Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e931b40a-9541-4c16-a2dc-c3c0d4021568.roa
File: e931b40a-9541-4c16-a2dc-c3c0d4021568.roa (raw, json)
Hash identifier: X65dA2aAKfDyR2GrnKMWRphbIldC1HTpYpxFa7+9EV8=
Subject key identifier: 2D:06:D8:4A:62:03:3F:FE:87:3A:CA:87:30:49:F0:19:07:18:2F:C0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2A9A591AE019F278920F67C76207E2FF1DF3639A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e931b40a-9541-4c16-a2dc-c3c0d4021568.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9a:59:1a:e0:19:f2:78:92:0f:67:c7:62:07:e2:ff:1d:f3:63:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:f5:d2:fa:63:e2:e9:0d:46:2b:38:eb:ae:
8c:2a:44:58:3a:5d:0f:c2:ab:ba:c2:1e:b0:6f:e5:
2b:5f:db:91:22:e6:48:79:6c:a0:46:de:78:da:4f:
b1:13:a6:25:b3:4d:1f:b8:da:8b:65:23:b1:2b:3a:
d3:26:b1:9a:f3:ec:a4:e9:e2:14:1e:10:0b:86:02:
41:d2:b6:44:1c:d1:c8:7b:df:6d:59:fd:e9:99:66:
fa:68:1e:5e:1e:bf:19:33:8e:77:10:7a:1e:86:5a:
1f:8d:db:b9:a4:61:2c:b2:ed:18:dd:56:85:75:85:
28:c6:96:73:81:df:ee:e6:61:50:94:f5:02:54:1f:
80:52:89:fe:26:f0:61:68:2c:37:32:2e:d9:b3:8a:
86:09:e3:45:85:e5:5d:96:7e:39:c0:8f:88:d7:dd:
56:70:38:a5:20:e1:9a:8b:7a:de:ba:f3:e2:d8:a2:
52:88:b9:5f:32:66:86:2d:3e:56:5a:ad:35:19:20:
32:40:71:1a:02:84:6d:36:18:17:f7:0e:05:bf:f7:
fe:a0:d4:74:4d:5a:db:04:b9:0d:e1:b6:64:b6:17:
94:ac:35:a9:35:e0:87:ba:17:ca:e5:18:51:3d:75:
94:bf:24:f0:a5:66:af:d0:e8:82:8a:a6:8b:f7:0d:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:06:D8:4A:62:03:3F:FE:87:3A:CA:87:30:49:F0:19:07:18:2F:C0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e931b40a-9541-4c16-a2dc-c3c0d4021568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:6c:54:d4:86:bd:ee:e3:b1:02:06:75:0c:9d:66:d1:17:44:
5f:06:90:f3:2f:df:10:d5:05:84:2f:f2:ca:4d:01:1a:df:cc:
5f:95:28:d0:ef:c1:36:91:00:f4:80:7d:96:0f:52:05:05:77:
0e:62:34:75:25:37:5e:b6:d0:58:27:ae:cd:da:67:16:84:86:
27:f6:66:84:1a:65:e5:69:74:58:c1:93:03:de:4a:79:6d:cc:
85:22:a1:53:a8:c8:e2:00:db:3f:80:c7:46:23:ef:a7:95:a8:
b0:2d:05:14:6d:fa:99:60:b1:89:24:dd:a4:15:6b:d4:2f:5b:
2f:a1:c6:a2:a6:f9:2a:37:9d:d2:69:51:67:4c:04:d0:1b:f4:
dd:18:de:30:0c:c8:18:e7:5a:de:95:24:ca:2d:22:98:e0:9a:
10:9c:da:9b:8e:61:bd:b2:ef:0b:42:44:f2:97:b5:88:bb:b4:
0a:4b:01:0f:d0:54:22:d8:6d:8a:79:af:8d:33:e6:5c:4b:a9:
c6:8c:3f:86:00:14:30:e8:26:0c:3c:8b:52:d7:6e:4d:83:25:
64:93:43:6e:df:cc:46:fd:16:7d:b7:1a:57:94:57:75:1b:16:
1f:93:a7:14:55:f1:4f:df:d1:87:b1:7d:b5:a9:c7:db:b4:65:
1a:8f:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:08 2025 by rpki-client