Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cad25ef3-99aa-4952-ae86-e0690bf33f26.roa
File: cad25ef3-99aa-4952-ae86-e0690bf33f26.roa (raw, json)
Hash identifier: wZbjxNPFu1+u1jgQBRWge9ftOPKFHR8hbOHe/HPk2pE=
Subject key identifier: B2:35:D2:67:68:30:FF:0E:EC:38:A3:4F:3C:CC:87:57:77:02:8E:5C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: D556C89C12BFC5A650EFEF08A9A9627B9C5276
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cad25ef3-99aa-4952-ae86-e0690bf33f26.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d5:56:c8:9c:12:bf:c5:a6:50:ef:ef:08:a9:a9:62:7b:9c:52:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:18:88:03:0f:1c:c8:42:22:92:f0:15:05:
f8:d7:41:8d:19:37:0d:f7:23:a4:3b:a0:46:fc:bc:
fc:d4:a0:f7:01:7e:ec:76:e4:e5:cd:9d:d6:35:ca:
f2:40:6f:b2:fd:f4:e2:2e:84:0c:5c:00:07:7f:82:
f4:f2:7e:f7:74:64:9c:1d:bf:9c:a4:a5:c3:c4:86:
37:cc:cf:5e:4b:42:48:11:54:b5:72:e2:a7:7e:35:
22:52:d6:83:ef:cd:03:03:b1:fc:0d:a4:2e:f5:4f:
93:79:27:2c:dc:9e:a1:41:1a:3e:e7:0a:7e:5b:cf:
36:df:1f:82:fc:57:e7:e4:2a:ef:1a:39:a8:f0:4e:
66:09:ff:54:b0:4e:1b:30:23:67:96:ba:42:fa:0e:
15:1e:5a:ca:21:42:b2:33:7c:4d:cc:7a:fd:dd:a1:
7b:97:ac:6c:b0:20:bb:fa:fe:45:6b:dc:25:9c:13:
d5:e5:93:31:b9:b7:fa:0d:2d:2c:e2:d8:2b:dc:dd:
83:fc:57:69:20:5a:f0:6a:c4:13:aa:cc:41:2f:af:
95:55:65:bd:8c:c3:5d:47:e5:b2:4f:47:94:ce:da:
54:07:22:1e:4a:62:af:dd:77:50:ef:61:ff:3e:2b:
f4:7b:dd:89:f9:cf:61:5a:75:76:ca:0a:4a:44:fd:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:35:D2:67:68:30:FF:0E:EC:38:A3:4F:3C:CC:87:57:77:02:8E:5C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cad25ef3-99aa-4952-ae86-e0690bf33f26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:23:20:b1:34:2b:4b:de:56:17:15:fd:2c:ed:2e:59:97:73:
f9:04:9f:f0:03:5d:77:80:81:20:68:51:57:fc:2c:0a:25:9c:
e6:3e:ae:4a:26:6c:f1:73:73:9b:f2:c5:dd:88:08:ac:1b:10:
6e:6a:fe:bd:20:13:11:ac:c6:c3:a7:66:7a:99:5d:f2:f9:a7:
79:44:03:d5:95:ba:eb:4c:eb:9e:30:82:e3:bf:40:f9:12:26:
e8:56:fc:ae:f0:45:13:84:0b:8c:3e:cd:15:dc:b8:f3:8c:b6:
06:c8:11:e7:17:f3:71:98:67:53:e3:6d:5f:20:16:9d:37:e1:
ae:6e:c7:f2:4c:3b:83:f8:f5:13:af:d1:74:98:7b:f0:04:85:
50:69:de:25:d1:33:e3:d5:4b:1d:b6:34:44:e2:9b:bc:b6:f2:
2d:49:02:ac:f4:d8:ca:b1:1d:3c:96:d0:8f:66:99:9e:ff:a2:
0f:e7:3f:3a:33:03:47:75:79:3e:be:8b:13:5b:a1:63:56:f9:
60:d6:3d:b3:b5:86:ef:5c:fa:95:b7:37:5a:e9:e7:90:47:35:
f8:9e:d4:06:5d:44:aa:2c:74:56:c2:4a:4f:9f:4f:bb:54:e2:
2b:5e:83:ab:8e:d4:d5:09:8e:c2:88:8f:f1:e0:69:40:b6:05:
be:b6:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:22 2025 by rpki-client