Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ba28153-fbaa-45e0-a661-8826a970e736.roa
File: 4ba28153-fbaa-45e0-a661-8826a970e736.roa (raw, json)
Hash identifier: pa59DzrKuXviuMi0v154+jyxCkEmWoweaYMSDjTkh50=
Subject key identifier: 14:10:8B:53:55:63:B3:A9:9F:BD:6C:AE:81:29:5F:0F:DE:1E:2D:FF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 634005851985CC1D5D7366741D33CEEF5B2261E5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ba28153-fbaa-45e0-a661-8826a970e736.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 18.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:40:05:85:19:85:cc:1d:5d:73:66:74:1d:33:ce:ef:5b:22:61:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:cd:29:77:a9:f7:b0:52:14:94:09:6a:aa:
fc:46:3b:77:6d:87:40:2c:1c:93:08:6c:8a:d6:4b:
d9:59:ec:ab:bb:f9:8c:a2:de:0c:8c:dc:5d:a4:2b:
9e:42:fd:8f:b2:1b:bf:62:81:d4:8b:41:d8:0c:86:
f8:8a:e2:15:97:ce:ea:44:57:4b:f0:40:d5:33:6d:
dc:ad:8b:ae:62:09:fb:a8:1c:5c:0f:50:2c:e6:5b:
48:9b:b7:99:d0:0d:be:3d:a4:47:f8:7f:20:86:a8:
5d:d6:ab:94:54:d2:83:c4:41:f1:ec:29:be:b3:ee:
0b:ab:91:b5:07:9f:44:88:ca:0a:f1:9d:00:c0:8e:
93:87:89:84:09:80:00:44:f2:98:82:99:ec:5c:c9:
34:59:29:56:c3:1e:fa:5c:2f:4d:93:05:11:38:57:
04:6c:76:b0:88:78:bc:63:b0:12:10:19:e2:4d:c7:
4d:73:d8:38:f3:54:8b:e6:f5:3d:36:15:84:f7:1b:
4c:1f:92:0a:8a:d2:b3:e7:9c:9c:07:8b:4c:a9:dc:
1c:3a:9d:e3:9f:91:63:ee:05:73:dc:15:6f:cc:38:
25:82:c1:a5:be:84:bd:24:64:a1:ad:c8:69:dc:2c:
b8:31:66:e3:78:df:28:06:cb:ad:16:8c:14:c7:d2:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:8B:53:55:63:B3:A9:9F:BD:6C:AE:81:29:5F:0F:DE:1E:2D:FF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ba28153-fbaa-45e0-a661-8826a970e736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:ed:01:c5:c0:c7:7d:c0:aa:6a:d3:12:bc:b1:4b:90:4c:b3:
1a:9b:3c:29:78:5a:32:33:4a:54:c7:5d:09:3c:3f:85:e6:63:
0f:4b:4a:ab:70:bf:1e:41:38:c5:8f:59:b3:98:be:cc:e0:9d:
4e:a2:78:25:13:75:f4:f1:e2:05:b4:97:ef:a9:4a:0e:a2:56:
3e:48:15:7a:8c:56:a2:5a:84:a6:5e:50:66:0f:1c:76:88:a7:
cd:36:5b:fc:b7:4b:a1:1b:54:5f:b1:1e:16:c5:bb:0c:4e:1d:
bc:f0:b7:ef:26:a1:14:09:cb:c5:36:a7:1b:85:93:de:86:f7:
cf:d1:c6:c6:88:15:95:02:b5:bc:59:0b:fe:74:16:5b:6b:1e:
6d:c4:d9:27:79:d0:42:b7:af:b6:10:88:fe:67:9f:29:90:6d:
f7:36:01:2c:5d:2f:fd:ee:62:b0:c1:5c:87:05:c9:a4:58:26:
9d:5b:be:50:b7:84:ea:e4:08:6c:bf:8b:b7:cf:d0:39:84:e8:
43:5d:04:61:f5:d0:81:16:79:67:16:18:90:e4:54:ff:3e:96:
0d:9e:94:5f:42:6a:d2:46:c9:a2:79:22:d7:7f:c4:3e:0a:df:
d4:7a:56:92:93:1c:e2:93:7f:d7:f3:b9:94:02:d1:c0:93:b7:
0c:d0:83:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:21 2025 by rpki-client