Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7b7ca5c-41b1-41cf-add5-2bfb7c1678bc.roa
File: b7b7ca5c-41b1-41cf-add5-2bfb7c1678bc.roa (raw, json)
Hash identifier: +lTFgadw4B6H4rygRblueMUlnWbFjATJyOPA/9TVRfA=
Subject key identifier: F1:51:3F:F2:B1:3D:A2:D1:00:14:26:08:61:EB:67:FA:09:8E:6F:AC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0225CC7CD1687BB3FD4701309C0BD65E80E8F608
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7b7ca5c-41b1-41cf-add5-2bfb7c1678bc.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:25:cc:7c:d1:68:7b:b3:fd:47:01:30:9c:0b:d6:5e:80:e8:f6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:e5:69:e1:28:87:dd:27:1e:20:4a:7a:1f:
0f:23:a1:1b:24:6a:cd:a8:96:64:91:db:e8:3d:a3:
27:f6:74:4a:3d:f3:cd:06:3d:50:04:9a:0c:fc:52:
13:16:37:01:14:33:fd:a8:75:7c:d7:2e:ac:bb:78:
fa:27:2b:6e:a4:5c:fe:04:f6:b8:27:c2:52:a5:c5:
7c:f3:90:a8:ab:30:ce:d8:ef:f8:00:c0:77:8e:c9:
1e:f1:2e:5b:13:8a:b2:bb:94:7b:9b:13:cc:f5:82:
f1:e5:81:2d:f2:47:d0:12:da:57:70:bb:54:d8:a1:
2e:bd:eb:7b:d6:ca:1b:97:19:1c:39:2a:d5:ae:be:
a1:b0:80:2a:dc:82:10:be:b3:82:8f:0f:aa:8b:4c:
eb:5c:20:8b:9d:61:50:bb:b6:0a:3d:49:83:5f:6a:
a6:9f:11:7d:49:bd:85:21:15:3f:28:fc:de:1a:ef:
6f:1b:81:c7:f0:86:07:c9:ec:e8:be:78:32:09:58:
2f:b6:a8:fc:60:35:d3:06:a7:0a:02:5d:1b:6d:40:
74:de:85:2c:e1:63:7a:50:59:a2:e8:85:39:58:5b:
b9:c5:25:76:b0:3a:0a:4f:4c:0e:75:46:16:31:70:
cf:98:87:46:df:b0:5f:a5:ec:a7:84:de:c0:df:d3:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:3F:F2:B1:3D:A2:D1:00:14:26:08:61:EB:67:FA:09:8E:6F:AC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7b7ca5c-41b1-41cf-add5-2bfb7c1678bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:c0:87:36:f2:fa:50:83:1e:3b:96:ee:f1:25:bb:63:87:ce:
ef:a2:45:8a:bc:ed:d1:66:d6:6e:b3:14:a6:93:c7:72:d4:20:
71:73:e3:a4:2a:81:96:ef:ad:e0:d5:b5:e6:5b:01:fd:76:8a:
51:97:27:f8:f9:ec:f3:de:4c:c1:a0:b4:70:42:85:ce:43:9f:
29:a9:b3:88:ef:bc:94:eb:68:55:8c:b6:cb:1a:52:ef:6e:01:
cd:9e:46:8e:41:f4:a2:68:1d:9f:d9:d9:91:b4:6e:f6:58:f5:
39:70:d8:5f:01:57:83:ba:3b:92:70:1b:64:3c:9e:2a:72:ab:
85:59:87:1d:73:24:a2:a8:4f:5b:2d:3e:83:c2:26:57:e6:3b:
bb:bb:6b:dd:23:e2:b2:ac:8a:87:4b:08:1e:d5:e1:4a:6e:96:
11:9d:63:14:6c:bf:4e:a3:bb:48:4d:ec:58:78:97:6f:1f:0a:
c4:07:58:02:19:55:dd:0d:b0:ae:f0:ee:9f:c7:61:65:25:5e:
c7:a8:5b:71:a6:d9:1b:1c:ac:35:7b:80:25:13:64:4d:2e:27:
d2:16:97:89:8e:12:56:e7:70:fa:47:e8:11:ca:db:58:5c:07:
18:8f:2b:d4:2f:9a:29:7c:ef:78:32:fb:ca:b6:4c:04:04:a8:
d4:8c:45:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:46 2025 by rpki-client