Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa
File: 025bca09-86b7-48bd-a586-a44ce744234f.roa (raw, json)
Hash identifier: cdeUxPqMT6RlbBo/I/NgA85ADf+vNaEDgoy/K77UDx4=
Subject key identifier: 69:B5:52:A4:1A:BE:26:6F:11:E2:BA:42:77:29:14:97:E2:D6:88:0F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 678FC338D89589A5CEB63DC831DED8C9BFF5C16E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa
Signing time: Sat 22 Mar 2025 00:21:03 +0000
ROA not before: Sat 22 Mar 2025 00:21:03 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.220.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8f:c3:38:d8:95:89:a5:ce:b6:3d:c8:31:de:d8:c9:bf:f5:c1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 22 00:21:03 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:bc:40:04:82:1d:52:1e:6e:b5:7d:99:a3:
79:fb:90:af:4c:15:ac:88:f8:2b:83:c1:8c:b9:8a:
11:73:06:d5:3c:ea:f5:0c:67:0e:d3:b4:3e:4c:2c:
53:4d:dd:73:e4:1f:9a:26:f4:72:2c:be:98:76:71:
5d:d5:72:ec:25:39:bc:7f:78:89:f1:4f:c4:80:ca:
a6:6a:d1:94:e6:09:b6:c6:35:b0:04:85:0a:0e:72:
7f:8a:04:33:a5:35:07:35:09:fd:7e:d8:f2:87:93:
f1:dc:73:d1:86:54:a3:05:d7:cc:de:ca:41:61:c4:
65:6a:62:8e:f8:10:09:f1:7f:fd:bc:89:1b:64:c3:
29:0a:c4:84:20:7b:28:a9:06:48:7c:97:a2:c7:57:
19:37:8e:06:a2:57:76:e4:f2:db:91:9a:32:8d:93:
27:be:eb:06:1f:e9:1d:04:6b:6a:e1:96:26:9d:e7:
27:d5:f9:8d:89:24:b0:f6:29:f3:2b:aa:35:d4:5d:
55:e3:db:e3:7d:35:ad:91:9f:ff:4f:b5:e1:fd:42:
0e:ec:f5:f0:cf:d4:17:ee:0b:46:40:85:27:12:ae:
d3:36:81:b3:38:d6:b5:ed:52:6a:a7:cd:c4:da:22:
1f:cd:c1:80:9d:ab:fa:28:13:90:45:45:69:2e:28:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:52:A4:1A:BE:26:6F:11:E2:BA:42:77:29:14:97:E2:D6:88:0F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.168.0/21
Signature Algorithm: sha256WithRSAEncryption
30:9c:2a:55:63:f5:34:23:a8:ab:f5:b7:4f:ab:cd:23:fc:a8:
70:75:7b:10:9b:72:24:8e:ac:93:a4:5e:61:d6:50:d3:7c:6b:
04:60:57:50:94:fc:70:ed:ab:83:28:e6:ad:07:37:55:63:cb:
2b:4a:6b:46:9e:02:71:e8:a9:60:c8:4e:ca:68:b8:1b:95:d4:
46:23:66:3c:fd:de:57:99:89:c1:74:74:a6:f9:93:12:0c:9f:
84:5a:9c:d6:56:fe:bc:d1:44:9c:59:9b:33:8f:fc:fa:88:38:
fa:ca:37:d3:b7:8a:56:df:d8:c6:19:a9:8c:5c:5b:af:a2:2d:
17:70:ca:6a:be:60:b6:4e:e2:b3:39:19:5e:0f:bd:37:58:da:
8a:4d:36:bb:de:3c:49:04:07:c8:82:af:ac:ad:36:e3:f1:65:
e6:be:eb:53:27:20:13:93:d2:f7:db:d8:f7:c6:5b:05:ad:4a:
90:64:f0:4d:1d:05:ae:96:e2:2e:d4:fe:6c:14:03:80:c3:15:
98:8d:24:6c:63:7d:73:c4:17:14:39:ac:30:52:9e:72:1f:7e:
7a:10:90:ac:cd:15:2f:3a:e2:3a:06:b1:28:5e:52:a2:9d:30:
71:70:03:11:86:ac:15:96:be:24:81:14:5c:c5:68:d8:94:b7:
5e:ba:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:50 2025 by rpki-client