Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/208917fb-d382-4fe8-8dc7-a860392356af.roa
File: 208917fb-d382-4fe8-8dc7-a860392356af.roa (raw, json)
Hash identifier: giLVpeei8LXnBpBDJ0qwoGvoxnYDwtF+MfQ+yV4wTC0=
Subject key identifier: 4B:C9:91:FB:DE:D3:99:A1:C4:24:4F:5D:6F:F3:14:D0:5B:F2:C5:35
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 532B5CE1010CAFFCD6F5C0528057CC4EA99E5721
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/208917fb-d382-4fe8-8dc7-a860392356af.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2b:5c:e1:01:0c:af:fc:d6:f5:c0:52:80:57:cc:4e:a9:9e:57:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:31:74:52:a3:ec:53:01:3b:ad:42:5e:df:
79:2f:25:8d:bd:b0:4f:19:f6:03:0f:a9:83:ee:f8:
88:fa:39:34:fb:97:28:79:f5:b9:31:25:82:97:7d:
aa:03:49:3a:9d:95:45:ac:da:13:63:08:2b:28:cf:
ed:e8:da:b3:e7:3c:5a:bd:07:e6:cd:22:00:94:62:
9a:5e:da:78:d4:db:70:80:25:cf:82:1a:19:53:b6:
a7:3a:be:6a:34:6c:39:0f:21:e9:af:6b:9f:c3:5d:
b3:7b:a4:ee:1f:6f:05:56:d8:33:6a:b9:d6:3f:92:
a8:a2:74:3a:b3:9d:15:0b:e8:7c:00:81:e3:9e:b7:
e5:2f:85:f5:4a:53:24:fb:f7:31:e9:f6:a2:60:a4:
13:02:72:23:7c:37:46:14:b8:96:14:8e:6d:e7:ae:
30:8d:72:4d:71:4c:5d:9a:ae:6c:e5:89:b8:7b:11:
c0:30:59:9d:4c:e3:a6:6b:e2:2a:cb:88:af:7d:96:
94:78:34:3f:bd:f1:2a:ea:cf:d6:cb:ba:54:d7:96:
12:08:ac:2a:fa:0e:51:a2:87:ee:4c:92:68:a7:79:
0a:a1:b5:9a:40:73:ca:50:be:ee:14:a9:a5:b6:64:
e3:c2:dd:de:bc:8c:09:7d:46:05:d0:d5:d7:ec:5f:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:91:FB:DE:D3:99:A1:C4:24:4F:5D:6F:F3:14:D0:5B:F2:C5:35
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/208917fb-d382-4fe8-8dc7-a860392356af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
82:eb:0e:70:ac:9a:dd:c9:f1:1a:a7:dd:b3:bc:de:29:40:41:
0b:84:80:eb:46:38:42:7a:00:77:ad:c3:5d:84:5f:b3:0c:25:
fe:e2:71:77:75:b3:5f:33:5d:c7:c7:77:65:f7:84:7d:3b:a9:
9d:b9:0c:4a:5e:08:ed:a1:3c:3c:78:68:63:17:9e:e5:55:b8:
cd:b8:ba:a0:18:bf:5c:43:d0:02:63:b5:17:c3:55:ad:f0:08:
c6:58:03:d8:09:98:cb:4e:c6:25:07:9b:5e:94:40:6f:1b:65:
e7:03:98:10:c2:40:53:27:94:77:eb:9d:5c:3f:cf:50:26:f1:
27:30:77:6c:27:e6:c2:3c:e1:a4:6e:5a:76:76:31:54:74:7b:
38:c1:63:73:e6:9a:0f:1e:be:cd:f7:b3:4d:61:28:da:c5:b3:
8f:c0:79:89:86:0f:ff:5b:e5:26:a6:d1:d9:41:43:46:4f:1d:
62:09:79:06:cb:e3:82:b3:db:67:e0:05:83:2f:88:7d:93:89:
4d:ff:18:5c:d7:ea:44:96:bf:16:ac:6b:96:33:e3:6d:40:78:
d4:39:25:57:d0:1c:8e:a1:5b:bc:ab:cd:19:2b:36:66:a9:fe:
6d:d7:3d:10:bf:46:70:7e:bb:cb:4f:e7:8f:50:54:58:ae:35:
55:ea:85:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:42 2025 by rpki-client