Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c55e222c-21f7-4fb1-ac9a-57949f3e5911.roa
File: c55e222c-21f7-4fb1-ac9a-57949f3e5911.roa (raw, json)
Hash identifier: /vn7v5hk1qZ7iPv2Va9fEw2t5mmA+pdOBAUN1t4rb/k=
Subject key identifier: 43:55:04:83:F9:35:AB:A1:DE:4D:B9:4B:78:FC:3C:FC:BD:5B:73:A9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4B6624A82C0E35F738DEBCB63C4E92ACF18C552E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c55e222c-21f7-4fb1-ac9a-57949f3e5911.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.93.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:66:24:a8:2c:0e:35:f7:38:de:bc:b6:3c:4e:92:ac:f1:8c:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:93:2a:1c:0a:f7:e8:30:a2:d1:4e:30:71:
ea:50:0b:7f:8d:c6:b0:6b:5b:73:98:7c:86:ff:06:
76:ba:a3:14:d6:c4:bc:0a:b8:9d:fc:7f:30:3f:aa:
0e:f5:4f:b2:08:c6:36:f0:fa:19:e5:67:f4:66:1b:
60:88:1c:45:dd:96:ba:f8:08:c2:ba:3c:3d:49:b8:
32:9d:f2:da:8e:b6:b6:04:91:38:ca:31:c9:7f:59:
86:fe:3c:34:3c:29:11:f4:bf:55:c1:fd:68:d6:21:
7b:6a:72:41:53:9f:35:63:33:38:38:0e:d9:92:33:
24:ca:8a:e9:8a:59:79:4a:01:ed:d0:75:db:df:ad:
73:5f:88:31:ac:57:f9:fc:f3:6d:53:33:7d:a7:58:
d3:00:66:ae:c5:4a:e3:20:8e:58:3e:e0:78:aa:e0:
d2:62:63:17:4b:3a:5e:2e:a0:39:fa:f8:99:71:4e:
7b:63:87:ac:08:95:61:d4:ec:c1:54:19:df:4f:4d:
70:98:5f:8f:73:df:8f:5b:69:38:cb:e7:d2:e9:48:
99:94:71:e2:d9:71:9a:87:7e:66:54:45:89:db:ad:
5c:1e:a2:43:2f:ad:46:64:8d:2d:a7:da:64:eb:90:
4f:ea:ee:b8:b2:4e:d4:37:d4:8e:e4:fc:26:bd:9e:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:04:83:F9:35:AB:A1:DE:4D:B9:4B:78:FC:3C:FC:BD:5B:73:A9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c55e222c-21f7-4fb1-ac9a-57949f3e5911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:fa:a4:ff:09:81:ba:15:d6:b8:06:5d:ce:a9:b6:86:0b:45:
1a:39:22:16:eb:0d:75:43:07:dd:04:32:12:28:64:77:5d:f0:
2e:cf:b3:76:fe:6f:92:60:f9:a6:13:b2:b2:44:ce:8d:d3:9b:
ad:94:f1:82:b1:1c:b2:6f:fe:26:94:91:6b:36:d2:a3:bc:50:
56:9c:e5:5c:9f:64:70:88:4e:e0:cd:9a:84:84:74:0a:c4:3b:
e5:07:7b:34:de:47:62:9e:c7:e8:83:9b:06:b7:97:1c:92:4b:
db:9c:87:d2:e6:33:70:ea:2f:6c:fd:dd:34:e0:73:64:14:0c:
f0:ae:4b:03:85:4a:2f:63:f5:60:21:d8:52:3f:83:59:de:44:
1a:95:ad:e2:b5:f7:2c:dc:e7:06:75:5d:00:59:78:0a:ba:45:
b7:fa:e7:14:15:ba:72:57:42:8c:fe:f4:9a:3f:df:12:79:d0:
5c:27:84:da:04:77:e2:01:bd:3b:4d:67:d9:6c:ab:9c:b4:4f:
7c:27:70:6a:c7:2b:1c:83:de:d6:89:59:50:d8:ab:cc:b8:61:
f4:a2:65:eb:3b:27:bb:3e:e9:78:18:79:dc:bd:5d:ce:db:83:
b0:91:55:e0:50:b9:8c:d5:a4:0a:e5:9a:e6:b0:70:eb:ba:4a:
cc:d1:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:20 2025 by rpki-client