Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9183ec09-3313-4e7e-b3aa-c13d8508248b.roa
File: 9183ec09-3313-4e7e-b3aa-c13d8508248b.roa (raw, json)
Hash identifier: GmvxVnVfMpfukGEsoMgzVArO0ho6YV0j4XdMzolQSAY=
Subject key identifier: 09:81:CA:48:FB:BA:82:80:DD:DE:41:D1:8B:FC:B7:1D:77:B4:99:2F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2AB3B6678FF81CF4DB9B7516EED9792119DBB05B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9183ec09-3313-4e7e-b3aa-c13d8508248b.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 13.200.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b3:b6:67:8f:f8:1c:f4:db:9b:75:16:ee:d9:79:21:19:db:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:92:20:bc:70:6e:ee:20:29:56:f6:34:fb:
8f:65:19:30:23:17:5e:d9:1a:4a:df:46:1b:c6:92:
04:dc:e8:87:42:2b:a4:6e:9b:93:ee:2c:84:47:18:
c7:4d:e8:26:cc:39:de:3e:80:dc:e8:d1:48:7b:26:
c1:f7:a4:70:08:64:37:72:c5:02:4e:28:88:f2:d4:
8c:5a:3d:ee:87:81:ca:ce:f2:ff:f9:d7:c7:8b:10:
57:5b:2c:a9:ff:bd:61:68:01:0b:b2:44:88:19:95:
8b:2a:85:8c:e3:1e:0a:64:01:65:94:43:02:e8:a0:
73:f0:cb:1f:e9:33:3f:fe:a3:19:17:21:04:72:09:
e4:e1:c4:3e:7f:5f:1c:f7:97:37:b2:0a:28:92:4d:
76:7d:c2:f6:0f:4c:64:66:bc:1a:27:b7:5f:37:82:
7e:16:d9:c0:96:1c:31:8a:36:ee:28:38:d1:67:24:
f8:94:da:4b:26:4d:4a:72:8e:22:28:c0:a0:18:30:
2f:ed:2f:0b:4b:b0:fd:4a:9b:db:35:59:1d:a8:f3:
5c:55:ba:8e:af:5e:cc:b1:82:65:af:1e:de:fd:9f:
01:c5:c3:61:9e:7c:38:5a:1b:e5:6f:61:87:bf:84:
79:ad:ae:b5:6a:c3:2d:ac:f4:b3:13:d1:45:37:47:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:CA:48:FB:BA:82:80:DD:DE:41:D1:8B:FC:B7:1D:77:B4:99:2F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9183ec09-3313-4e7e-b3aa-c13d8508248b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.200.0.0/13
Signature Algorithm: sha256WithRSAEncryption
7a:e6:ef:39:ec:04:ce:39:00:f7:bf:a1:d0:8d:ee:85:9c:0a:
3f:78:a8:d1:9a:fa:93:69:96:22:7c:75:18:79:81:9c:21:a3:
86:91:64:ec:30:43:df:ea:81:05:76:c7:46:76:4d:bf:19:a1:
88:3e:8a:1a:74:42:df:ec:fc:ef:c8:45:a0:45:36:2d:16:7b:
d5:34:eb:72:b7:bd:01:0e:89:2a:81:8f:fa:12:76:d2:29:c8:
35:21:96:5d:85:ff:4b:70:3a:37:03:25:58:a9:c0:ce:7f:8d:
03:6c:73:af:0a:07:87:a0:ac:28:e9:da:ed:05:b1:78:40:61:
f8:48:d7:65:c4:e8:74:aa:a2:dc:dd:17:0f:e6:d2:9f:21:45:
8e:e6:f7:59:1e:85:73:98:05:0b:24:6d:24:44:f7:84:22:6c:
a6:f4:00:07:3c:a3:d7:6f:08:75:50:d2:5f:74:4e:fd:76:e0:
53:03:b6:e9:0a:85:4d:73:63:74:a6:6f:20:a5:4e:6f:cf:49:
d2:67:6f:dd:27:a9:bc:df:ff:61:5e:7f:c7:1d:66:a2:f9:dc:
28:d5:8d:e9:de:a1:4c:58:39:3a:0d:cd:d5:b7:85:5e:01:9d:
b0:c1:c4:35:7f:4d:d0:6f:5e:7f:9b:ea:12:ee:d2:9f:42:9c:
de:af:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:06 2025 by rpki-client