Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3bcc856-b15e-4bfc-93fc-730c7df0a9cf.roa
File: b3bcc856-b15e-4bfc-93fc-730c7df0a9cf.roa (raw, json)
Hash identifier: RbU4lUDtykvKehGi1rrKSKLdTqyOFn9Kooco4Ge2Wc8=
Subject key identifier: A5:58:FB:08:CA:3B:9D:72:D5:E0:D8:57:5E:49:1F:5C:C2:2C:46:A7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 227A06D3EEDD664079468203CE7A0EBE6C19AFD3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3bcc856-b15e-4bfc-93fc-730c7df0a9cf.roa
Signing time: Wed 11 Dec 2024 00:00:00 +0000
ROA not before: Wed 11 Dec 2024 00:00:00 +0000
ROA not after: Wed 15 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7a:06:d3:ee:dd:66:40:79:46:82:03:ce:7a:0e:be:6c:19:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 11 00:00:00 2024 GMT
Not After : Jan 15 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:21:75:8d:0a:f4:c9:aa:85:70:71:72:c2:
9b:51:c6:2f:35:c0:5f:2b:b3:a3:32:c0:4a:a2:15:
9c:0d:8f:00:eb:83:1c:7a:3f:6f:78:d4:f5:53:1f:
56:12:2e:19:1e:37:95:a5:0e:f7:82:ce:91:1c:4f:
5e:c4:f9:e0:5f:ff:fa:f8:8d:fd:4b:68:24:32:f2:
12:ae:d3:d1:29:da:5a:60:8c:e6:7c:99:7f:df:f9:
f0:41:d2:ad:9b:a6:9b:02:84:c1:bb:24:bd:67:eb:
a1:c6:34:5a:e3:0b:a6:8c:d0:b3:32:73:54:85:56:
c0:72:f2:7d:cb:f9:a4:01:27:2b:7f:e9:68:8a:89:
1a:fc:a8:f2:bf:df:71:f9:a2:21:b9:db:cb:2f:db:
47:25:6b:af:b2:04:6e:54:4a:22:39:ab:6d:7f:f0:
a5:c3:95:ad:0e:5a:c5:65:92:88:b0:bf:8b:e9:41:
38:98:81:0f:2b:1e:25:be:7f:bb:50:67:26:7e:ab:
8b:72:d1:ee:74:80:1d:74:04:b9:f6:2e:3f:55:b9:
7c:e6:f2:14:38:81:d9:ab:10:c8:9e:17:24:ab:9b:
20:41:63:92:49:2d:82:ed:43:04:61:e2:bf:d5:d6:
cf:76:d0:f2:26:1a:a4:26:41:4d:7d:d0:ab:90:52:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:58:FB:08:CA:3B:9D:72:D5:E0:D8:57:5E:49:1F:5C:C2:2C:46:A7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3bcc856-b15e-4bfc-93fc-730c7df0a9cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
43:5b:c1:c8:7f:d1:1c:6e:b6:61:8e:42:f9:ef:0c:ea:5a:a6:
74:4e:01:50:2f:67:11:c2:43:70:22:dd:da:a2:a7:70:d6:04:
f3:d5:0d:7c:45:4e:a6:5d:25:60:35:fc:ca:4e:94:1c:37:22:
85:44:9c:03:74:3f:bd:ed:4c:5c:70:bb:16:c6:4b:de:26:22:
e8:63:09:b9:ee:f5:67:1a:14:4d:86:77:bf:06:02:7b:82:96:
e1:3c:70:5a:bc:4e:bf:ff:d2:dd:6c:cf:0b:36:18:5d:33:db:
ac:01:4f:97:6d:f3:05:cb:54:ba:78:d6:5c:13:19:48:df:a9:
74:e3:a6:69:ae:17:86:e1:54:6f:c0:d8:12:17:5e:15:f3:44:
ba:c1:b5:4b:8a:3f:76:8a:f7:31:e4:6e:e4:d1:b0:18:a3:f0:
1b:14:9f:5d:61:88:15:63:c8:f2:8a:20:17:c3:05:52:24:51:
51:cc:b7:60:04:7c:a9:eb:7a:a6:8f:0d:e5:12:be:04:68:14:
b5:8c:cd:ac:17:01:de:34:ed:d5:30:f9:19:c4:43:95:a5:b0:
43:5b:35:93:57:14:d4:2a:14:29:eb:50:95:c9:c8:be:1a:32:
1a:82:b1:c1:3b:d4:e3:b4:e5:cd:74:95:fd:c9:46:bb:68:a9:
31:17:0b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:41 2025 by rpki-client