Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b5a2605-f846-4e41-9367-7fb56fa73e80.roa
File: 9b5a2605-f846-4e41-9367-7fb56fa73e80.roa (raw, json)
Hash identifier: fSU5a0vSItUtFvfg3navxFe9EI5gsQu/Zr0huulGQ2k=
Subject key identifier: 02:B4:AF:5A:BD:6E:E7:E6:56:9F:E2:FB:12:91:87:FC:96:3A:83:D8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 21896EECBFF607A544E7DB2DA6496E913458C718
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b5a2605-f846-4e41-9367-7fb56fa73e80.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:89:6e:ec:bf:f6:07:a5:44:e7:db:2d:a6:49:6e:91:34:58:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:e8:8e:3b:3b:b2:a7:7f:08:26:24:d7:55:
78:85:98:29:d5:a2:b5:93:46:f1:fc:d7:d2:a8:4e:
3c:b5:00:9a:26:c6:f9:f7:f9:a9:7f:59:f5:98:13:
a2:9f:39:cd:c5:24:7a:c6:44:64:6d:c4:c0:a0:25:
a2:e5:59:a2:04:f0:47:cc:a8:1a:58:5e:6c:2f:9a:
88:e9:40:6f:25:f7:a8:cd:da:5b:bc:26:eb:05:26:
54:5b:06:77:b4:e8:ed:8e:4f:d7:ce:8f:b6:51:86:
83:41:71:bf:fe:63:0f:46:28:f0:33:f3:fb:d5:97:
9f:68:28:a2:54:c2:57:94:d2:7a:5c:b3:fc:51:9c:
1b:6f:b1:12:25:4b:c1:94:9b:19:14:1f:bf:83:3a:
e3:d0:b5:55:02:d7:26:0c:12:c3:98:0a:2e:cc:23:
3e:63:9d:0c:29:6a:63:28:76:0f:d9:d4:80:ba:67:
df:1b:ae:db:15:c3:cb:fb:aa:5c:e6:5d:d3:9b:0c:
e0:40:c8:b9:ca:d4:d8:77:a9:a2:5c:64:c7:d2:6c:
e1:a3:9a:e1:a4:5f:50:ef:33:24:b2:62:a8:2d:58:
0f:e0:8b:65:e7:87:de:5e:87:fc:d9:87:72:f5:a2:
15:d0:0b:ea:0a:9e:4e:0d:99:45:ef:5d:97:3e:27:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:AF:5A:BD:6E:E7:E6:56:9F:E2:FB:12:91:87:FC:96:3A:83:D8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b5a2605-f846-4e41-9367-7fb56fa73e80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:13:7a:cf:2a:b3:11:13:d3:d3:fd:57:bd:24:3f:e3:af:7b:
56:7b:0d:0f:22:8d:37:27:70:31:11:85:2d:c3:ca:cd:ae:09:
a2:aa:cf:47:14:21:1d:37:de:bf:a3:91:45:18:94:1a:aa:5f:
79:a3:ff:28:02:93:40:50:de:d0:db:f2:a4:b6:04:6e:92:f9:
3e:97:eb:74:e7:03:6e:79:d0:19:72:98:0d:9c:be:67:c1:43:
74:b5:4b:2a:13:65:01:1a:f2:0b:99:d7:4a:36:c3:18:9f:64:
19:12:88:cc:a5:70:88:4f:99:99:23:71:48:80:65:68:dc:1e:
5f:c5:22:76:6b:d4:ff:77:6c:e0:f0:46:58:1a:f6:42:81:05:
9c:56:c3:d2:69:4d:b8:dd:5c:fd:9c:4e:0f:6f:78:89:c9:c9:
2c:76:b8:01:db:52:f6:99:2c:0b:ff:a9:06:b7:31:2f:a1:53:
1c:95:a6:c0:bc:bc:42:71:5b:8a:8f:ad:46:43:a4:38:2a:0a:
30:6e:e0:69:7c:a5:59:8b:72:13:98:c5:e6:92:58:2b:66:db:
cb:cb:3d:19:82:2e:0b:f4:0b:56:91:25:65:d8:a3:c8:ca:24:
c0:6f:58:16:f5:ff:12:ec:b2:6c:67:4b:aa:24:ac:c8:96:40:
fc:54:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:05 2025 by rpki-client