Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0767a082-6fd3-4cd0-a184-eeaa917b4c0d.roa
File: 0767a082-6fd3-4cd0-a184-eeaa917b4c0d.roa (raw, json)
Hash identifier: +EQZd56uB00IeN/TnjH4qrBsGHyx7NQUEKvCbKBG+5I=
Subject key identifier: 94:C0:FF:8B:D6:1D:2D:CA:F9:6C:60:5D:D0:DC:6C:66:DE:96:BC:60
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 37458639C0D3B7B50DAA6EC622563929070E69A5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0767a082-6fd3-4cd0-a184-eeaa917b4c0d.roa
Signing time: Tue 04 Mar 2025 18:40:10 +0000
ROA not before: Tue 04 Mar 2025 18:40:10 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.181.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:45:86:39:c0:d3:b7:b5:0d:aa:6e:c6:22:56:39:29:07:0e:69:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 4 18:40:10 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:96:8b:51:70:d0:73:44:bb:bd:80:13:f1:
01:9b:d2:f2:52:d5:30:ab:cf:3e:c2:9e:e7:0e:95:
d3:76:b1:d7:33:48:5a:f4:fb:d3:ff:25:7b:6f:61:
b2:df:4b:6a:e6:a4:28:65:e6:78:86:49:af:d2:b8:
e7:e4:48:ed:4c:1e:4e:75:b8:ee:a5:90:e6:d5:f0:
7a:3c:9c:ca:ef:49:16:47:5c:7d:94:5e:40:7f:b9:
81:f3:3d:d2:07:bf:84:ef:83:1b:be:7a:d4:88:de:
2c:6f:dc:56:6b:b3:72:86:62:37:ae:39:f4:56:aa:
a7:53:25:95:9e:9f:18:7c:cd:0b:77:0f:8f:2b:42:
e4:85:6e:4f:6b:4f:9e:08:fd:e8:fb:7a:e7:94:62:
c6:8a:1d:f8:d4:03:2a:22:18:63:48:6b:4e:f7:6b:
49:d7:e5:37:17:f6:96:fe:5a:db:d8:d9:ed:fb:44:
b6:a4:9a:7f:eb:5c:ce:fe:8b:c9:0c:2d:44:4e:89:
b6:84:23:0b:5d:a1:a8:e4:6d:97:1c:0f:0a:d6:a8:
fa:73:64:56:70:ff:d5:b2:aa:10:06:2c:77:0c:70:
a7:68:3b:b7:f7:c0:5d:ec:21:f9:9b:26:69:f4:93:
35:08:2a:39:ab:e2:01:4b:ba:c0:bd:bc:4d:9b:1b:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C0:FF:8B:D6:1D:2D:CA:F9:6C:60:5D:D0:DC:6C:66:DE:96:BC:60
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0767a082-6fd3-4cd0-a184-eeaa917b4c0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.247.0/24
Signature Algorithm: sha256WithRSAEncryption
29:82:f0:7a:6b:30:5a:b9:33:2d:8f:b3:25:78:61:c6:27:40:
51:fb:d3:4d:2b:29:76:65:5f:f5:13:11:64:63:15:5c:41:0f:
d5:59:82:43:37:d4:2b:66:d7:0a:71:8d:08:04:8d:eb:48:9a:
79:2e:9e:b5:1d:72:b5:28:67:27:66:c7:59:0e:96:e4:b4:b3:
a7:0b:7f:8c:44:8b:0d:9d:df:99:da:03:3e:01:56:a6:85:50:
55:b2:1f:5b:4e:14:e8:fe:bc:ec:ae:5b:8d:53:44:01:6a:bb:
96:b7:03:c3:2f:a4:05:3e:a0:83:1d:cd:fb:7e:14:86:0f:e8:
78:43:56:3b:40:40:c9:94:6f:82:de:5e:b9:da:c7:bd:98:99:
e2:28:7a:fd:06:8b:79:72:bf:ad:87:ea:98:32:77:d6:01:e2:
37:7e:65:23:39:c6:82:4d:e7:36:8d:7b:b6:4f:ab:db:9b:a0:
54:66:7f:9c:0e:92:97:5a:ab:c7:e5:fc:fa:cd:d7:87:d1:43:
a5:36:cf:69:a4:c9:3a:37:9b:7d:c1:89:29:2c:c9:a3:8a:85:
bd:e0:69:69:f4:e9:d1:d4:ee:2f:03:92:90:a2:88:a6:d4:ad:
99:93:21:a0:bf:d9:e6:65:89:d8:93:c4:61:82:b6:cc:71:64:
38:a9:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:49:59 2025 by rpki-client