Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4098aef-42a9-4e55-b357-f5baa8fb407a.roa
File: a4098aef-42a9-4e55-b357-f5baa8fb407a.roa (raw, json)
Hash identifier: C4yRPOLzmwH4zsrnL/Q8FqQX/whiEGf0fa7LRDOOeQc=
Subject key identifier: 5B:C0:45:11:69:45:18:08:CF:E2:6A:BE:B5:FD:DA:FE:85:D7:7F:B9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 41631B121D10D726E67528348DD8DE0C749AA319
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4098aef-42a9-4e55-b357-f5baa8fb407a.roa
Signing time: Tue 04 Mar 2025 19:40:12 +0000
ROA not before: Tue 04 Mar 2025 19:40:12 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 161.188.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:63:1b:12:1d:10:d7:26:e6:75:28:34:8d:d8:de:0c:74:9a:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 4 19:40:12 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:61:39:bf:f9:aa:e3:80:38:03:98:3f:23:
64:71:77:99:8c:68:ac:6b:f7:b3:d1:53:5b:40:71:
eb:35:70:27:f7:cb:dc:b4:7a:b4:ce:5b:b3:ca:fb:
bf:7d:83:aa:0b:88:82:9c:eb:a3:7b:bd:88:90:c0:
c1:87:f2:f6:8b:d7:ee:75:c7:a4:05:8c:1c:9d:cc:
75:e2:9a:cc:95:df:86:fd:6b:14:aa:bf:e3:b4:43:
ad:26:24:ed:07:d2:9c:ae:7a:89:1f:94:53:1e:17:
ab:d9:f2:fc:94:4e:87:b8:ae:05:0d:40:51:eb:09:
00:6a:0f:9e:6a:b0:2f:64:5e:e7:09:78:a5:46:e6:
aa:3d:04:09:e2:ef:80:d3:92:cc:1e:eb:8d:fa:cd:
9b:92:7f:74:3d:68:19:36:ad:df:c4:b2:7a:cd:78:
b4:c8:a5:b3:12:01:6c:14:3a:89:d5:6d:0b:50:a2:
43:b3:11:72:a0:8f:62:7f:6a:f6:a2:96:7a:26:10:
a7:cc:3b:cf:06:1c:f2:54:50:99:1a:e3:6b:8d:b9:
b7:0a:6f:7e:31:06:7f:b0:0e:e4:f5:d6:fb:3b:ed:
a5:63:bb:41:87:71:11:e8:9e:c0:74:e9:c3:5b:ef:
a5:53:6d:41:cd:79:10:ff:97:3a:ca:63:8b:c8:b6:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C0:45:11:69:45:18:08:CF:E2:6A:BE:B5:FD:DA:FE:85:D7:7F:B9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4098aef-42a9-4e55-b357-f5baa8fb407a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.188.138.0/23
Signature Algorithm: sha256WithRSAEncryption
92:9a:d3:a1:09:e3:d5:8c:38:c4:5c:a0:33:4f:b1:74:d6:a5:
be:7d:d9:36:2f:fc:19:6f:a2:3c:90:fd:fd:33:9f:a8:32:86:
ac:3f:ab:e2:42:7c:f9:4d:34:50:37:5a:05:b6:a5:44:26:5e:
07:db:7d:f1:ad:8e:82:ec:cb:70:e9:60:63:cd:d8:ba:9e:cb:
ae:5d:c2:48:d2:e1:fc:16:62:b3:e8:8a:da:60:17:a5:4c:03:
7f:01:48:24:94:84:4c:d4:21:5d:53:6b:61:06:5b:55:b4:4f:
07:36:87:f1:84:e5:b0:ae:85:ba:0f:b0:b5:53:0f:2c:9a:31:
8f:f0:d2:31:c5:80:79:51:83:8f:89:1f:97:9e:aa:88:b2:ad:
65:00:1c:2a:85:59:88:aa:9a:74:eb:8c:95:c3:c3:6d:0a:05:
e5:09:47:75:af:5b:a0:5e:53:1c:7c:7a:11:a6:c4:47:42:8a:
e3:46:13:3e:d0:5a:66:86:fc:07:aa:7b:c9:6a:e2:51:8e:db:
9c:a4:db:a2:0a:fa:dd:6f:fd:a1:e0:32:c9:9d:47:6d:b8:38:
f4:ea:e1:22:32:50:8c:79:e3:5a:f4:e4:4e:f1:23:89:40:04:
43:fd:ae:45:17:44:17:3a:7b:0c:79:d3:af:22:a5:a5:a8:f0:
78:cc:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:59 2025 by rpki-client