Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99789027-81d0-4a3f-a3c0-0ea4c657178f.roa
File: 99789027-81d0-4a3f-a3c0-0ea4c657178f.roa (raw, json)
Hash identifier: 2E1xafBzPv2tTbcEKw1pFUv/JaUsFLZnvTfDPAP48H8=
Subject key identifier: 71:BE:EE:70:52:72:8F:A4:F4:6F:E3:03:E7:B6:8B:5B:EE:67:42:7B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0BA648BC97D2D7B8883AB33D230B8B1F8E9FB104
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99789027-81d0-4a3f-a3c0-0ea4c657178f.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a6:48:bc:97:d2:d7:b8:88:3a:b3:3d:23:0b:8b:1f:8e:9f:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a4:72:96:c7:5e:1f:a9:31:1a:a5:f5:ea:7e:
0e:91:f4:c6:00:4c:35:04:f9:56:5b:e1:57:1e:e3:
df:6c:5f:31:d8:4f:93:cf:f1:af:6d:94:c5:84:7e:
bb:5b:74:c5:3c:9d:14:08:7c:75:81:8d:6a:1c:57:
37:cb:69:2e:2d:b6:e4:95:30:74:69:e3:c1:02:2b:
69:58:b9:76:43:67:34:c3:b0:1f:46:fa:7c:0a:08:
9e:fc:3f:27:96:aa:9c:18:b1:18:eb:94:68:ca:33:
d5:af:63:f1:cc:32:c5:ef:cd:b0:7a:48:51:62:52:
98:01:74:25:4f:e2:ad:cf:42:a5:f7:01:d5:42:2b:
65:c9:b6:7b:c5:d8:73:2a:26:02:dc:2c:16:8d:a8:
15:b3:31:66:c2:e2:b2:38:5b:67:c1:e9:c3:42:f4:
75:79:68:2d:88:12:b7:0b:c9:d8:9e:b7:88:e2:89:
7c:8b:44:4b:89:f5:bb:8e:f5:62:0d:72:cd:ff:e2:
cd:2a:8c:88:a9:71:8e:03:41:45:5f:24:91:88:f3:
ca:30:5c:b8:39:40:ec:73:28:a5:48:33:e4:18:50:
2c:86:bf:2f:36:c1:93:2f:d8:d4:92:8c:a2:19:53:
39:d1:ec:60:b7:c3:a5:71:6f:20:2c:b9:43:c4:6c:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:EE:70:52:72:8F:A4:F4:6F:E3:03:E7:B6:8B:5B:EE:67:42:7B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99789027-81d0-4a3f-a3c0-0ea4c657178f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.140.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:c4:b9:9f:4d:f8:53:e6:0b:b8:8e:78:4e:65:9e:04:bc:c7:
87:70:f5:4a:ce:b2:7b:ec:d8:e7:5e:ad:ab:94:e4:02:e6:2a:
26:fe:4a:db:15:0e:04:ed:87:04:71:c9:97:48:bc:b2:49:68:
b5:65:23:28:3b:04:88:11:d9:a7:a4:87:5c:6c:2f:d3:eb:54:
f1:a4:12:86:d2:bf:54:0f:30:7d:d2:fc:81:f6:80:a1:52:2d:
86:46:68:5a:1f:eb:c9:82:9c:78:f9:b0:81:a4:0b:6e:88:03:
75:5e:ee:a3:96:64:ab:f5:a2:48:1a:02:65:81:5b:06:43:6e:
41:86:cb:bb:89:b7:d6:b2:47:f0:7d:df:de:3d:97:08:10:44:
cd:8c:3b:2a:50:df:bf:58:62:a6:6b:94:c7:b3:46:04:90:3d:
89:3d:ca:de:10:bf:4b:e2:48:83:ca:17:1c:dc:2a:ed:b2:fa:
0f:ab:8e:75:dc:af:9c:d7:48:49:68:90:99:8c:0f:9a:de:1a:
6e:3f:66:ec:4c:fb:8f:cd:9a:cb:52:a6:0b:4f:df:06:c7:67:
e0:6e:7c:64:59:8b:62:9a:6e:61:2d:6b:a7:27:e6:89:57:a7:
b2:d2:54:56:f7:ec:cf:83:03:cf:5b:a8:c2:26:c6:bf:1f:7b:
0c:b4:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:04 2025 by rpki-client