Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0959b53-a94c-427c-a722-38ce065ca706.roa
File: e0959b53-a94c-427c-a722-38ce065ca706.roa (raw, json)
Hash identifier: /eApoZFhrhkbkNF5VClJ84kFaXe+PkGNATfMVGGRU9s=
Subject key identifier: D1:77:2A:BD:D3:8E:33:8F:9A:FE:96:90:01:A3:DF:46:05:CB:22:1C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 725D8392FF738EA9FADBAD009A369516C24DAC59
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0959b53-a94c-427c-a722-38ce065ca706.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5d:83:92:ff:73:8e:a9:fa:db:ad:00:9a:36:95:16:c2:4d:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:d4:3c:ac:a5:d2:4f:8e:be:e4:64:87:02:
98:89:4d:29:ea:d5:b9:1f:2c:02:27:49:c6:ab:a8:
c4:b6:a7:fb:8e:ae:fc:90:06:ad:a1:bd:d4:61:e3:
38:0c:1d:2c:a0:70:a7:6f:bb:07:88:bf:c0:cc:06:
93:65:30:8b:67:01:ca:20:d5:bb:3c:a5:d3:7a:bd:
67:fc:d8:34:76:a3:11:ca:95:c4:85:c1:5e:19:0f:
6d:f2:e3:6f:38:43:3c:4e:4b:9c:7e:f5:89:95:e8:
55:bb:15:86:be:7c:47:12:08:0b:32:0e:cb:cf:d8:
84:78:0e:8e:61:49:8b:8c:b3:d8:94:17:96:55:d0:
fb:2d:5e:5d:04:a5:8c:da:15:5a:7f:f0:29:0a:1e:
5d:6b:de:7d:c5:bf:ef:6f:71:28:c6:a3:84:76:09:
62:27:32:7f:66:45:ea:0f:7b:e9:05:52:dd:9c:e9:
0f:cd:5f:02:93:24:7b:ec:24:c2:5e:18:13:24:8d:
b3:8c:41:d6:f7:b0:96:f3:d5:19:0b:43:df:39:f3:
df:09:0d:78:6a:ce:df:17:16:72:06:d7:da:97:91:
5c:a4:fb:a3:1b:5e:29:09:75:1c:aa:3f:a6:24:eb:
18:b9:f8:d4:e0:31:aa:68:1c:32:89:4e:37:d0:ae:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:2A:BD:D3:8E:33:8F:9A:FE:96:90:01:A3:DF:46:05:CB:22:1C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0959b53-a94c-427c-a722-38ce065ca706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.132.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5b:07:44:9f:71:59:db:ed:46:55:4d:17:91:84:13:c1:9e:
94:83:e1:55:9e:f8:41:66:5b:31:d9:8b:46:94:7a:36:0f:a5:
2d:4b:84:8c:1b:4f:d8:a4:d8:e0:0e:de:d3:46:49:5c:d1:9a:
e4:6a:20:91:c1:96:64:6d:77:ab:0d:60:5e:14:57:66:aa:25:
c3:ce:98:ad:ce:e1:4a:e1:46:d5:2c:6c:56:8e:c1:f8:60:77:
b2:59:06:9f:80:1b:8a:06:88:4a:0a:eb:0e:a2:80:98:14:4b:
87:ca:9a:27:35:41:02:6a:aa:83:d9:ed:d0:25:0e:ab:91:a8:
a8:fd:13:c6:26:fa:6c:eb:3d:1f:be:e6:65:ca:66:f8:08:df:
ab:c2:90:e2:57:20:66:a6:e9:c5:e3:d9:24:5e:99:8e:0b:4f:
be:20:67:be:4a:83:41:2e:c3:0e:b6:b6:81:27:c9:b3:61:55:
76:f4:ec:71:a8:69:db:0e:46:e9:b1:0f:c4:b1:4e:c3:da:5a:
c1:03:7c:75:49:d0:d7:6a:a7:9a:34:d5:81:7f:9c:51:67:09:
a3:15:8b:4d:37:f5:62:78:4b:1b:2c:a3:39:2a:b2:36:02:b5:
93:99:40:b6:44:42:c9:b0:93:4d:ce:54:32:80:45:0e:2c:d3:
71:ae:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:18 2025 by rpki-client