Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bd64c45-b54f-48a4-b501-ab2f88cc619d.roa
File: 3bd64c45-b54f-48a4-b501-ab2f88cc619d.roa (raw, json)
Hash identifier: 2DGYh0ApvIycTPK0c4wvcXCuUcHUckHidgHvC/OxAxQ=
Subject key identifier: 8E:5B:FD:9D:E2:1C:31:DF:05:93:B3:84:BC:E3:E7:2C:0F:88:67:4B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7D5FB979B2EFAC01F07A975C633B60438B690ADA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bd64c45-b54f-48a4-b501-ab2f88cc619d.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 136.14.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5f:b9:79:b2:ef:ac:01:f0:7a:97:5c:63:3b:60:43:8b:69:0a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:ea:88:0c:50:b6:f7:62:09:5e:94:13:f1:
ff:ff:e2:1b:af:04:44:16:ed:6b:9d:55:1a:a1:c5:
9c:47:7e:7c:19:ba:49:e4:eb:6f:d8:c2:7c:b3:b2:
6f:b5:2b:2d:f3:11:9e:4c:1a:65:6a:c2:19:56:d5:
3f:4d:d4:ef:26:dd:bd:69:b0:e1:83:78:26:a8:02:
2a:9f:a2:5b:d7:fb:77:7c:99:bc:b5:23:7e:4f:8b:
74:b6:08:04:f0:61:b1:c6:e2:6d:7a:f4:f1:37:93:
d9:41:d1:c6:f6:3c:49:de:4c:98:3c:b3:7e:73:28:
55:8a:1e:f6:39:b3:85:de:7e:db:e0:aa:80:91:78:
f8:d0:b2:17:bd:40:a3:58:0e:91:7a:87:22:5c:96:
7d:62:ec:ce:0a:91:a8:ec:fb:af:ab:5c:7c:a2:39:
27:2e:10:94:63:46:59:07:f9:a2:4f:47:29:9d:c2:
3e:28:fd:3a:97:14:ed:34:ef:85:fd:51:9e:c9:ef:
1a:8a:fb:09:0e:f4:68:a1:d6:ef:f0:34:23:00:01:
4a:bb:22:09:c5:62:2c:d8:50:c9:1d:05:aa:42:47:
8b:e7:47:82:1b:16:19:6f:96:4e:30:69:92:87:a1:
21:95:2f:fa:f7:85:a7:50:91:56:14:b7:b1:d9:c2:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:FD:9D:E2:1C:31:DF:05:93:B3:84:BC:E3:E7:2C:0F:88:67:4B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bd64c45-b54f-48a4-b501-ab2f88cc619d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.14.0.0/15
Signature Algorithm: sha256WithRSAEncryption
35:5f:82:97:03:2c:03:ed:bf:a1:9d:8b:4d:a5:e8:ed:f6:85:
16:c4:67:a5:40:67:b3:96:82:e5:3c:4a:54:a7:95:17:7a:78:
35:a9:a6:e1:cd:92:2e:35:59:f1:6c:a2:10:e2:c0:c1:c7:07:
25:7e:d7:49:ee:27:e8:10:20:02:fd:99:5e:f8:85:91:aa:92:
64:6a:49:21:a6:e7:38:fc:83:75:11:73:81:ee:e0:af:fc:8d:
29:09:69:ad:18:8f:48:71:99:9b:a1:56:9d:92:e4:af:82:50:
29:fe:a2:47:8b:91:c3:68:af:83:f5:45:14:c8:99:71:69:b3:
38:89:44:33:41:dc:8f:a4:dc:39:d7:2d:4e:2e:5a:81:3d:61:
1c:cf:0b:f9:9d:25:cc:98:00:06:c9:81:cc:8c:bb:fd:a7:27:
f2:87:8f:10:60:18:94:f8:9f:96:65:71:a2:ba:79:c3:f5:81:
17:53:ee:fe:c2:18:7b:5b:7b:f8:e7:60:64:dd:15:ff:d7:8a:
a4:e4:5a:79:1d:5d:bb:09:3c:57:4f:12:fe:4e:d1:6b:8b:68:
48:f5:b2:72:da:dc:49:be:6a:21:31:6a:06:83:6d:ff:47:6b:
a6:bf:8c:41:48:43:0c:dc:be:ff:92:fe:c6:c3:76:48:56:30:
ce:9f:43:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:19 2025 by rpki-client