Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/449f6334-b651-4a8e-8dce-d87aafaf89ce.roa
File: 449f6334-b651-4a8e-8dce-d87aafaf89ce.roa (raw, json)
Hash identifier: WbFhuSc84t+Cp94WRRxsPyCih0+G/WEiIJP/JWJS+zk=
Subject key identifier: A4:B8:64:4B:BE:3E:D9:D8:1D:DB:E4:06:C7:36:9E:30:76:D9:A1:C0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 32B67660D77AB3175B1C926AC3C4E4926470DC5F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/449f6334-b651-4a8e-8dce-d87aafaf89ce.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b6:76:60:d7:7a:b3:17:5b:1c:92:6a:c3:c4:e4:92:64:70:dc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:f4:75:f9:1f:db:82:65:56:6a:fc:ef:e7:
71:9d:fe:a1:bd:22:d0:f0:e4:22:04:34:64:ac:20:
92:11:07:a0:b4:a5:7a:9c:b1:1c:38:9f:39:72:bf:
f2:8c:94:55:3e:c2:76:14:fe:48:6e:40:03:e3:fd:
47:ae:fa:a0:75:4f:f8:15:3a:cf:0d:11:49:36:a8:
50:35:65:22:99:5c:3b:fa:18:ea:dc:85:d4:fe:cd:
50:0b:3c:8b:af:1f:c3:d8:9c:e8:1a:de:7d:fb:fb:
43:d0:c7:40:a0:eb:14:3d:12:e0:3b:a7:5c:d2:51:
4e:ac:b9:99:34:5c:07:8e:b5:35:90:d6:39:a6:a5:
fe:61:2a:51:b1:12:9c:72:7f:9a:19:ac:20:f5:c9:
64:ef:01:21:c4:01:77:72:be:90:30:46:91:51:3f:
d4:99:4b:2e:fe:9b:dc:b1:e3:9a:a3:ab:01:9e:1e:
0b:19:ad:3d:57:8b:cf:f5:43:05:17:d2:61:fb:59:
75:3f:0b:93:f4:a0:7f:12:a5:45:72:3b:5e:32:cf:
f3:38:df:79:15:e7:c5:b4:e9:f9:ee:32:35:6d:05:
b5:db:4e:e6:52:88:72:89:59:a7:b5:15:a2:be:68:
86:f1:05:22:ab:8f:ff:e1:62:f0:08:dc:22:9d:bc:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:64:4B:BE:3E:D9:D8:1D:DB:E4:06:C7:36:9E:30:76:D9:A1:C0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/449f6334-b651-4a8e-8dce-d87aafaf89ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:50:f0:0f:f4:4b:61:84:fe:c9:5b:69:df:32:9d:93:fb:49:
15:80:a6:0a:b9:1b:26:34:af:63:f0:fb:6e:b9:bb:65:fc:67:
3e:d2:c2:00:11:7e:49:7c:0e:ed:6f:8e:70:66:79:40:6f:59:
16:db:b3:88:11:5a:c8:bf:67:79:91:87:1d:6d:80:d5:23:ad:
8a:ac:ee:5a:79:50:42:29:70:e7:ee:d9:5f:be:cf:f5:dc:15:
fe:69:de:96:17:92:17:14:dc:67:53:73:cb:5b:03:11:d4:35:
c0:d6:fd:8f:6b:6e:3d:8a:d6:23:2e:b1:c8:d6:6b:95:9a:5b:
4f:55:e9:54:c8:d1:69:75:01:67:6c:dc:50:75:5c:a8:cc:2d:
c3:2d:5b:33:4d:45:b1:a0:45:cf:cd:a5:e7:d8:0a:80:32:47:
21:ac:4b:c2:e7:a7:8a:01:4c:6d:81:78:6b:8a:9a:89:83:ce:
6b:d9:13:ea:04:b0:cd:94:0c:2e:b3:3a:15:2c:84:f1:c3:c5:
3b:a6:94:97:e5:50:f0:bd:6e:e0:78:30:7a:ae:b7:7b:d7:dc:
a9:f1:ce:ab:9d:22:b7:3e:5f:b2:19:d7:b6:7e:36:be:aa:8d:
43:cf:d8:63:e3:b4:52:b8:35:8c:4e:5c:f9:05:6e:b8:87:bd:
5c:42:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:05:59 2025 by rpki-client