Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9f1a72c-efb1-46a3-945d-2126a4c80612.roa
File: e9f1a72c-efb1-46a3-945d-2126a4c80612.roa (raw, json)
Hash identifier: FkAd7MLaxyThE1eTrlXb8ssl7MCHHdDFBIrbCOXoUFY=
Subject key identifier: 85:48:F5:7F:73:57:55:3F:46:C5:56:8C:02:7F:45:9F:0E:19:EE:43
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1D8C4A3A7B6BD2B5545464C5FB1325C0179C1E7E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9f1a72c-efb1-46a3-945d-2126a4c80612.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 7224
IP address blocks: 3.4.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8c:4a:3a:7b:6b:d2:b5:54:54:64:c5:fb:13:25:c0:17:9c:1e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:81:a0:ee:6e:c9:92:56:ec:f8:ea:69:3c:
5e:f0:d1:39:62:6d:2a:9a:b8:af:2e:1f:a9:e4:ff:
f0:96:e4:9d:b9:c2:7f:21:c7:76:95:66:5c:8a:ec:
25:7c:39:bf:3f:51:57:17:b0:db:3d:1e:99:90:9a:
97:86:4e:22:c8:b0:4b:c3:43:16:fa:7a:ec:86:d9:
b8:db:63:8c:fa:ec:39:0c:de:78:df:77:f9:d0:14:
2e:7d:75:05:14:89:cc:e5:01:96:1d:b4:61:38:04:
f7:0e:ae:a0:eb:aa:c6:50:a4:ad:bd:35:73:e5:dd:
02:a8:95:a0:be:e3:82:2e:94:f0:05:13:90:77:43:
a8:42:1d:af:a4:23:4b:d6:6f:20:ce:32:83:ea:b4:
6f:1e:99:07:e0:90:8d:f0:42:74:db:d6:45:ce:a1:
82:50:42:7a:d5:ca:d8:9c:1a:bb:dc:a6:53:de:c9:
09:90:ae:72:c1:69:89:eb:86:00:f8:f4:f2:59:84:
38:aa:f0:c4:80:08:95:4b:61:0c:85:f4:b1:6c:6e:
21:4c:f1:6f:78:99:4a:93:0b:ad:1e:f9:ec:d0:8c:
a9:69:e5:50:42:17:ce:7e:a0:57:e6:99:4f:a1:1d:
c1:06:67:26:7b:65:fb:74:ec:da:40:61:9b:d6:03:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:48:F5:7F:73:57:55:3F:46:C5:56:8C:02:7F:45:9F:0E:19:EE:43
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9f1a72c-efb1-46a3-945d-2126a4c80612.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:4f:43:f9:be:73:d1:f8:ef:e4:f9:e7:8f:80:df:c0:27:c4:
af:44:59:17:2e:33:7e:81:18:d6:27:54:c0:10:c0:fe:21:ac:
29:fd:69:de:6e:50:d7:ed:bd:ce:4c:68:fd:b6:7c:82:58:9a:
d3:fe:8f:d7:69:fc:43:31:dc:5b:0a:16:c4:ac:2d:a3:ec:0f:
74:21:59:5c:20:0b:ec:67:7c:ea:0d:ea:db:8a:96:68:67:1e:
76:10:b4:b2:8f:2a:0c:c9:9d:f6:7b:2d:78:8c:33:60:1d:15:
c1:f3:9c:54:a7:cb:19:04:e0:dd:31:22:c6:6e:74:47:66:7d:
09:ff:a3:02:ef:09:23:cd:09:b1:fd:e1:99:57:fb:78:1e:0d:
3c:cc:c6:96:26:0e:9f:ab:c4:e8:ad:5c:dd:ab:42:f9:35:4d:
33:2b:c6:d2:87:fc:7e:b3:47:ee:da:a4:e3:72:36:1f:f5:a4:
cc:3b:cd:e4:96:1f:a6:a2:8e:dd:cc:58:0a:84:bd:b9:12:2c:
55:b8:7a:fd:f3:4e:ce:27:92:53:1c:27:7e:07:d2:7a:ea:e9:
ae:b3:bd:df:e2:b7:9a:b9:6e:df:06:98:10:31:2d:92:42:29:
05:be:9f:2c:a1:f7:a9:fd:1d:24:54:4c:54:06:f9:f5:b9:81:
d3:99:2c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:55 2025 by rpki-client