:f3:45:9a:37:88:f3:7a:52:2c:d1:e5:36:0e:e4:
30:7a:d8:6e:45:d5:b1:92:1a:ab:73:81:e9:06:15:5d:0f:ac:
08:b9:d9:c4:f9:ce:0a:ed:06:34:d0:12:4e:cb:bb:63:96:ae:
a6:6c:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:48 2025 by rpki-client