Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa
File: ac4b4084-36eb-4ac1-b740-50f184325fd8.roa (raw, json)
Hash identifier: uKJ4qdPN9rF8tUEgPhazO6l6Fji/y3pP1B+HBpYKE8w=
Subject key identifier: CB:14:13:DB:F5:64:6B:C3:B0:03:A9:93:11:F0:D6:C6:1A:AD:35:C2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6F3D4D4E1584295FF8ECE5C95BF123BF5CC0C4D5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa
Signing time: Tue 04 Mar 2025 20:40:09 +0000
ROA not before: Tue 04 Mar 2025 20:40:09 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3d:4d:4e:15:84:29:5f:f8:ec:e5:c9:5b:f1:23:bf:5c:c0:c4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 4 20:40:09 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:4f:2b:5c:68:72:80:21:c8:a2:25:74:93:
06:59:b6:ea:11:f5:86:1a:1a:3d:f2:5e:87:67:e0:
9c:0b:b9:90:fc:2e:91:4b:fc:cc:33:8c:bc:3c:a5:
ec:ff:af:85:27:81:62:49:39:15:7e:13:d8:7d:bd:
8f:29:51:7e:f9:26:ce:f3:16:9d:85:7f:bd:f3:60:
13:f9:21:0e:4f:88:03:7a:8c:eb:97:45:66:44:df:
a5:db:cd:ed:a9:aa:5e:83:e2:91:37:ff:f3:58:f7:
d5:d3:6b:be:4e:57:51:49:c6:89:e4:01:e2:ae:ac:
b4:14:31:9a:2e:98:7f:ae:cd:6f:4e:fc:40:ec:76:
c6:46:c7:aa:46:ed:23:56:6f:7b:9a:95:85:ef:97:
75:fc:c5:a8:f6:a5:bb:8f:13:83:33:50:48:ff:13:
dc:08:77:12:ff:24:79:58:e1:80:9f:50:2f:b3:e3:
c8:a6:e0:7d:3b:8d:74:26:ea:1c:8d:0b:92:ea:d0:
ca:1b:be:42:14:ea:56:cd:ab:28:bd:90:d2:6f:33:
01:ed:a6:cb:a4:03:9f:25:97:df:18:21:8c:a5:95:
b0:9d:28:48:22:dd:df:e2:e2:5e:36:52:00:28:63:
5c:fb:ef:12:c4:13:aa:a3:48:cc:a1:1e:f0:90:c0:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:13:DB:F5:64:6B:C3:B0:03:A9:93:11:F0:D6:C6:1A:AD:35:C2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:66:a6:1e:a6:c7:d2:1e:a0:13:a7:37:4b:61:fb:91:09:93:
69:5a:57:ff:0f:26:c7:28:fb:e9:b6:53:2b:3a:35:fe:d7:8b:
55:4e:a9:6e:a7:92:fe:a8:a5:d1:bb:df:98:ef:05:bf:15:74:
bb:93:9c:1b:fe:85:99:0a:9b:c9:14:a7:f6:6d:a5:d7:69:74:
34:33:24:c7:f6:30:6f:9e:58:58:73:8d:26:ea:81:03:03:f5:
21:b1:75:f4:a3:f3:c5:55:f5:f3:d4:9a:2c:f6:f1:c9:2f:16:
9f:2d:db:79:2e:bc:d5:39:1f:f6:1d:07:b6:84:16:62:65:ec:
ec:87:e7:15:97:0f:b0:ae:4b:2d:f0:57:b2:9d:b0:63:68:da:
9a:e6:af:84:3a:44:69:05:ec:20:ce:fa:cf:59:95:a4:6d:c6:
b0:50:04:45:52:34:14:58:75:86:1a:97:ab:69:d4:f9:71:90:
9a:85:9a:b7:84:f6:ed:52:44:c4:26:fe:2f:c5:f9:0e:d6:75:
44:f6:60:76:ec:69:50:21:c2:ef:9a:2d:30:74:77:c8:30:62:
b6:af:de:9a:d6:49:5b:04:df:34:73:94:be:2f:39:11:1a:f1:
33:5e:17:5c:ad:97:40:c9:7e:23:de:b0:c7:74:a9:27:9e:a7:
2c:dc:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:16 2025 by rpki-client