Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5088059f-2254-4daa-a68a-f5c0e8a900b8.roa
File: 5088059f-2254-4daa-a68a-f5c0e8a900b8.roa (raw, json)
Hash identifier: IQsALuTmINn5Vi9p1JbvT7I2cTuOB1t1kD+uFCXG6IQ=
Subject key identifier: 82:E0:0F:7C:15:20:A8:4B:C2:D5:E6:7D:38:EB:AE:E8:F9:FB:88:5D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3192C977340D54E2D25FD929E173E6C223E61F4A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5088059f-2254-4daa-a68a-f5c0e8a900b8.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 141.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:92:c9:77:34:0d:54:e2:d2:5f:d9:29:e1:73:e6:c2:23:e6:1f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:0c:f1:db:38:3b:ba:7d:33:fd:03:94:fe:
b8:88:fe:0a:4f:49:c6:44:c5:8b:d4:14:48:71:79:
fd:b0:6c:4f:3f:3a:a1:e0:1e:5a:f4:86:1f:39:d9:
7b:23:b6:94:a7:79:78:96:9c:ed:6a:24:3b:47:4b:
bb:6f:25:24:8d:33:0f:aa:f6:d6:29:45:b1:f4:4d:
4a:7d:b5:d5:a4:77:98:4d:ad:93:56:d0:f9:2f:99:
86:f3:d8:10:55:ac:ff:65:31:49:34:0e:6b:ac:67:
cd:b7:30:66:55:97:12:96:cc:ab:ad:81:f6:aa:33:
5b:d7:b5:99:b9:41:5e:58:db:24:84:ae:4e:24:7d:
a7:e5:be:b0:05:95:fb:c7:45:00:f5:02:4f:65:6f:
b6:0a:e4:83:68:ef:5b:bf:26:a7:ec:bf:48:db:3a:
71:c9:b6:c3:14:15:24:01:2b:a5:c6:6d:0a:95:65:
21:20:0b:24:06:f6:9e:69:26:db:28:4c:54:d0:47:
76:f7:ba:a2:6f:b0:80:ec:af:83:21:16:33:12:fb:
92:a4:70:8f:91:e0:bb:1f:fc:1d:4e:83:05:e1:5d:
6f:97:26:a9:cc:9b:29:ef:f8:c4:b7:2d:6a:68:d5:
d7:7c:e7:a7:28:6b:3e:32:c5:7d:0b:4b:28:05:1e:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E0:0F:7C:15:20:A8:4B:C2:D5:E6:7D:38:EB:AE:E8:F9:FB:88:5D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5088059f-2254-4daa-a68a-f5c0e8a900b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.181.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:3b:cd:a0:1b:6c:4f:ae:18:14:45:ad:b0:08:15:8e:2c:66:
32:20:b3:65:7b:6e:d7:9d:27:ae:0e:76:8a:f3:ed:23:03:81:
2e:b7:26:d6:c1:47:6f:80:67:a3:40:66:bf:09:1b:bc:fa:05:
af:7b:c3:68:0e:87:08:e8:61:d4:2f:41:1e:75:eb:c7:d0:3f:
0a:13:d7:43:7a:a1:29:36:b6:8a:91:b5:1f:25:e1:9e:62:6d:
0e:83:ce:35:f1:5d:5c:66:4b:37:3a:bf:51:d6:aa:4e:91:13:
8c:6e:b6:5a:77:e5:f4:e2:58:78:8e:5a:10:e3:91:ce:1c:9c:
47:08:1d:7d:a2:34:f5:5e:29:58:3d:4d:79:17:cd:c1:1b:47:
fb:a1:b5:53:42:fe:ca:60:7d:2a:08:34:4c:16:65:bd:15:5c:
97:0b:42:ad:7b:0c:8e:16:39:56:fa:32:3e:66:4d:ef:27:93:
0e:3b:ef:8e:2d:3f:40:5b:4a:6b:cb:50:fa:2e:1a:6c:95:40:
ba:c1:5b:9c:6f:ad:23:14:2d:bb:1b:00:6a:00:b4:1b:f9:69:
b7:ed:dc:58:8a:76:c1:9c:89:c5:e4:36:fb:a4:68:c7:4f:47:
c3:81:85:62:2b:d9:63:4b:1d:8a:97:f6:bb:18:e2:07:ab:37:
e1:26:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:05 2025 by rpki-client