Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9049f2d2-8eda-43ca-810f-56bda2bf0102.roa
File: 9049f2d2-8eda-43ca-810f-56bda2bf0102.roa (raw, json)
Hash identifier: BnnLeEjdOtaX/IdBBLF62xBb4fYfETbWuskHMUChv/c=
Subject key identifier: 18:26:6F:2C:53:EB:61:AC:2A:9E:7F:E6:61:B5:FA:92:68:3B:F4:EE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1E6BDC8D74C2E2AA8868C8C521D260B125FFDD56
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9049f2d2-8eda-43ca-810f-56bda2bf0102.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6b:dc:8d:74:c2:e2:aa:88:68:c8:c5:21:d2:60:b1:25:ff:dd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:f8:77:9a:b6:5c:2a:33:ec:a5:c1:5e:82:
17:11:4e:6a:ca:cc:01:ef:06:9d:6c:f6:f6:2c:d3:
95:50:0d:49:a5:dc:f2:fb:20:83:50:0e:df:e9:06:
24:3f:f7:da:72:8b:31:56:80:ae:39:46:06:06:ce:
73:fa:ca:0c:f9:62:1a:26:25:4d:1d:1c:ee:89:32:
88:77:48:53:21:cc:29:04:06:96:ee:21:fd:5a:08:
6b:1b:f5:d1:fb:ac:ab:84:3f:00:ba:25:bf:11:4c:
68:c1:9d:f0:ca:06:2c:fa:cd:69:25:43:fd:3d:cb:
ad:9d:44:f7:78:a1:f2:55:37:41:2a:77:47:25:7f:
9c:bd:b2:aa:05:b0:46:a3:be:83:43:4b:bf:ce:db:
7f:cb:98:2c:0e:0a:b7:44:3c:7a:25:6c:cf:60:9b:
e0:6d:b0:52:4c:c1:89:89:e8:6c:3f:f6:e5:6a:5e:
50:fc:a5:56:2a:e3:96:40:02:61:97:f5:38:61:50:
47:50:63:f2:5d:bf:22:7f:3f:3d:b0:e9:1a:cb:2c:
41:28:83:ca:7c:01:e9:64:35:b7:a4:1f:42:68:b7:
d7:c1:5a:4b:48:97:e7:50:fa:61:f9:2f:63:fa:0f:
05:b8:6e:34:59:54:15:8e:9d:7e:bc:e6:59:b1:4f:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:6F:2C:53:EB:61:AC:2A:9E:7F:E6:61:B5:FA:92:68:3B:F4:EE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9049f2d2-8eda-43ca-810f-56bda2bf0102.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
b1:a9:0b:35:df:3b:76:b3:c6:3d:88:24:a5:34:cc:7f:aa:79:
25:fd:2b:3f:35:5e:c5:25:fe:0d:ea:9b:00:ce:08:6e:80:89:
c0:d0:2d:11:7d:b1:24:e6:a0:4b:f3:9d:5b:21:53:89:be:80:
dc:a3:2a:f1:66:0c:c7:78:c7:0e:a1:5a:46:5b:ed:36:42:f2:
07:59:bd:0d:0b:95:15:49:82:9b:2e:c8:59:31:00:65:14:db:
de:01:b2:1b:1f:8b:6a:b3:d1:fc:ae:b2:e1:a5:d5:40:03:a7:
d3:85:41:0b:fd:5c:87:70:93:72:be:2b:80:86:2b:1e:af:c5:
a7:2c:3d:ea:e4:e3:e7:ee:fe:4f:91:96:45:fb:ab:bd:ab:8b:
a0:86:ba:a1:6c:85:a9:20:52:9b:66:6f:26:3c:6b:37:c9:45:
fa:12:35:75:89:fe:80:5d:ef:21:58:ca:f3:40:37:7c:ed:e5:
08:71:91:18:df:0b:1f:72:58:a0:5f:ed:14:e6:b7:5b:54:24:
ed:32:69:b8:cb:58:ef:d9:55:5a:f1:f7:16:5d:54:b3:ad:c7:
37:14:17:15:46:a0:16:c1:7a:20:69:3e:a6:fb:d0:09:07:5e:
d3:75:29:60:d9:4b:69:bf:ea:74:13:70:d1:7d:52:e7:22:2e:
07:e2:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:21 2025 by rpki-client