Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d617f04-dfac-4e5d-9fa6-dfbbda50b164.roa
File: 5d617f04-dfac-4e5d-9fa6-dfbbda50b164.roa (raw, json)
Hash identifier: OOk+8mEtEGjOBnuVhxWpgt/ZePh/BeaalGij5szOjio=
Subject key identifier: B5:E3:00:2B:45:C0:10:D3:CB:E1:42:4B:92:16:59:23:56:AD:E5:F5
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 69D06652A364D4B9B147413BF799B5039351D686
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d617f04-dfac-4e5d-9fa6-dfbbda50b164.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.248.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d0:66:52:a3:64:d4:b9:b1:47:41:3b:f7:99:b5:03:93:51:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:5a:50:b0:86:51:f8:70:25:fa:bf:cb:1a:
5b:a6:7b:db:65:d6:45:1d:4b:8f:c4:06:16:9b:d3:
d1:1c:a1:87:d6:f2:dd:e4:84:e0:da:57:b3:b8:a0:
c5:51:e8:2d:e8:ab:03:30:8a:33:7e:85:74:13:d3:
0b:38:1c:6d:c9:14:db:e0:32:cc:5b:66:c5:71:8c:
ee:29:8a:df:11:b0:3c:cf:3a:8f:99:3a:9e:c2:54:
6b:20:b4:20:57:b0:6e:dd:4d:b4:84:ef:02:08:aa:
d0:c3:3e:db:92:37:50:7e:ed:ea:e6:15:7d:f5:b3:
7b:99:56:0e:cd:db:a3:ec:2b:d0:8d:6a:2d:d2:f6:
40:28:c5:db:34:ce:1c:40:42:68:1d:ef:e0:f6:f4:
5a:fd:35:8a:d9:d9:ef:eb:7e:55:8d:28:17:83:85:
d7:90:44:c2:1b:9f:10:88:a2:71:2d:d9:70:94:f6:
c8:0e:d4:51:ee:67:41:6d:a5:b6:1e:94:5e:5f:9c:
5d:da:aa:2e:f3:bc:a2:12:01:ae:95:28:e0:77:b1:
0c:df:93:c5:6c:27:17:97:81:a4:38:09:57:1d:7d:
9b:65:e6:a7:34:48:de:09:fe:fe:04:68:5f:45:b9:
28:4e:87:51:b6:14:30:b2:49:85:c2:c6:fa:77:b6:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:00:2B:45:C0:10:D3:CB:E1:42:4B:92:16:59:23:56:AD:E5:F5
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d617f04-dfac-4e5d-9fa6-dfbbda50b164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.248.0.0/13
Signature Algorithm: sha256WithRSAEncryption
79:fd:dc:d1:5d:9f:97:ef:7a:27:11:95:9f:b7:cf:3d:8e:8a:
13:32:82:7d:2c:9d:8b:21:28:99:20:cd:8c:27:d3:8b:25:5e:
ed:68:07:95:17:61:d6:d7:e0:08:a3:01:4e:4f:9a:c4:22:0c:
b0:c2:fd:10:04:68:03:99:c6:91:83:2b:a2:8e:56:8d:0e:7c:
a1:26:e9:98:64:cc:da:62:ad:7a:1e:d6:7a:bd:03:d6:3f:da:
6b:1b:ab:95:04:77:cb:7e:59:a3:27:43:ec:20:9a:b6:47:f3:
77:4b:87:92:ac:48:47:26:df:66:28:d6:d2:53:02:24:5c:2a:
25:dc:65:06:e3:7e:ab:4d:40:22:09:6f:18:11:37:c1:c0:20:
05:e8:65:29:b0:f6:ab:2f:0a:83:54:fc:06:dd:77:3d:3c:50:
f4:9f:3f:ea:4e:85:b5:e3:57:70:e9:09:95:54:f2:2e:fe:8f:
ff:99:a6:94:28:5e:c5:67:bb:e4:a5:d8:2c:dd:1e:10:60:19:
7c:65:34:db:6b:75:ba:b3:fe:72:7c:b4:1b:e4:1f:84:6b:f8:
19:7b:4c:20:f2:f6:89:60:01:02:b3:db:a4:7a:f8:1b:53:df:
af:ef:41:45:b3:9b:2c:b2:86:c0:9c:86:a3:50:d6:d9:fd:1d:
bf:6e:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:35 2025 by rpki-client