Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8920772d-dab3-4e0d-b8a3-2c81b478d07c.roa
File: 8920772d-dab3-4e0d-b8a3-2c81b478d07c.roa (raw, json)
Hash identifier: 3Ln/TJrhmS+u1dQfENUM6RZjpw0+xhh2UNY2CGRvlRk=
Subject key identifier: D8:18:02:8D:23:75:CC:83:32:C4:9A:5C:D1:F8:03:D4:5F:74:5E:69
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3BB125B333944B96BEFB0ADFC421A3C507FC0BF8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8920772d-dab3-4e0d-b8a3-2c81b478d07c.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.60.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b1:25:b3:33:94:4b:96:be:fb:0a:df:c4:21:a3:c5:07:fc:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:a4:d0:58:af:8b:34:19:e2:38:e0:32:36:
d4:eb:15:64:e8:c0:89:60:34:7c:6e:31:a7:3e:b5:
73:c8:29:99:56:3b:b1:87:86:48:ce:d2:f9:76:96:
8d:f2:b2:a5:b0:7f:e0:12:3d:24:64:13:46:7a:43:
a8:27:ad:5d:46:12:d5:5c:c3:4d:8e:b1:5f:da:ff:
47:35:57:f3:fa:d2:30:e2:58:2e:e7:06:70:b0:9d:
3a:70:be:24:94:fa:82:bb:13:ac:92:ab:04:a6:c6:
42:70:40:aa:68:62:f8:3d:ab:e4:68:ad:5d:23:00:
71:b6:ab:24:5f:d0:03:c6:60:d1:fe:33:cd:f1:3d:
50:ea:94:25:c7:8f:0a:55:6a:e6:82:f7:6d:a9:93:
4c:04:7f:c0:e3:e7:45:91:8c:c7:e2:9c:e3:d1:29:
bd:b5:6d:a7:d1:00:d3:55:81:4e:17:eb:ef:a8:5b:
b4:3c:8c:fc:02:81:92:54:82:0f:5e:e1:97:ab:06:
b1:4f:38:2a:ce:2a:31:44:16:0e:4b:66:8e:0d:45:
50:b7:b4:3f:9f:4c:95:ff:95:8e:81:5e:11:9d:8e:
4a:77:7b:ab:c2:2f:58:cc:10:e4:d0:40:8b:75:66:
a0:ce:2f:9a:17:19:74:c6:8c:11:82:5e:08:c6:60:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:18:02:8D:23:75:CC:83:32:C4:9A:5C:D1:F8:03:D4:5F:74:5E:69
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8920772d-dab3-4e0d-b8a3-2c81b478d07c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.60.0.0/15
Signature Algorithm: sha256WithRSAEncryption
54:98:eb:88:42:2c:68:66:f7:f9:20:d9:fc:f3:35:9b:9f:a5:
29:64:db:38:d2:71:c2:ea:94:73:22:f7:a2:64:9a:47:84:53:
38:52:cc:a2:1f:94:80:21:d5:9b:30:cd:45:c8:e9:41:33:27:
41:eb:6b:34:fb:bf:48:12:f4:4d:91:b9:0b:0e:d5:df:3f:1f:
63:9b:b0:15:71:b5:52:13:b3:ee:db:fd:56:cf:a1:32:a1:8d:
8c:74:97:e4:74:5b:a8:16:cf:a7:e8:c9:fb:01:ea:91:08:54:
45:42:03:5b:55:ed:43:9b:35:f6:8a:2f:52:2e:02:fa:e1:2b:
88:d9:fc:ea:55:43:0f:63:27:e7:59:a3:03:ac:a2:76:9c:ee:
73:bc:45:fe:9a:c8:84:a7:47:37:b0:0e:df:dd:aa:2b:34:50:
ca:bf:7c:d0:69:96:63:88:b5:b3:84:88:49:be:03:43:ad:69:
df:fb:98:12:bf:78:59:47:ec:d2:17:86:1d:48:48:69:8d:63:
f8:d6:02:a5:f4:8c:49:a1:5c:35:8b:85:50:b6:2c:1d:82:f0:
fc:7c:36:39:89:0b:c3:75:78:c0:92:5e:ad:92:5d:95:40:f8:
3f:e9:ed:25:d0:05:45:eb:3c:ff:a4:6a:ff:a9:90:72:9f:71:
af:da:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:04 2025 by rpki-client