Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20d67867-fced-4058-b995-7bb409d8891c.roa
File: 20d67867-fced-4058-b995-7bb409d8891c.roa (raw, json)
Hash identifier: QS7k3DyvMNJmS7hkHacx2mKer5yD5apKALfVePBAbVs=
Subject key identifier: 24:4C:C2:D5:FD:9C:6B:51:D7:25:63:1E:DE:1A:2D:8F:1D:B3:81:48
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 39C7AD4BAAEFA7F800FE7FC238535D64301C9583
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20d67867-fced-4058-b995-7bb409d8891c.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c7:ad:4b:aa:ef:a7:f8:00:fe:7f:c2:38:53:5d:64:30:1c:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:f6:7d:f4:52:53:f2:8d:c8:36:71:f0:0d:
f8:9e:87:d1:14:06:80:fb:04:c5:08:3c:88:bf:5b:
95:8d:9d:2b:d3:8b:e1:3c:d7:08:e7:a2:39:e7:54:
16:80:4d:9b:54:f1:0d:51:9e:7f:04:6b:f5:22:d5:
7a:0d:06:72:20:76:24:b4:e0:96:91:77:04:20:a5:
22:fe:1e:3d:cd:63:5b:13:1d:af:45:cc:d6:29:fd:
52:fd:15:65:37:b9:f9:05:68:a1:f2:fe:26:b6:49:
99:3f:d3:53:9c:63:cb:30:53:b7:f0:77:2d:64:12:
d9:34:31:79:26:20:ea:ae:0e:72:50:cc:3d:39:ba:
b4:11:0b:13:03:45:59:ec:9a:dc:dd:46:4f:00:26:
3d:70:35:aa:34:a9:27:5a:14:e6:ae:08:87:5e:0e:
fe:a8:49:53:02:cb:4f:ec:ff:51:e2:b6:72:29:29:
56:aa:b0:fd:e3:93:db:87:dd:8e:7c:69:a7:66:2a:
17:ff:b6:15:86:c8:70:5f:6d:29:d1:74:93:02:98:
b2:04:f9:64:bc:c9:64:9f:c6:f2:e3:10:e7:65:63:
9e:4b:e2:e2:75:b5:8f:7c:e2:cb:4e:ff:37:77:9c:
92:18:2d:cc:13:49:ba:3c:5c:f4:36:55:be:64:c5:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:C2:D5:FD:9C:6B:51:D7:25:63:1E:DE:1A:2D:8F:1D:B3:81:48
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20d67867-fced-4058-b995-7bb409d8891c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:62:84:8f:f7:e7:0d:01:7d:be:54:50:42:20:ac:d1:69:b9:
1b:d2:6b:75:b0:b6:35:62:30:c3:4e:6e:05:48:32:cb:bb:7b:
c6:54:d7:11:da:36:08:95:93:62:08:e1:3e:e1:ab:3d:28:52:
04:3f:96:75:75:cb:eb:d4:d9:4d:4c:47:8f:9a:aa:41:4b:de:
65:9b:ae:f3:b5:c6:fd:a0:2d:2d:f9:02:d8:d8:b0:41:5c:61:
64:c7:e8:43:8f:a1:16:85:5a:91:d6:49:6b:b9:17:3b:5b:d2:
07:fb:b0:40:b0:07:6f:06:34:54:6a:8d:29:01:5d:73:be:27:
1c:93:50:04:ee:d6:ac:db:a8:89:61:1a:97:3d:eb:b0:94:de:
da:b3:6a:53:bb:18:bc:63:74:3f:de:75:4d:5d:2f:89:b3:bd:
63:e0:1b:40:ab:b5:5d:aa:87:0a:55:4e:76:8c:58:fe:76:fc:
0e:b0:2b:69:71:cf:a5:98:e6:85:d6:c8:d7:c1:4f:91:6e:7c:
56:c2:9d:a9:c9:ef:6a:33:a2:46:17:08:48:a6:ab:c6:04:3a:
e9:58:f0:54:cf:3b:d9:c2:42:48:59:4a:96:8d:c7:48:01:38:
ac:24:5f:d4:32:15:99:b4:04:90:6e:a2:7e:56:b1:b5:d6:5b:
a1:c8:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:22 2025 by rpki-client