Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8a0b258-82d3-4927-a176-717caf7c4e70.roa
File: c8a0b258-82d3-4927-a176-717caf7c4e70.roa (raw, json)
Hash identifier: agBAcmOmWFfVnMwDcE4d3W9rRexHEJtPxlRPllRo6HI=
Subject key identifier: DB:58:19:81:BC:3E:4E:48:ED:D0:0E:28:50:76:18:D2:2D:D1:3A:F2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0D671FDB23D0F6A033A0C1FB6C1A42A7DC26EEF7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8a0b258-82d3-4927-a176-717caf7c4e70.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 136.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:67:1f:db:23:d0:f6:a0:33:a0:c1:fb:6c:1a:42:a7:dc:26:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:cc:f6:2e:c5:85:36:53:26:91:c9:ae:a4:
57:5c:4c:19:93:58:bd:93:94:ad:bf:be:5a:17:17:
d0:96:88:d8:9e:a2:a1:bd:a5:93:ba:7f:d9:1d:4f:
ec:97:53:12:1b:4f:98:28:da:5f:8b:0a:8a:18:63:
41:aa:51:26:2e:76:88:c9:c3:78:db:ec:97:f7:b9:
2b:19:77:ce:c5:3d:11:a0:9b:eb:a3:d7:92:60:66:
0c:5d:5a:10:89:f3:26:95:71:5d:cf:88:fa:77:f4:
65:eb:b2:2e:aa:ed:c6:09:bb:1c:a0:54:37:5b:54:
8b:8e:95:5f:5a:da:c4:cc:6f:b3:29:3a:a5:df:bc:
0a:72:df:9f:a4:20:61:fb:b9:41:0b:31:cf:70:31:
c8:de:4b:ce:b4:23:cb:98:bc:56:42:77:fd:40:f8:
95:20:12:38:76:60:f0:25:67:0f:ca:98:20:c3:8b:
cc:18:ea:ef:ab:f6:45:7b:30:84:19:65:20:89:31:
76:96:51:8c:fb:ac:16:55:0b:72:30:a5:6b:bc:d7:
b9:26:b4:43:d1:ad:14:75:ce:38:15:b6:0a:2d:8b:
5c:12:82:75:36:57:50:0f:c2:95:85:79:97:16:a4:
92:d8:d8:92:fb:39:8a:b5:41:2b:73:da:1e:59:99:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:58:19:81:BC:3E:4E:48:ED:D0:0E:28:50:76:18:D2:2D:D1:3A:F2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8a0b258-82d3-4927-a176-717caf7c4e70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:9c:45:1a:7d:6d:66:7e:27:6f:e5:bf:6d:2a:3c:6d:94:79:
88:bd:71:ab:72:d3:49:dc:db:18:94:8c:ab:44:92:0e:1b:4f:
71:3f:db:70:93:d6:ff:f1:dd:f0:8b:b1:0a:8a:82:42:d7:9b:
8c:52:08:10:02:00:5a:04:8b:e1:ec:e4:f7:0e:d3:c1:09:80:
e8:d6:08:9f:4b:fc:bb:de:2e:7b:7d:8c:85:87:e4:9f:d6:0a:
83:d4:95:0a:e5:29:f3:e9:02:71:c4:a1:bc:f1:57:26:52:12:
65:c2:f8:7b:7e:8f:34:8a:78:97:65:6d:57:c7:8c:76:97:0c:
95:1c:88:d9:5a:92:8c:b1:74:e9:a8:2a:2c:15:2e:95:42:47:
f3:87:6b:f0:fa:ef:a4:35:3e:c3:55:dd:22:fc:cb:60:22:2a:
fc:ef:a9:f9:7c:7b:b5:49:2b:d3:90:bf:1f:01:55:25:60:e2:
a0:8a:30:e6:48:7c:b3:c7:a4:12:11:83:3b:59:80:d1:2c:ad:
01:4c:90:2a:fd:79:93:67:4d:8c:a3:38:1c:88:28:dc:e1:11:
f2:5b:07:fb:24:d5:31:a6:ae:2c:12:d9:ba:76:98:59:34:ed:
46:80:99:bd:b3:fc:1a:88:53:89:61:f6:53:1b:d4:5e:5f:4a:
9b:f6:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:20 2025 by rpki-client