Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77788983-2b54-48a5-9e92-54652d2fea73.roa
File: 77788983-2b54-48a5-9e92-54652d2fea73.roa (raw, json)
Hash identifier: 7C4lvSeMllJlFIxIZjwi86bT7X4MzbTcSHZqTiX4qxg=
Subject key identifier: 50:79:40:E3:C8:68:9C:B2:2E:89:CB:A1:16:4E:DC:5E:DC:00:8A:73
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4D1D8F4BC071F99D4DEC086B41E8557B2D5B24B5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77788983-2b54-48a5-9e92-54652d2fea73.roa
Signing time: Fri 07 Mar 2025 00:20:23 +0000
ROA not before: Fri 07 Mar 2025 00:20:23 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 6167
IP address blocks: 155.146.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1d:8f:4b:c0:71:f9:9d:4d:ec:08:6b:41:e8:55:7b:2d:5b:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 7 00:20:23 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:58:ae:b0:05:bb:1a:92:40:d0:f7:15:81:
d7:61:e7:d2:69:5a:1e:9f:76:4a:5e:57:22:2d:dc:
fe:70:b1:6c:b1:cd:3e:1b:57:cf:a4:f3:da:6b:c3:
a7:39:cf:26:bd:12:5c:03:84:c8:bc:35:bb:17:a2:
d9:db:78:fe:2b:11:31:db:2c:7e:9e:2f:52:d2:0c:
a5:a2:d6:ad:38:6e:e0:15:6f:42:71:91:8f:a8:9a:
79:e1:57:b0:e3:f7:23:c5:5d:f2:ce:f1:a9:16:98:
a3:0a:05:85:01:54:b5:31:f3:e5:f6:ba:59:1a:c1:
49:ad:cc:e8:52:c4:4a:af:8c:44:b7:70:0b:e2:74:
76:b0:c2:2e:2c:16:6f:69:2d:86:db:c9:24:f0:07:
4f:03:99:d8:36:97:8c:f7:f2:40:cc:3a:c0:8b:32:
79:30:ba:e2:37:96:6f:c1:86:67:f8:4e:67:d0:95:
0d:50:cb:29:15:c6:43:8a:8d:84:be:ed:2a:62:3d:
c6:8a:c6:d1:41:de:38:30:1a:4a:04:0b:54:8a:53:
4d:61:cb:08:f4:d9:d2:e0:4f:84:81:86:44:14:70:
91:90:2d:ea:7d:b0:7a:9e:95:a0:2b:43:61:09:50:
95:49:bd:d8:20:8b:7d:f1:56:bf:47:5c:ba:89:c1:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:79:40:E3:C8:68:9C:B2:2E:89:CB:A1:16:4E:DC:5E:DC:00:8A:73
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77788983-2b54-48a5-9e92-54652d2fea73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.146.160.0/20
Signature Algorithm: sha256WithRSAEncryption
24:96:76:b1:e0:f6:70:39:8f:be:72:32:12:65:60:58:cc:89:
f2:81:7d:16:d4:16:cc:b4:ed:35:f9:ab:a3:55:71:ad:e6:52:
d5:d8:71:5b:55:c3:73:ce:a5:68:f5:ac:d2:6b:79:c3:60:79:
06:d6:1e:6c:81:df:80:79:98:76:cc:f0:70:5d:fc:af:90:b1:
0d:45:ae:5b:96:8d:f8:b2:e2:49:fa:ee:8d:92:79:b1:cd:23:
63:f1:46:78:1d:49:5b:f4:15:7d:b5:98:e8:0d:9d:60:ce:49:
da:36:6a:cc:a9:ed:d6:cc:0f:2f:d3:4b:a1:7c:41:3d:3d:5d:
fe:3e:fa:4e:5f:88:5b:8a:09:c8:10:d4:4f:a8:c4:e2:cb:0c:
3b:78:64:6b:41:05:62:eb:6d:c1:74:9f:8b:e5:d0:36:02:4e:
56:e1:19:20:e3:4d:27:5b:dd:93:97:da:42:5d:11:de:14:95:
6a:12:20:cb:30:79:08:e6:9f:f1:8b:34:28:89:89:b7:7d:ce:
0a:b1:8b:53:5c:e2:c5:12:5e:ea:3d:b5:9f:7f:77:f5:e3:38:
38:59:d9:a5:6f:6a:11:06:5a:8f:d8:ed:1d:90:a4:b0:45:b4:
92:00:bd:b9:f7:b1:ac:53:40:48:3d:1b:aa:4d:6a:5a:aa:6b:
5f:e0:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:39 2025 by rpki-client