Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fb18fbd-6637-486d-8aac-f95923bf2ff9.roa
File: 0fb18fbd-6637-486d-8aac-f95923bf2ff9.roa (raw, json)
Hash identifier: sjaZqYVqVKfw6WfHxHvw5hyXqT6FKrG6aImAA0gG/vI=
Subject key identifier: D4:6B:BB:56:0E:1B:87:2F:B5:26:BF:B7:2A:5D:1F:BA:49:30:C5:AE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 45900AE3BADD8AC73C4351343F112A69543FD1C3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fb18fbd-6637-486d-8aac-f95923bf2ff9.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:90:0a:e3:ba:dd:8a:c7:3c:43:51:34:3f:11:2a:69:54:3f:d1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:31:57:00:a9:a4:a7:bd:cd:f5:5f:93:dd:
c5:e0:9b:81:b4:4f:b0:cc:71:a0:83:0e:0d:71:62:
33:89:80:a2:1b:ce:ae:0c:e6:46:2e:ba:74:3d:c8:
60:3a:ca:1b:7f:15:43:4d:f0:bc:4d:7d:68:f1:4b:
65:c7:3b:9d:52:2d:ed:fa:fb:c8:89:c4:c6:0b:96:
19:81:05:6b:2b:c1:9c:e2:da:c9:45:e1:87:a4:e7:
d0:da:cd:c0:72:1c:41:0c:3d:aa:96:25:49:61:2d:
bd:08:10:ad:95:31:c3:24:8d:51:7e:f9:46:f1:6c:
14:22:3d:3e:8d:eb:ba:4e:b2:03:23:2e:5c:15:b8:
7c:9b:d1:8b:60:7d:4b:56:1b:82:c7:f9:df:07:90:
fc:f5:27:7e:97:1f:ac:40:46:4b:09:24:94:ed:b8:
71:5c:b1:8d:ca:d4:ad:ed:60:fa:f0:67:08:0c:e0:
f3:7f:dd:cf:c6:94:45:bd:c6:5e:54:d7:38:9b:9e:
2e:78:ef:eb:64:22:a9:23:5f:c5:2e:6e:58:e1:dd:
7f:b5:cc:91:80:28:7e:30:49:59:22:b5:f3:5a:f2:
48:b3:4f:c3:b1:ae:b1:2e:80:a1:3a:d9:86:af:4d:
1f:da:dc:10:46:47:1d:17:3f:b4:da:d1:33:92:bc:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6B:BB:56:0E:1B:87:2F:B5:26:BF:B7:2A:5D:1F:BA:49:30:C5:AE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fb18fbd-6637-486d-8aac-f95923bf2ff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b9:57:46:8d:e1:a0:7a:e9:e5:6f:57:c9:6a:93:57:9e:cf:
42:5a:f9:fe:37:f1:4e:be:42:5a:5e:ee:e2:7c:85:aa:7a:df:
04:ea:93:3e:99:49:d2:6a:54:65:d8:de:ff:10:ff:72:d7:9a:
fd:06:66:50:0c:27:81:0c:03:85:52:20:00:aa:64:0a:ce:0f:
0e:e3:18:c0:c6:08:e3:55:bf:03:eb:1e:a7:4c:15:e6:85:b1:
13:6a:20:41:4e:30:32:b5:8b:d0:7f:4f:ec:a6:7e:dd:cb:e8:
37:ca:6d:e9:28:d5:1b:0b:74:91:f6:fc:97:92:1a:b7:eb:36:
75:77:1c:fd:c9:c0:23:6c:c9:01:90:19:55:33:4a:54:f8:37:
36:bc:a1:5f:8a:b1:c1:39:3a:f4:c5:71:46:42:6b:6c:b3:b8:
42:06:c7:0f:32:64:36:ad:5f:b0:7d:55:23:34:ba:50:69:0f:
37:c4:f2:88:1b:63:23:fa:d5:80:66:66:57:e5:4e:59:9b:24:
ae:4a:dc:df:f5:2b:0c:7f:71:8f:14:9c:9e:dd:a1:28:40:5e:
e6:f4:a7:dd:a9:9a:5e:4c:55:49:14:6b:02:38:d8:37:a7:cf:
7c:7d:8d:0f:52:b3:49:d9:92:65:eb:53:c1:03:08:ac:bf:4b:
e3:47:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:52 2025 by rpki-client