Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c4b9cae-ef6f-487c-be8d-a2df1a7dc75c.roa
File: 4c4b9cae-ef6f-487c-be8d-a2df1a7dc75c.roa (raw, json)
Hash identifier: OJeGDv4ht91WkcOOCqSkI0PbZHGI2Vsnz2iCCN6cdVA=
Subject key identifier: 7B:78:F3:1F:51:AA:4C:B4:56:33:E3:91:7C:A0:F5:96:C5:41:EE:3D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 11867D1508FF0ABC5E720DE223AE160D008757BB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c4b9cae-ef6f-487c-be8d-a2df1a7dc75c.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 161.188.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:86:7d:15:08:ff:0a:bc:5e:72:0d:e2:23:ae:16:0d:00:87:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:99:61:d0:0d:ba:2b:c6:ca:06:fd:41:97:
fa:8d:27:23:6b:cd:f9:10:1e:4c:82:42:eb:cc:dc:
c0:7f:97:68:24:6c:74:a5:c8:e7:81:49:e6:20:f1:
8b:50:5e:27:33:c7:42:7d:b5:cb:8a:82:9a:9d:13:
a3:2d:6b:29:c6:68:1d:0c:39:3c:ea:c0:01:81:be:
fe:48:0c:73:18:fd:ff:23:0e:a2:38:6b:08:e1:47:
5b:4f:ea:70:f5:0b:6a:09:07:d9:2a:82:0d:d7:30:
38:32:74:c1:b4:6b:71:1e:58:d3:0b:29:05:64:4e:
60:4f:96:d8:e9:d4:64:f3:52:0d:7d:73:bf:12:12:
6b:45:69:83:31:00:23:cd:6d:97:9a:b0:aa:c0:1c:
09:ad:eb:ad:01:91:ce:c1:a9:a1:96:6f:63:95:0c:
43:39:0e:29:06:68:8e:d1:8e:46:18:ac:d6:31:f3:
ef:dc:e9:d8:1a:fa:12:b5:70:c8:51:23:38:e8:4e:
90:96:f4:a1:c6:26:c3:9c:b7:ce:5c:cc:05:2c:34:
bc:1c:c2:90:72:08:4c:21:62:08:92:87:90:cf:d2:
a7:b4:d4:68:55:bd:05:25:1f:29:51:0f:10:89:a2:
06:32:af:07:58:d8:4f:5e:fb:a8:b3:0a:bb:e4:d9:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:F3:1F:51:AA:4C:B4:56:33:E3:91:7C:A0:F5:96:C5:41:EE:3D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c4b9cae-ef6f-487c-be8d-a2df1a7dc75c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.188.152.0/23
Signature Algorithm: sha256WithRSAEncryption
04:df:96:9d:c6:71:e7:00:9c:9f:30:b2:10:b9:5e:ce:29:5d:
85:ed:44:95:0d:e8:05:55:10:27:91:60:69:f1:ad:88:2d:47:
50:95:cc:3d:d2:37:06:d4:4b:d9:94:ea:17:88:32:99:b1:2c:
54:27:b9:b0:70:03:11:ec:3c:9a:1a:7f:6b:25:8b:fd:ca:7b:
c5:0d:e9:d1:bc:e0:bb:59:d8:c3:76:63:c2:3f:97:a0:3b:cf:
7d:6b:f1:16:97:28:14:17:0b:ad:84:42:01:09:f0:cd:7b:37:
13:1a:1c:a8:af:2c:37:47:e6:ba:cd:67:90:3b:02:ad:03:26:
33:15:54:9f:df:b4:49:2f:b4:5c:87:a0:21:8c:d3:33:cb:02:
bf:73:e6:f3:00:3f:44:b2:25:0f:c6:4d:87:ad:3a:82:93:bd:
f3:8d:e5:2f:d8:63:58:7e:4f:33:31:49:e3:1d:94:e6:06:7b:
39:58:3f:7a:49:e5:96:be:c9:ea:7b:e7:4e:8e:aa:bb:4c:3d:
ce:fc:3c:5a:8b:3e:a1:b2:50:15:dd:e8:12:83:13:58:40:f6:
10:b5:95:ad:56:fa:56:12:1e:76:72:6c:40:c2:b9:e4:d4:59:
d8:69:e6:4b:3c:a6:94:56:15:26:ed:08:1c:a2:8a:69:33:49:
68:a8:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:43 2025 by rpki-client