Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e85fbb4f-5c93-4043-a016-74b68d671a84.roa
File: e85fbb4f-5c93-4043-a016-74b68d671a84.roa (raw, json)
Hash identifier: TANeHpW7aCA5R1k98pjcXXp9Y+lVytHUGkrjrBJoimU=
Subject key identifier: 59:22:86:7A:56:46:BB:98:3A:24:7C:01:76:0A:33:72:80:E9:1C:EE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 36E2A8145C7B2DE34EA3644817D42D6B592DAEFD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e85fbb4f-5c93-4043-a016-74b68d671a84.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e2:a8:14:5c:7b:2d:e3:4e:a3:64:48:17:d4:2d:6b:59:2d:ae:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:53:89:77:43:9f:12:e5:a1:69:24:f6:0c:
ac:50:89:f8:be:ee:31:59:7c:6f:ab:c8:ca:cb:4f:
de:3f:1a:54:1c:1f:fd:b3:d6:5d:a0:2e:e4:3a:53:
4a:73:df:cc:57:92:fe:02:fe:88:0a:5a:c8:ac:51:
71:cd:f5:f2:b2:b5:dc:9b:c6:02:ee:92:da:21:03:
d8:12:e4:08:91:53:ad:75:2d:19:68:26:ec:7c:5f:
70:f6:b7:35:f0:b0:8f:52:29:b5:fa:a4:6e:47:04:
df:bf:15:3d:e9:bf:6c:bc:79:4f:49:df:7b:af:d2:
26:09:9b:6d:86:49:c1:b7:a8:a7:a1:08:eb:3e:0f:
25:7a:92:b6:05:a1:1e:9f:f3:2e:d4:73:3d:d3:a9:
23:42:59:0c:23:87:a2:7c:85:d4:2a:d8:c4:24:30:
91:7c:dd:b0:2b:40:7d:0c:8f:99:4f:c1:87:10:c4:
50:f5:dc:9d:79:42:76:6b:3e:1a:7e:90:3c:a5:55:
9d:82:5b:33:da:a7:bb:16:07:b6:b2:74:e4:9d:c5:
f0:2a:7a:10:2e:36:24:c3:fd:46:8b:fc:ba:ff:2d:
27:b0:65:b6:52:44:db:28:b5:1d:f0:38:d7:ee:cb:
b1:54:60:b0:84:90:32:58:0b:ca:64:bd:81:8c:f4:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:22:86:7A:56:46:BB:98:3A:24:7C:01:76:0A:33:72:80:E9:1C:EE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e85fbb4f-5c93-4043-a016-74b68d671a84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:7d:c4:c0:3a:6d:32:4f:be:5b:0e:a8:57:2c:e5:12:b4:2c:
f1:34:90:10:14:16:96:ac:98:4a:24:55:cb:98:64:fd:c2:7b:
6c:57:b1:aa:30:46:af:da:dd:64:8d:f8:24:2e:13:7c:42:c7:
a9:e0:86:13:ab:93:4f:e2:fd:61:7d:3e:33:d6:01:19:30:22:
b0:ee:9a:9a:c0:e0:8b:9e:2b:64:cc:79:0a:94:c7:d6:78:bd:
c2:63:41:bc:47:9e:10:82:ed:2f:2d:e4:f5:91:0e:28:7f:2f:
91:3a:26:dd:04:d6:71:d0:85:11:dc:7f:79:0c:46:14:14:a4:
d8:46:f1:c9:59:23:fb:6d:8c:5c:ca:9d:ca:f3:37:2a:63:f3:
0d:fd:3a:54:50:33:ca:3f:61:44:3e:b9:9e:a7:51:87:a2:8c:
e2:6f:0a:4d:5e:52:83:1a:0e:1b:34:03:00:8a:ec:15:3a:01:
2f:d4:56:04:51:de:83:a8:39:5b:9b:a9:ab:11:ef:45:cb:dd:
ed:2a:96:8e:a0:c6:dd:21:e0:a6:39:9b:b5:d4:78:b2:4b:46:
dd:03:60:6c:8a:ca:3e:de:86:fa:59:49:86:ed:9b:93:d8:93:
2d:9c:f8:f7:4a:47:00:f4:8f:6a:62:9d:3a:8d:76:fd:1e:a7:
24:17:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:10 2025 by rpki-client