Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32627504-51df-48f5-bd3a-a0f861f3ad58.roa
File: 32627504-51df-48f5-bd3a-a0f861f3ad58.roa (raw, json)
Hash identifier: 5NKN+Boo8pPn5QS08JBeH5TIw4Qsd3w7a4vKKYlpLV8=
Subject key identifier: 89:C1:0E:A7:99:CE:55:BA:22:37:83:3E:18:4E:F9:D5:3C:C0:F8:31
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 13D814030EE560995871E9F2CF6031CEDC7B3A2C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32627504-51df-48f5-bd3a-a0f861f3ad58.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d8:14:03:0e:e5:60:99:58:71:e9:f2:cf:60:31:ce:dc:7b:3a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:e3:36:5d:1a:e9:ab:50:97:94:93:fe:c4:
32:47:6f:e8:12:b6:27:8f:99:e0:d9:19:50:c7:14:
59:f7:73:fa:1f:e1:04:94:a7:97:ca:cb:6b:90:cf:
6d:8e:da:85:9b:86:21:b7:dd:51:8f:43:31:71:09:
03:d6:4d:be:7f:40:1e:f5:04:82:85:de:93:b7:28:
d6:d2:fd:9d:e8:85:ac:05:96:9e:b3:36:d8:04:02:
d4:58:12:98:1f:e5:7f:61:98:7b:50:40:19:1b:81:
8d:64:8f:c9:ee:7d:4a:5a:e8:36:be:e7:7f:4c:a5:
53:c1:c4:dd:35:9e:e3:6d:1a:0a:e1:76:ca:91:ee:
3b:0b:c0:c9:c5:5e:f4:37:1e:d8:24:6c:fc:0a:8b:
3c:f3:90:71:ca:70:a8:bb:65:9f:9c:01:9b:2d:fe:
38:2b:44:67:a3:26:0d:c7:21:c7:c2:15:ab:b4:96:
fe:be:40:1a:55:3e:f1:17:a6:35:46:59:e2:46:2d:
82:97:51:06:ad:15:5b:66:bb:d2:79:14:97:cf:08:
68:0a:41:d0:38:42:46:d9:66:00:6d:5a:9c:cc:32:
39:c2:44:49:6d:e5:39:b0:bf:65:07:8a:be:1e:3f:
12:4d:d5:2f:fd:13:c1:f6:8d:d3:d3:0f:43:6c:0c:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:0E:A7:99:CE:55:BA:22:37:83:3E:18:4E:F9:D5:3C:C0:F8:31
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32627504-51df-48f5-bd3a-a0f861f3ad58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.150.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:99:b4:75:bd:fd:30:23:79:75:07:c5:bc:9a:c4:2c:da:02:
41:2b:f7:4a:60:14:4b:5f:35:2b:c1:e0:a9:34:93:3c:b9:b2:
2e:02:41:bb:f9:2e:9c:2d:cf:6e:70:45:36:d9:e6:b0:7f:ea:
13:01:db:d2:37:8e:ef:38:5b:39:35:92:f4:75:3e:43:c3:e6:
48:80:b1:74:e2:c4:7f:b0:b4:8d:ec:ef:b5:9e:0a:b9:af:8f:
f3:3a:99:2e:8b:ef:7a:6b:60:35:f8:56:6f:16:ae:7a:51:02:
13:db:fb:34:2e:5c:90:15:cc:5d:9b:f4:b3:dc:49:6d:76:ff:
79:40:84:98:09:39:07:a7:52:81:66:4c:98:20:79:a4:1d:e1:
c2:b0:56:1b:ac:2f:f4:42:3c:fd:de:0c:31:77:d8:ea:ec:7f:
2c:13:36:33:5f:31:7a:de:a4:06:1c:05:7b:a3:bf:de:1f:45:
09:1f:8e:0d:4e:98:07:ae:52:63:19:8e:ee:2f:88:a9:d7:c1:
76:9c:94:c4:33:15:de:6b:79:9d:39:b8:54:74:8e:c7:d0:3d:
a0:4b:02:78:dc:65:a9:af:7e:a7:b9:ec:5c:33:2e:7e:0a:31:
dc:eb:dc:1b:1a:fb:fd:e0:46:38:45:d6:a9:f7:eb:1f:1a:61:
cd:95:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:07 2025 by rpki-client