Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70396d01-fb0a-436d-ab1b-a44065398c1c.roa
File: 70396d01-fb0a-436d-ab1b-a44065398c1c.roa (raw, json)
Hash identifier: zWyRFGVo8K/7O7CCRa2bKiYuT4GBj9FNaP0p5MO170Y=
Subject key identifier: AE:1C:3D:F2:EC:8C:18:BB:E2:BB:A4:7A:16:08:9C:10:DE:63:E2:94
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 35C6075311D7583EDC0F5CA6A34F0F2889A5D650
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70396d01-fb0a-436d-ab1b-a44065398c1c.roa
Signing time: Fri 07 Mar 2025 00:10:57 +0000
ROA not before: Fri 07 Mar 2025 00:10:57 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.215.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c6:07:53:11:d7:58:3e:dc:0f:5c:a6:a3:4f:0f:28:89:a5:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 7 00:10:57 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:b5:b6:11:7c:03:e5:4e:8b:a6:ef:83:ec:
6e:5f:e8:8c:e9:38:ab:20:24:98:0f:a8:47:c0:4f:
31:b1:45:51:44:d3:22:a8:a8:0b:68:85:0c:d5:0a:
19:73:62:26:06:eb:65:f0:60:a0:fc:12:63:47:11:
f1:00:40:61:f3:d0:cb:2e:96:8c:b3:7f:e2:ef:53:
bb:58:cb:dc:af:5d:7a:30:44:2d:6e:97:03:c9:fd:
73:84:49:92:a8:a2:e6:18:eb:21:ba:a5:41:bc:d7:
8a:8c:51:45:b7:c6:07:b1:15:94:79:72:60:cb:f0:
cf:c9:d6:c3:de:db:a5:d4:ed:fc:c8:83:53:ee:05:
13:99:42:ac:3f:e5:40:c6:5a:5c:bf:c0:6f:13:58:
25:90:de:9e:0d:55:a7:dc:9b:d0:fb:fe:56:9b:79:
8a:41:46:d3:94:87:38:c0:69:05:f2:44:31:81:37:
ad:d2:ad:30:dc:1b:aa:54:2d:75:d4:db:ef:23:9c:
97:b6:d8:93:67:2d:44:49:0f:d8:72:b1:93:41:9a:
59:ec:e6:d1:f9:89:70:7c:ac:26:57:27:3a:02:d1:
cb:15:9c:30:69:53:16:a6:14:27:ae:2f:03:fe:75:
98:7b:b6:5f:78:45:95:be:cf:35:50:a0:01:25:3d:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1C:3D:F2:EC:8C:18:BB:E2:BB:A4:7A:16:08:9C:10:DE:63:E2:94
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70396d01-fb0a-436d-ab1b-a44065398c1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.215.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:ff:7b:c4:f2:e0:5c:77:3f:28:aa:22:22:69:b9:68:3b:96:
a2:92:49:a9:6e:27:15:08:36:8d:3c:4e:a3:79:85:f7:2e:94:
af:c0:fe:1e:87:12:0d:86:be:7c:0f:cf:83:d0:84:5b:44:dd:
0e:f5:c6:59:da:80:67:ac:d4:8a:56:32:a9:a6:c6:c2:c1:30:
b5:e8:1a:d7:9a:14:06:40:d8:43:1b:08:66:43:fb:2d:5a:0a:
fe:20:91:62:9d:c4:91:8f:67:1c:07:27:17:ee:d4:31:ab:1c:
9a:4e:88:79:ae:b0:91:10:b7:99:0c:28:e2:c5:15:d2:21:42:
08:8c:09:7a:14:26:e0:25:00:7a:4b:09:4a:75:82:e5:ad:62:
71:61:5e:9e:dc:31:e5:b3:55:4a:12:04:be:6e:a3:8b:c5:a6:
68:f1:08:d2:21:e2:22:e1:30:3e:b9:73:55:f9:a4:45:e1:41:
ac:b7:2d:b2:66:9d:2d:59:ab:63:b7:eb:eb:ee:8b:14:c9:b1:
04:4e:c6:77:57:d5:67:c6:96:94:d5:fe:2f:f9:95:f1:ec:6f:
b0:d5:1b:f6:fe:39:80:0d:64:69:37:5c:83:d7:f3:0c:73:8f:
ca:71:8a:88:c1:84:ec:aa:24:ea:f3:67:dd:01:06:58:57:7f:
ef:ff:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:38 2025 by rpki-client