Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02cf9b2d-179b-4e26-a757-6b940b52a27b.roa
File: 02cf9b2d-179b-4e26-a757-6b940b52a27b.roa (raw, json)
Hash identifier: hSepakZrlQaLkdX3PN6lQoaS3zZO8USnjFqkFnD3uBc=
Subject key identifier: 6C:3A:70:C0:C5:EB:80:27:DC:40:CA:6A:EA:F4:16:31:C1:2B:05:81
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 10FDD8559E756A6D93BBE7DD1D23C0C7A4AEEE2E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02cf9b2d-179b-4e26-a757-6b940b52a27b.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fd:d8:55:9e:75:6a:6d:93:bb:e7:dd:1d:23:c0:c7:a4:ae:ee:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:40:fb:16:6d:0b:71:a4:6f:03:f2:50:f0:
bc:04:1e:bb:57:c8:df:03:4f:5a:3e:67:dd:a9:90:
ea:25:fe:67:f5:96:6c:d9:6e:47:ec:2c:be:d3:bd:
e5:78:62:da:76:9b:23:21:c5:d1:9c:ca:39:48:df:
e8:4d:19:b2:3e:17:d2:44:67:e9:c7:2b:7c:c2:a7:
1d:91:d8:21:3c:91:74:3b:25:7b:39:d9:55:a9:9b:
d0:ec:e0:20:39:28:1a:11:d6:86:d0:5c:c3:4c:4b:
f7:fc:6f:44:9e:b3:9c:f5:8d:5d:bc:32:8a:aa:7a:
d1:de:12:ba:90:9c:0e:4c:58:72:08:d2:3a:1f:5d:
b1:48:be:e3:09:f5:2a:6e:66:90:d8:5c:56:74:37:
5d:80:06:2d:ce:61:fb:01:3e:eb:10:2b:f5:95:87:
6e:6a:50:e2:06:43:d9:89:dc:16:95:90:5b:71:cc:
e4:33:d7:8a:da:33:b0:a9:24:90:60:c9:34:17:76:
44:8e:0f:03:c5:1a:3f:7f:a5:b2:82:80:42:4b:a4:
98:be:00:8e:80:12:7b:10:f9:6a:8a:80:99:3e:d3:
ff:a6:ce:75:35:f1:22:c1:59:84:cd:00:43:2f:99:
6b:3f:d1:ec:39:ef:35:7b:cb:66:0d:44:40:91:fa:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3A:70:C0:C5:EB:80:27:DC:40:CA:6A:EA:F4:16:31:C1:2B:05:81
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02cf9b2d-179b-4e26-a757-6b940b52a27b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.36.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:60:f2:4b:9d:39:77:3e:ab:2d:56:91:e7:f5:1b:f6:fe:39:
8f:3e:6c:2c:e1:96:26:58:e5:de:27:af:22:df:32:22:01:51:
2e:64:67:4c:06:34:ca:af:df:a9:52:76:25:8b:df:67:91:64:
81:b7:bc:b4:b7:a6:32:8a:f1:6d:b0:8f:df:d9:0e:03:88:25:
23:4d:ad:53:4f:18:c5:45:b8:e5:90:ca:0d:09:32:15:a1:be:
0c:2c:09:3f:b9:e7:91:83:91:9c:d7:96:09:21:fd:0a:85:f2:
cd:7c:4d:48:83:9c:d1:c4:f6:2c:9d:dd:ad:47:ad:2a:a1:a6:
7e:aa:8a:19:87:4a:8c:ef:6c:13:19:2e:ca:db:bd:f2:5d:6b:
33:36:4a:e5:9b:a9:48:af:d3:c5:bc:60:63:ee:b6:b8:3f:a3:
d1:83:0f:d8:37:89:ab:c0:71:da:89:52:f8:54:a7:2a:92:46:
03:ba:ae:ea:09:0a:9a:66:5d:0d:7b:0f:ac:c2:f5:63:dc:3c:
03:df:8a:7b:f0:cc:a7:0f:f9:f1:14:57:28:8c:2f:42:32:5c:
71:b1:63:3d:14:d4:6f:bc:62:60:da:f5:ec:af:5a:e2:66:45:
a2:7f:08:13:86:80:5a:95:75:04:62:fa:e7:d7:d4:ec:0a:c5:
c8:c2:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:01 2025 by rpki-client