Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d586057b-5806-427e-9f83-bbcfc3dddb33.roa
File: d586057b-5806-427e-9f83-bbcfc3dddb33.roa (raw, json)
Hash identifier: mN90bSDvcFnHD1mVHUtLd3x4hb1anGtrCgHrP8gq2Wo=
Subject key identifier: EB:DA:67:04:06:C1:D6:E7:13:1F:C6:30:B6:23:CC:C4:9B:E3:CF:B6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6CD575FAA5290BAF2A694DF8BA6C4AEAA4FD8622
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d586057b-5806-427e-9f83-bbcfc3dddb33.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d5:75:fa:a5:29:0b:af:2a:69:4d:f8:ba:6c:4a:ea:a4:fd:86:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:bc:1f:96:ad:c5:bf:c3:d3:ff:18:f6:59:
23:98:f1:a4:cb:84:27:d4:93:be:26:55:fc:c0:16:
92:85:3d:94:bf:cc:02:a5:b7:f6:e8:06:8b:9d:19:
78:2e:dc:78:1d:f2:01:28:5d:bc:1c:5a:b7:e6:23:
94:a7:4e:6e:4b:24:77:d2:ae:aa:77:e5:bb:8a:01:
ba:64:f1:2c:37:d8:dc:5c:c1:a4:93:f1:04:8b:db:
fb:8e:c5:88:4e:42:3e:82:78:83:0d:b1:68:32:32:
aa:16:97:5d:bb:56:a4:f9:c7:b6:e9:f5:01:2c:80:
85:27:8f:f2:5c:67:a9:e7:74:1c:72:b8:f8:8e:8e:
86:02:4c:83:9e:78:ea:5e:07:19:d1:a6:cf:64:01:
ca:60:11:c4:6f:94:12:a0:bc:a6:ae:89:68:ca:10:
4c:f9:0d:a8:aa:14:75:ee:af:10:f0:45:ff:bc:1a:
0f:64:92:8d:73:25:36:80:70:fd:8a:fc:b8:4e:e9:
e1:e9:10:bf:db:29:69:9a:dc:be:cd:d7:2f:c1:9b:
ca:3f:da:37:e7:c1:70:f4:4e:59:1d:b7:11:30:cf:
03:34:53:4b:f9:af:71:85:c6:fe:e5:11:64:68:47:
87:20:52:51:54:8c:1e:50:c6:f0:2a:4c:31:f8:7a:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:67:04:06:C1:D6:E7:13:1F:C6:30:B6:23:CC:C4:9B:E3:CF:B6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d586057b-5806-427e-9f83-bbcfc3dddb33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5a:76:3d:91:2e:05:8c:18:59:f7:49:09:4d:6e:c4:96:03:39:
d9:e4:07:38:6b:d7:96:bf:e3:e9:f0:20:ca:ff:a3:50:30:97:
94:6a:a0:94:9d:a0:5a:92:06:69:ec:c5:ea:68:71:75:d2:c5:
c6:b6:55:93:6a:4c:8b:89:88:27:4d:a8:3f:cc:83:66:88:98:
fa:ce:45:95:00:2c:76:08:50:9f:01:9a:c0:b8:f0:c7:99:7c:
cc:03:08:95:73:6a:21:22:6f:41:99:51:92:2e:ed:5a:48:86:
fe:97:42:a4:0e:c7:17:e5:1e:c0:d0:c0:c6:8c:9b:09:2f:b4:
b0:2b:cd:a8:23:7d:b1:68:f4:aa:40:a1:5c:49:b2:03:b2:9b:
3e:c7:8c:bc:07:d5:18:06:89:f4:2b:c1:ed:e3:54:0e:80:2b:
3a:df:ab:39:9b:2d:bf:74:57:06:dc:b1:73:ac:ae:a6:b9:e1:
9d:71:98:ad:d8:58:93:fd:1d:cf:26:33:3f:85:20:4f:66:29:
77:13:fd:a3:20:e5:ab:9e:99:e8:35:96:da:f1:a9:b3:a9:b0:
9b:40:88:c9:f6:ab:66:7f:4b:13:af:3a:f2:14:8d:a0:3d:7a:
3e:46:70:39:f1:c1:7e:64:89:31:4f:07:78:23:4d:16:73:24:
fc:e9:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:32 2025 by rpki-client