Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03de61d6-904f-44dc-a297-b0b7e0e685dd.roa
File: 03de61d6-904f-44dc-a297-b0b7e0e685dd.roa (raw, json)
Hash identifier: C7mrcD+w/Lz8BC299T/3yyqka2m58pO9nEGjcfiVa7Y=
Subject key identifier: E7:82:31:18:25:3E:1B:F3:B1:87:76:7A:15:51:E5:61:B4:DE:26:C0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4B63E49E1A0056D3A68460ED6F056B5A0AF0292A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03de61d6-904f-44dc-a297-b0b7e0e685dd.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 136.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:63:e4:9e:1a:00:56:d3:a6:84:60:ed:6f:05:6b:5a:0a:f0:29:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:d5:fa:ed:da:64:4b:c4:1e:81:4f:3f:ea:
23:7c:e3:0d:e0:d3:be:4f:df:5d:ae:d5:ab:d4:cb:
2c:12:33:ca:73:72:e8:fb:da:9b:67:b1:3d:6f:6b:
26:01:8e:57:be:38:bf:0e:1f:b3:df:6b:4d:83:88:
43:f2:fb:1e:93:98:1a:7a:f8:71:26:35:62:cd:89:
90:e4:b0:e9:8f:f2:aa:5e:e0:ea:1a:09:f8:f7:9c:
24:60:eb:de:6a:be:56:be:46:9c:a3:fc:29:1c:d6:
45:3d:01:66:7e:ca:90:d6:22:7e:f4:ad:cc:f2:42:
5f:8c:e6:fd:87:64:37:b8:c0:3f:55:49:b8:21:19:
d9:79:3c:b7:9f:f5:ca:53:c7:3f:63:6f:55:ac:57:
fc:bb:c3:f9:02:c6:e7:ae:9f:08:7c:7c:ec:5d:08:
24:b4:9a:60:ac:99:08:4c:e8:2f:b9:57:ec:72:c9:
65:85:58:ed:08:42:9e:13:90:6d:ae:ec:ef:5b:d1:
0e:7b:e2:3a:a8:e7:21:d3:7e:96:75:80:51:06:2e:
f9:84:58:95:52:c0:3b:2c:9c:bb:ce:1d:0d:a3:34:
9a:d8:b1:6b:c5:c8:7a:02:4f:82:53:ed:c0:cb:24:
02:57:70:bb:a6:7b:cd:87:9d:14:a7:c2:76:4f:80:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:31:18:25:3E:1B:F3:B1:87:76:7A:15:51:E5:61:B4:DE:26:C0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03de61d6-904f-44dc-a297-b0b7e0e685dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:9f:58:6e:2c:69:66:35:57:03:f5:cb:ce:59:51:fc:bd:b7:
a1:9c:e4:6d:7a:8e:ab:a6:b4:d7:b3:5e:d3:d1:1a:45:da:44:
79:b2:af:c9:b6:e3:62:69:66:ea:a0:9f:b5:c7:03:36:37:92:
9f:a8:40:00:95:58:0b:fe:c8:bf:1c:7f:0f:31:d8:cb:07:4b:
f1:90:36:35:ca:b9:9f:f2:97:2f:00:0d:d2:89:83:fe:a1:fd:
09:75:01:d9:98:8c:10:64:fc:26:8d:40:77:6f:40:73:21:c0:
8d:2c:5a:95:40:d3:e3:55:a1:67:ea:81:ad:e2:3f:f9:e1:f0:
18:79:e4:49:6f:c7:12:97:66:dc:85:da:8c:21:e2:d1:1c:f4:
1e:1d:d6:25:f5:20:f3:fe:9f:85:91:bc:1f:1e:65:83:4d:a1:
7e:1f:7f:af:cb:59:4c:7b:0c:fc:13:41:96:84:d6:94:6d:87:
f6:b5:29:d6:0b:71:17:6a:4e:f5:c7:a9:c3:2a:ff:0a:b7:88:
1a:d5:48:40:07:b3:65:c9:8f:0a:19:ac:d0:54:4a:3c:d0:d1:
78:59:ee:b9:74:9e:28:2e:93:5c:41:32:0e:10:7a:c8:d1:b4:
5d:dd:c1:70:b0:a2:62:15:8a:3f:ba:4b:c8:33:1b:27:73:ee:
67:59:57:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:05 2025 by rpki-client