Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df529df2-da97-4aa4-8d39-4289994800bf.roa
File: df529df2-da97-4aa4-8d39-4289994800bf.roa (raw, json)
Hash identifier: 8P6zvAZRKQ/JdElhERnzsgWTh7L2yyGMHFyinLRB3Zs=
Subject key identifier: 5D:59:4D:EB:F8:CA:DA:70:B7:5D:0A:01:D3:2A:B0:62:02:60:AD:A3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 74985B7B916457B7907F42BF978330B8A8844F2D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df529df2-da97-4aa4-8d39-4289994800bf.roa
Signing time: Wed 05 Mar 2025 00:50:10 +0000
ROA not before: Wed 05 Mar 2025 00:50:10 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:98:5b:7b:91:64:57:b7:90:7f:42:bf:97:83:30:b8:a8:84:4f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 5 00:50:10 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:db:6e:45:f8:83:9d:41:31:69:e1:07:46:
70:76:37:df:d9:b6:64:41:d6:93:e2:84:45:1c:14:
d5:56:be:b7:58:46:a3:85:df:2e:31:1d:8f:bf:33:
89:ca:f2:74:76:2a:fc:01:f3:57:3b:0f:f3:ed:20:
90:50:68:c0:f9:15:6e:42:86:62:1f:0d:a0:20:e7:
22:44:cc:ac:be:57:bb:b5:5e:90:0d:ed:49:82:93:
a7:0e:bd:4b:a7:79:40:c4:d4:b8:24:5d:4b:b3:95:
41:55:0d:8a:0b:3f:48:a4:40:0b:48:7f:b9:59:03:
db:4e:9e:7b:22:c0:20:a5:1b:e8:52:0b:93:5c:19:
2e:1f:36:22:05:8f:fb:d1:53:98:88:7c:1b:c9:ef:
e9:a0:02:9c:4d:69:ba:b2:53:77:0b:7f:de:1d:d1:
1a:ab:c1:14:ea:e7:05:b4:3c:c1:d2:83:26:4e:2b:
33:7b:3b:8a:12:51:f7:49:ee:a5:60:dc:23:15:b3:
bd:cf:f7:97:44:5d:39:16:ab:7b:40:7c:dc:d0:80:
69:ef:b9:cf:b8:78:67:33:34:56:83:b7:2c:d1:8b:
47:c7:03:91:ee:e6:82:79:b6:10:5c:65:86:cb:74:
8e:4a:ff:1c:26:8a:2a:61:c6:fd:79:05:7f:59:df:
98:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:59:4D:EB:F8:CA:DA:70:B7:5D:0A:01:D3:2A:B0:62:02:60:AD:A3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df529df2-da97-4aa4-8d39-4289994800bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.144.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:35:63:4e:7b:3c:75:02:8c:1c:4f:bb:29:31:5b:0c:23:db:
9c:8e:a9:cb:42:45:02:f0:3c:e5:fd:ce:b7:fd:67:d2:44:e3:
81:0e:48:cf:e9:8a:91:82:4a:72:cb:5c:ca:5e:11:a2:e3:0e:
7e:d4:01:19:d5:7f:00:64:72:8a:7a:62:8c:d0:94:7c:7f:7e:
c6:c8:0e:af:01:49:0d:53:76:09:4a:19:72:cf:f1:8f:c8:1e:
57:57:9c:45:01:65:49:22:41:14:03:00:a2:cb:b3:eb:d0:3d:
98:79:1d:3a:e2:68:58:f9:8d:d3:40:24:71:23:12:31:36:47:
a1:64:be:37:f1:fb:f5:79:a7:ec:b3:28:aa:00:7a:4d:2c:1f:
62:7e:54:2a:78:c2:18:65:65:22:2c:37:f7:7d:3f:11:5f:b0:
83:39:85:30:72:a0:fa:b4:ae:34:26:96:34:09:2d:f3:59:fe:
af:57:25:02:5e:76:9d:85:7c:72:d8:31:86:35:a9:12:a3:24:
43:d8:8c:c4:00:3a:3d:55:9d:a8:2f:af:47:49:70:a2:cb:4b:
ed:e8:21:71:c3:93:58:ec:66:02:8a:6f:12:d7:76:ff:ec:76:
9a:cd:1d:50:95:5a:22:85:68:63:0f:23:94:cb:d4:0f:72:54:
ed:49:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:09 2025 by rpki-client