Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06f3512f-59ff-4837-8c20-d7028b98aa07.roa
File: 06f3512f-59ff-4837-8c20-d7028b98aa07.roa (raw, json)
Hash identifier: rFbqoRgTL7JhpFPzDPS4LDIxAoMazviLRNOFO/V6tbI=
Subject key identifier: D2:0E:90:02:00:6A:D4:FF:DE:B2:CA:51:68:74:92:19:93:A9:53:96
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 23BD8256CA9BD680CAD6C07EF59FD5C3CB96F78D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06f3512f-59ff-4837-8c20-d7028b98aa07.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.88.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:bd:82:56:ca:9b:d6:80:ca:d6:c0:7e:f5:9f:d5:c3:cb:96:f7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:64:6e:39:2b:b5:f5:37:d2:f5:d3:cf:f7:
5f:c3:2b:b7:44:a9:99:10:b2:8c:a5:a7:66:72:75:
05:79:31:ce:75:f5:c2:ca:7f:a7:02:58:38:28:d9:
80:ce:5c:42:a3:87:17:82:9a:6f:f8:d9:67:a7:16:
95:c9:1a:88:28:17:a6:eb:da:69:29:42:6c:e6:2b:
74:40:b3:2c:10:fe:ea:8e:c8:18:69:d8:1b:6f:0a:
27:fa:78:f6:61:51:83:15:11:c8:9d:b8:ec:9d:e9:
dd:83:78:1d:cb:2d:94:2b:7d:5b:f7:6c:bf:da:88:
da:11:0e:93:1b:ad:9b:88:83:e2:b5:8c:6c:94:fa:
a2:3d:e2:69:7c:1d:97:2b:b0:64:65:9e:85:73:c5:
44:8c:5e:07:b4:7f:3a:1c:32:24:8d:88:39:98:02:
cb:44:47:d1:0d:43:70:1c:4a:de:d7:25:31:9a:b4:
c7:bd:df:75:b0:41:40:f4:33:eb:10:9e:5a:a8:9e:
93:aa:c6:ff:08:7e:f4:9c:db:f4:75:c6:7c:92:3b:
f7:65:e3:5e:47:00:10:ce:0e:da:78:ed:dd:0f:c7:
b0:26:89:42:44:c3:3c:ae:44:13:a4:1c:06:f1:8a:
ef:bb:2c:aa:f6:5f:52:c3:fb:6c:36:8e:cb:be:d0:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:90:02:00:6A:D4:FF:DE:B2:CA:51:68:74:92:19:93:A9:53:96
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06f3512f-59ff-4837-8c20-d7028b98aa07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:28:5c:95:ad:d2:c9:d1:6c:25:1b:f9:76:29:a6:6a:ae:04:
fb:56:aa:4f:88:dd:f3:46:67:c8:8c:58:3f:b4:f7:e8:b5:b9:
0b:4c:a8:a4:ee:bf:a7:01:1f:9e:26:ec:51:b5:0b:01:dc:29:
0b:f8:3c:20:2c:d8:90:22:96:9c:7b:d6:f6:7d:52:87:c9:d9:
da:a0:0a:c0:fa:1d:65:e6:2b:80:c0:e1:5f:91:04:0c:c5:51:
60:4f:ef:5f:a4:0e:6a:1c:90:51:39:71:38:88:5f:75:05:1a:
44:ff:5b:4a:49:9c:a8:d7:13:f9:ac:d0:8b:69:c8:05:e7:b4:
d0:75:b9:6b:c8:50:c1:3c:56:61:f1:c7:60:b4:7e:1b:28:ce:
17:4b:28:3a:42:28:37:ec:31:86:7c:f7:d1:00:8c:5d:42:06:
3a:80:19:48:e4:9b:70:0d:22:9b:95:7f:c8:66:fc:11:74:58:
28:0e:a0:10:5e:25:e7:51:65:ce:c3:d2:22:5b:09:25:dd:ee:
57:5e:1d:0f:a5:55:e9:ab:5d:73:ec:4b:bc:c4:3b:dd:bf:c8:
37:3a:ce:9f:ae:fb:2b:f6:bd:14:47:11:82:71:13:75:e0:4a:
6f:10:4e:08:e2:d3:62:6e:ad:7c:14:5d:13:d9:ee:11:4f:f4:
88:34:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:28 2025 by rpki-client