Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a26d222-4e1c-490f-9321-a8cc24a892d1.roa
File: 1a26d222-4e1c-490f-9321-a8cc24a892d1.roa (raw, json)
Hash identifier: CoWqTGCwc4yg7EI7/T68psfT5fOkcIewNAg62vCUak0=
Subject key identifier: F3:4D:FC:98:ED:93:02:74:16:F6:B0:40:6F:64:B8:01:F5:CE:10:FA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 49DCBDC4DA9E64E89C78F709F9FC1F7459266BA0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a26d222-4e1c-490f-9321-a8cc24a892d1.roa
Signing time: Wed 05 Mar 2025 00:40:15 +0000
ROA not before: Wed 05 Mar 2025 00:40:15 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:dc:bd:c4:da:9e:64:e8:9c:78:f7:09:f9:fc:1f:74:59:26:6b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 5 00:40:15 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:31:26:00:44:b3:1b:2b:80:74:9b:5d:0a:
35:e6:20:ff:15:d8:59:89:b2:e6:a7:88:fa:9c:b7:
5f:de:0c:1c:ea:8b:af:a4:25:23:8c:40:d3:ae:3d:
ea:52:7f:94:45:86:bb:f8:f4:eb:6d:02:7e:41:03:
b7:e6:29:59:9f:f6:c8:ad:94:57:3e:f4:8a:fc:bc:
1b:3f:38:b5:95:9b:1b:9e:17:a7:fd:ff:ce:d1:3b:
d6:70:bf:3d:6d:6f:e5:20:1b:0c:a9:f8:4d:48:a8:
27:7a:04:e0:4e:b3:87:b4:80:b7:0f:41:47:5d:1a:
88:15:f6:47:8c:bc:22:06:b8:f5:8c:ba:6e:2a:31:
06:6d:5b:da:d0:ec:39:2d:07:9e:63:0b:4f:ac:ac:
e1:6e:93:e1:12:c0:d9:df:98:e2:27:f2:73:3f:f9:
de:f6:1d:3b:0c:b8:da:b2:6b:15:f7:74:09:3f:87:
c4:eb:63:e4:30:ca:f5:ea:7a:e2:fa:e0:01:b6:60:
a5:3b:14:33:8f:03:ae:41:a0:93:0f:41:72:5a:72:
7d:b7:68:6b:ba:33:13:89:37:77:79:bf:df:61:6b:
2c:4a:79:b0:9e:57:c8:f8:e6:26:87:1e:60:80:57:
9f:e6:11:e4:b6:71:20:4f:22:73:b9:46:47:5d:21:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4D:FC:98:ED:93:02:74:16:F6:B0:40:6F:64:B8:01:F5:CE:10:FA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a26d222-4e1c-490f-9321-a8cc24a892d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.71.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:d9:c0:9f:83:0d:f1:f1:a7:35:a2:18:b2:68:bb:5e:ca:96:
ad:6b:c6:a6:b6:32:52:cf:0a:03:d3:ba:e7:c7:44:a5:4e:43:
66:e6:5a:ea:16:ba:ac:79:27:e8:2a:dc:fc:e5:ac:10:a6:44:
1e:91:95:a6:5e:1b:fa:81:16:c9:db:a5:ae:33:93:88:48:31:
d7:bc:3f:e7:66:91:ca:63:41:82:2f:38:72:2a:7c:2e:d7:d9:
d9:c2:35:2b:5f:55:33:ad:4c:dd:fe:df:0d:e0:4b:c2:f1:b8:
65:09:d2:6b:a2:55:62:67:76:45:64:a6:9c:82:0a:92:22:f1:
25:db:4e:70:bf:81:a1:e9:6e:55:01:23:5d:78:25:36:c3:66:
06:ff:13:d9:98:ce:71:27:11:99:29:6a:35:3a:b9:dd:12:68:
b7:8d:33:f5:74:9c:72:f0:3b:f2:3f:87:aa:09:9e:77:d0:60:
31:33:62:94:b5:06:8a:14:ae:a5:5e:ef:78:38:b0:e3:ca:ff:
0d:88:12:d2:77:b8:d3:09:db:ea:08:46:fa:8d:bd:e4:fe:8d:
a2:b7:22:e5:17:0d:74:04:cc:f7:27:52:b4:1e:8c:8e:f6:78:
25:d6:bf:3c:78:ab:2a:b0:00:8d:e3:d4:b7:d4:1d:51:0e:54:
fd:78:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:20 2025 by rpki-client