Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcaa19e3-0f7e-492b-b3a8-786d208b56cc.roa
File: fcaa19e3-0f7e-492b-b3a8-786d208b56cc.roa (raw, json)
Hash identifier: A7I8Bhu2a6pg91zvfTU5uvfamBmt+aiGvK+BnTYh8Cs=
Subject key identifier: 56:FE:03:32:17:7B:FA:9C:47:CC:81:4D:07:ED:ED:58:86:07:BD:CA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7F633B00F88EDFC7D7B5C8CC3B3A1D2140A1AE23
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcaa19e3-0f7e-492b-b3a8-786d208b56cc.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:63:3b:00:f8:8e:df:c7:d7:b5:c8:cc:3b:3a:1d:21:40:a1:ae:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=f31d9d233d8494ab2557676632bda9246ef0d6b04b20d5b71b4faa7ffd3a7895, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:a2:37:f6:12:56:66:f2:b4:89:20:40:84:
8c:70:b3:ea:76:9e:f2:d2:61:8a:4c:ba:86:02:de:
1f:a8:83:01:cd:dd:a5:6d:6a:d2:24:35:37:e7:b1:
b3:55:0d:ba:57:25:75:c2:5c:a9:66:04:cb:f0:8b:
69:52:02:5b:86:cb:95:d0:be:94:9a:3f:7a:a6:6a:
ec:6e:46:97:60:b4:91:9b:41:c7:8f:c9:17:6c:ad:
f5:32:71:e3:1c:ab:35:86:b2:fe:3b:ca:34:f7:50:
1d:78:1b:1f:7b:68:e5:17:06:2e:d2:ba:e0:8d:d1:
c6:a5:1a:1d:77:45:33:34:b9:00:83:94:52:35:b9:
00:12:23:0c:03:e7:b5:92:9f:c2:2c:d4:63:c7:52:
4d:db:7c:4e:cc:4b:e6:71:8c:df:7d:0a:80:ae:33:
de:ea:79:06:f8:58:ee:05:89:90:cb:22:96:3f:15:
0b:35:2a:a1:d7:0f:68:63:cc:fd:a4:6b:50:fd:54:
f5:de:a9:a2:de:2d:9a:6f:34:eb:9a:d1:6a:d7:ee:
6c:b3:58:6b:da:0b:cf:a6:0f:cc:47:94:64:72:d5:
61:82:59:95:5f:db:34:ae:ce:40:8b:9d:46:3e:72:
e7:ed:ae:49:5d:81:db:9a:a9:a6:c1:50:bb:3e:2b:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:03:32:17:7B:FA:9C:47:CC:81:4D:07:ED:ED:58:86:07:BD:CA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcaa19e3-0f7e-492b-b3a8-786d208b56cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.218.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1e:6e:57:40:4d:f3:22:e1:95:2e:96:f5:c1:66:d3:fb:ae:
1f:cb:e2:26:50:d8:33:46:98:62:98:c4:f6:a3:f2:fa:03:cc:
01:8a:24:23:f9:7a:75:6c:0d:ef:72:09:41:27:3b:dc:23:1c:
25:bf:7c:09:9f:88:7f:0b:43:6e:4b:d8:1f:db:5c:17:da:7d:
c0:74:64:a4:8e:b6:30:02:35:b7:87:ab:24:75:f0:1d:67:ba:
a3:05:a9:6b:d5:32:f9:49:1a:b3:ae:cb:b4:a9:13:e5:05:69:
38:dc:73:f1:05:cc:67:77:2d:cf:d1:a8:71:8f:68:f3:0d:54:
d3:03:16:42:eb:a5:f6:ba:27:4c:af:51:54:57:c7:4f:bf:8c:
f2:77:e9:b4:fc:55:8c:3f:24:07:8a:f2:91:17:c2:e4:17:bf:
fe:04:43:a5:21:5c:5a:d2:05:d3:77:08:b8:c0:d2:5a:6b:37:
cb:9e:c3:75:74:87:e0:99:ea:ac:2c:5b:14:92:07:aa:ae:ab:
1c:e0:43:c1:ee:92:42:63:e6:f7:27:2e:bb:2b:d7:64:36:ed:
a6:6b:32:04:c8:db:fc:5c:95:dc:9b:15:a6:ea:a7:98:07:e9:
72:8b:03:40:1b:e8:f5:bc:f6:4f:dd:45:84:b7:07:65:ea:ba:
70:da:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:24 2025 by rpki-client