Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4380c85-8dcd-4fad-a0c3-1482f6d059bb.roa
File: f4380c85-8dcd-4fad-a0c3-1482f6d059bb.roa (raw, json)
Hash identifier: Neu4bxxXOXQ96VIqf/nOLuJzI1ZG7PIYnmfmpAxOP64=
Subject key identifier: F6:D5:64:BA:31:41:56:0C:11:F5:18:EB:52:83:CA:88:36:6F:26:5D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0B457AE6924AB9148C7DDA9A73038AEE7283E4B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4380c85-8dcd-4fad-a0c3-1482f6d059bb.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 15.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:45:7a:e6:92:4a:b9:14:8c:7d:da:9a:73:03:8a:ee:72:83:e4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:29:45:1d:af:e6:7e:bd:36:d9:61:3a:8f:
99:0f:74:33:52:70:3a:80:79:95:5e:c2:92:84:d9:
80:d6:fa:81:95:b5:fb:ac:16:37:7d:da:42:79:1c:
9d:e2:67:a2:b1:2f:1a:bf:f6:b7:21:8e:ad:df:9a:
25:1d:8e:08:93:2e:c4:f5:b5:38:2e:38:f3:b4:4a:
ad:d9:29:fd:e0:22:5b:d5:72:4b:85:82:2b:61:6a:
ac:76:8d:f8:4e:51:69:25:9c:85:2c:8b:ea:cf:33:
58:b8:a6:f2:44:57:72:75:bc:97:b7:c1:dd:53:c1:
79:35:62:c8:ae:a7:9c:1f:32:aa:ff:a1:9a:db:33:
0d:1c:ea:59:03:14:57:09:17:be:ed:6f:9b:0d:dd:
e3:0c:b8:f5:6f:91:a4:3e:4b:04:82:62:8a:27:22:
37:3e:7b:35:7c:00:52:46:ec:74:2b:f0:6c:54:fc:
94:ad:b0:4d:14:b2:c4:6d:02:8b:d7:a9:0c:25:f8:
f4:7c:6a:cc:7e:28:c1:a0:77:81:07:57:f2:f9:79:
d9:7e:40:45:c0:08:6d:15:d7:3f:22:62:a0:1e:2a:
64:e6:7b:da:54:68:2e:ca:bf:9e:d7:1c:82:ca:28:
f8:f4:45:a9:55:5e:90:e2:5f:e7:96:b2:f1:3c:a0:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:64:BA:31:41:56:0C:11:F5:18:EB:52:83:CA:88:36:6F:26:5D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4380c85-8dcd-4fad-a0c3-1482f6d059bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.168.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:96:f6:a3:13:46:ec:23:b1:9c:e6:28:bf:83:54:82:09:d7:
44:fc:26:14:4b:21:38:84:c5:34:79:fe:09:04:8e:cb:ea:68:
fb:eb:18:19:38:e0:5c:a1:e4:0a:e0:c5:61:e3:90:ab:18:0a:
40:f2:72:b1:3f:b5:c8:cd:77:01:0a:48:73:b2:2c:6b:fc:69:
6a:07:3a:75:4c:c1:fc:56:96:d4:f2:e1:18:b9:37:b7:08:c7:
3f:49:b9:c0:7f:82:47:7d:45:03:a8:88:a7:4f:49:27:c3:72:
d3:72:b5:c6:0a:3e:77:e9:bb:66:8f:5d:5a:fa:aa:c1:0f:ed:
dd:ec:7f:50:6c:f9:a7:ba:df:e9:43:dc:7b:5b:6b:65:ab:4b:
58:95:ce:f2:42:4a:6a:bd:fd:2f:24:55:4a:f0:34:0f:60:2e:
36:1e:6a:59:9b:4f:ad:fb:a8:c0:37:15:2d:d0:e4:b2:bc:84:
44:dc:90:4e:21:3c:02:e1:64:fc:78:be:11:43:e2:51:16:c9:
25:a3:d4:02:c8:2b:14:2a:e5:1a:32:70:6c:d5:99:ff:30:0e:
7b:29:e8:04:14:e2:76:da:32:58:56:fd:e8:3d:ba:1a:95:b1:
5f:70:70:9a:39:1c:ef:1d:19:1b:b4:8c:fd:2e:d1:d1:45:57:
1b:4a:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:04 2025 by rpki-client