Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db6d053f-0af9-4d4d-96cd-d80f6046543c.roa
File: db6d053f-0af9-4d4d-96cd-d80f6046543c.roa (raw, json)
Hash identifier: RslIOtGq/1+8VZsUsjemxujA/v4+oNK6dnXCbdyc7ig=
Subject key identifier: 42:79:51:5D:D3:72:B0:15:D4:C1:5F:72:B8:EF:10:D0:C4:5A:DB:EB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4362726E5E334557FB86CB4C4987146C9581A36D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db6d053f-0af9-4d4d-96cd-d80f6046543c.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.248.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:62:72:6e:5e:33:45:57:fb:86:cb:4c:49:87:14:6c:95:81:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:dc:6f:33:52:34:d2:68:aa:a9:84:09:32:
be:88:4e:33:3e:f5:2d:dd:69:90:56:8d:d0:1d:e8:
34:03:af:56:99:9b:67:af:de:cd:8a:9b:f7:02:07:
c6:06:1a:57:ea:d9:39:29:e0:15:34:06:d8:53:d7:
0c:48:5d:52:81:81:8f:32:47:36:c0:55:1f:6a:c7:
11:e8:7a:aa:ec:7d:3f:8a:ab:48:64:af:9d:00:58:
a7:ef:07:96:3b:72:eb:1c:3a:51:82:c8:fe:3c:3a:
68:e8:32:b0:f9:e7:a6:c7:f7:cc:53:e7:53:72:f3:
f0:00:10:a0:42:58:e6:0b:27:7b:1e:47:d5:9f:52:
5d:a3:e7:39:77:14:e2:18:51:f5:9d:5f:6d:e3:80:
a4:fe:61:64:0a:15:04:64:9c:07:1f:da:e4:2c:d8:
43:22:8a:d9:e0:a1:4b:f4:47:78:d7:51:67:25:75:
de:37:72:cb:03:98:35:6f:e5:6e:b9:5e:85:5a:3a:
8f:f0:50:8a:83:3e:92:cc:55:36:94:08:2a:c4:b1:
4f:ce:a2:b4:1c:24:15:a0:d1:9b:0e:a4:99:f2:aa:
43:2f:23:da:9b:cf:3a:67:eb:5d:15:c2:d0:18:7a:
22:7f:df:c7:7b:33:99:b4:33:ba:89:56:1b:ea:c0:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:51:5D:D3:72:B0:15:D4:C1:5F:72:B8:EF:10:D0:C4:5A:DB:EB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db6d053f-0af9-4d4d-96cd-d80f6046543c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.248.114.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a5:98:1e:f8:1a:0b:66:59:f2:72:41:66:71:d7:7f:44:af:
01:8b:ea:c0:49:99:2e:44:1a:57:13:f8:e1:db:35:b0:c1:bc:
c3:5c:b7:d0:01:44:6b:c1:b4:8f:bb:e5:27:41:91:de:53:0f:
09:0a:32:5c:1a:90:8f:5c:79:57:76:30:e2:e3:a3:f3:0e:7f:
90:7d:b2:15:ad:c3:59:0a:b6:a6:24:28:7b:dc:50:b6:9a:90:
f9:5b:8d:48:a8:13:a2:ee:6c:d9:47:82:0e:a2:a4:28:f3:02:
eb:6e:6a:d2:04:b1:91:97:03:56:81:ce:4a:09:43:8e:d9:82:
68:ad:89:3b:b1:f0:f2:e1:d9:d9:bc:a5:bc:82:5f:86:82:2e:
69:85:dc:cf:23:bd:3b:27:5e:ff:0c:81:38:13:29:ad:40:18:
b0:2f:38:ef:c3:ce:ca:52:16:f6:cb:7a:84:fc:ad:58:aa:f1:
03:25:ef:b2:f5:17:a8:f9:be:8f:4d:3c:63:43:30:8b:79:81:
ce:b6:50:43:9c:7f:80:b1:ae:59:8b:79:ca:62:90:db:57:64:
1f:13:67:08:9f:dc:83:19:22:49:49:6c:32:22:ca:19:f1:78:
d8:03:99:c7:81:9c:26:62:ff:40:75:25:ce:f6:64:f2:4c:2e:
86:d1:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:45 2025 by rpki-client