Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/119b313c-a5d2-402e-9b8a-3246465bf4ae.roa
File: 119b313c-a5d2-402e-9b8a-3246465bf4ae.roa (raw, json)
Hash identifier: 1ObkUK0fgujxylT1OFuiIdX2cnq8XIqMWRtBum1PhKU=
Subject key identifier: 36:59:E7:2C:7F:72:CF:C3:6C:C6:84:A3:81:D5:D3:18:88:A3:10:21
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 331FE495F9BAF141770FDFB4B2E62D2F77E4374F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/119b313c-a5d2-402e-9b8a-3246465bf4ae.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1f:e4:95:f9:ba:f1:41:77:0f:df:b4:b2:e6:2d:2f:77:e4:37:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:83:e3:aa:b7:cd:67:ea:57:0a:28:6e:e8:
ac:5e:fb:65:c5:ae:a2:7e:20:ee:fb:2d:cd:4e:c1:
11:ce:8d:8c:ec:fe:06:ec:32:8a:2e:0d:c3:6b:b1:
3e:b0:b1:e6:d0:7b:36:4d:35:f1:7e:ef:16:1b:7e:
93:f0:2e:24:11:07:25:04:22:9c:2a:49:59:3a:33:
49:77:31:03:e4:c2:78:1c:98:25:22:a1:60:1c:33:
17:8b:67:35:82:d3:2c:d9:ce:8f:32:2d:15:c5:95:
80:e0:42:c6:40:4f:06:21:87:14:f4:f4:21:bc:a1:
49:4d:9d:a8:a3:ad:c1:80:e6:a4:a7:24:9c:b7:38:
57:e6:bc:ea:8a:23:3a:d1:04:2a:44:d0:f5:b2:ff:
bc:f5:33:33:38:5e:a0:83:36:06:87:a6:ca:32:c5:
7e:8a:d8:2f:61:56:6d:2a:a9:da:0c:4d:d3:ef:26:
ef:e0:ef:23:77:96:41:80:64:99:cc:8d:68:4d:f3:
94:e7:24:f1:ba:93:8e:03:26:5b:44:73:4c:ff:9d:
dd:59:f6:14:e1:e4:97:ca:98:cb:5b:56:83:18:a4:
53:e5:6f:30:71:2c:b8:ed:80:ee:7f:83:3a:2b:0a:
89:e7:ea:aa:2c:1a:15:76:52:bd:54:d0:f5:bc:c3:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:59:E7:2C:7F:72:CF:C3:6C:C6:84:A3:81:D5:D3:18:88:A3:10:21
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/119b313c-a5d2-402e-9b8a-3246465bf4ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:c7:7f:70:03:0b:93:08:a7:95:c0:d1:d1:03:be:69:55:2d:
07:cd:78:3c:45:d7:a7:95:86:24:6b:1b:e9:72:e0:23:a0:44:
29:e5:d3:d3:8c:15:95:09:fa:6d:db:9e:e4:5b:ad:8f:e4:9d:
3c:f3:b0:22:76:c6:57:22:97:6e:03:97:e8:d1:b6:b7:df:51:
8d:bc:fc:f8:1d:fd:90:b2:c3:4e:5d:c3:da:f1:64:6c:6b:df:
ca:f2:7e:b9:f9:83:c6:f1:52:30:ca:3d:39:81:98:55:dd:22:
4a:ca:db:da:b5:43:fa:29:9c:13:92:66:cb:77:26:64:f6:3a:
e9:af:79:da:9e:87:0a:81:2a:c6:74:6a:32:bf:5c:35:07:eb:
2d:4b:2b:dc:de:cf:19:eb:e5:d6:bf:4d:cf:9b:06:87:a7:04:
f7:81:65:c2:f3:8b:a1:f1:e7:ad:41:52:82:ce:60:e4:7b:d2:
88:b8:a3:b8:27:ee:7d:43:91:b4:05:ae:21:f9:c9:b8:ec:39:
97:9e:64:10:3f:da:21:77:10:6f:82:ce:86:ed:5a:a7:4f:1c:
54:49:99:37:57:38:38:f9:65:cb:9f:2b:80:81:1e:94:03:19:
16:ac:57:20:d6:62:e7:1b:eb:fa:f2:cd:be:bc:c5:f9:58:35:
19:6b:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:10 2025 by rpki-client