Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb7ef3f9-7b6a-4343-b257-0074a704a134.roa
File: fb7ef3f9-7b6a-4343-b257-0074a704a134.roa (raw, json)
Hash identifier: /f14B0WUtO4DGR2A81T7MV9NLCN81Wypr5bsWcnwhiE=
Subject key identifier: 7C:BB:1A:A2:EA:AE:4D:0D:7C:B5:FD:80:45:19:86:80:A9:7D:03:7B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7DE3D933D86D6ABE5430C08F702600B076891F98
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb7ef3f9-7b6a-4343-b257-0074a704a134.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 15.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e3:d9:33:d8:6d:6a:be:54:30:c0:8f:70:26:00:b0:76:89:1f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:aa:e3:cb:34:ba:a7:cd:9e:1b:1e:a4:c3:
d4:43:05:a3:f6:c4:1e:5b:07:22:41:48:5a:cc:27:
53:c1:92:d9:ae:f7:a8:45:a7:ac:22:ff:a7:95:d6:
f0:87:fb:72:19:b2:a2:43:2b:3f:0a:31:5a:01:e7:
c0:07:54:8f:72:3f:bc:a4:bb:fd:87:02:5d:dd:41:
a9:ec:09:aa:4b:6a:7e:25:c6:0c:dd:a7:a0:00:3d:
87:5c:ad:3f:7c:b5:45:4b:03:7a:ae:44:3d:21:21:
38:a5:f3:11:41:27:8f:84:85:14:32:3f:50:f3:5b:
60:d2:8d:74:c1:dc:f8:6b:a1:64:ba:15:b3:af:73:
1d:f2:75:53:86:d5:a1:ca:8a:15:d6:f3:28:f0:5a:
3d:97:2f:3b:10:66:bb:f0:de:05:bb:c9:b1:fe:d2:
0f:0e:ea:08:55:d5:9b:7c:eb:99:f3:d9:4e:6f:0d:
93:12:d6:28:d7:a5:94:d5:a5:a6:c3:26:2a:bc:1b:
10:6e:d2:96:82:fe:bc:ea:28:43:93:96:1b:54:fd:
81:f0:1e:48:0c:33:a7:2b:a9:e3:04:c1:61:b3:57:
b5:9e:62:71:c4:65:81:93:45:bf:2c:44:60:9e:d9:
a9:2b:f6:39:45:f5:9d:87:87:c3:9d:48:87:44:34:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:1A:A2:EA:AE:4D:0D:7C:B5:FD:80:45:19:86:80:A9:7D:03:7B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb7ef3f9-7b6a-4343-b257-0074a704a134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.179.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:f8:be:ea:2c:61:77:dd:73:46:3f:8a:72:ec:ab:2a:4e:df:
cb:b3:21:21:d1:a2:67:bc:6c:58:3e:06:fe:27:bf:8b:3e:8e:
60:43:3f:f3:5b:25:a2:e8:7a:90:d2:1d:db:bb:27:df:2c:cd:
7b:89:80:7e:8d:35:b6:77:ed:1d:94:88:7d:fe:6b:f1:00:3e:
d3:68:40:e0:26:29:c8:a0:2c:19:b7:a6:0c:c4:38:f2:03:19:
3a:82:02:1d:31:97:45:d7:f3:b2:7f:9f:37:39:5b:19:18:e9:
f2:5a:88:75:95:29:43:df:93:b5:3a:76:29:aa:20:ac:b9:af:
82:f8:15:90:33:1f:a4:9e:0c:c7:51:af:e3:aa:35:41:40:d7:
26:04:27:de:16:e1:28:80:d4:2d:a5:1e:ff:77:b4:f5:c5:29:
9a:bc:69:55:05:94:21:9b:23:d3:42:0c:22:91:15:d2:19:6d:
53:7f:88:63:16:9a:9d:ab:ed:35:6e:25:98:b8:66:78:55:e8:
30:2f:30:36:8a:4a:15:e1:9d:50:e0:6d:13:08:28:0e:bc:4e:
a6:95:7c:09:26:f4:29:6c:5f:56:2e:63:fc:71:63:cb:e6:df:
82:ad:0a:fc:e9:df:45:ca:5f:94:de:31:43:0a:e0:a5:29:b4:
c1:db:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:12 2025 by rpki-client