Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc8450f5-e5b5-43f0-aca2-5aa5247f6b9e.roa
File: fc8450f5-e5b5-43f0-aca2-5aa5247f6b9e.roa (raw, json)
Hash identifier: J1l8mIuERD8S3ygKX7YW01ItO+kbMtvgDZfWyfjHl6E=
Subject key identifier: F9:4F:57:F6:17:0B:0B:F4:EF:CC:5F:C2:A5:F5:70:4A:96:50:0F:28
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6BCB785C555BA363B855E4A56411BC0FE3BAB807
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc8450f5-e5b5-43f0-aca2-5aa5247f6b9e.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cb:78:5c:55:5b:a3:63:b8:55:e4:a5:64:11:bc:0f:e3:ba:b8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:2b:e3:65:80:3b:09:bd:f8:72:93:61:a3:
6a:6a:0e:09:2e:ff:c0:aa:a1:85:f4:b8:cf:72:50:
dd:f6:5e:37:61:bc:49:60:74:71:78:88:1f:82:ae:
cc:5d:64:32:35:fa:b1:c3:a5:ea:79:cd:8b:a2:df:
79:95:66:5c:05:fb:c7:53:90:1c:e3:99:a7:f9:b3:
23:73:2a:58:09:0a:f4:1d:43:ff:d9:f6:c9:9b:95:
98:82:98:0b:eb:5e:c4:a1:2a:78:f8:c1:03:19:7a:
b9:33:4f:73:13:a3:e3:4b:50:8f:05:01:35:a7:b7:
08:6c:70:38:16:9e:4e:71:88:44:88:9a:74:a6:d4:
54:e1:da:02:e6:c4:9f:82:c6:09:14:69:95:5e:8f:
48:a0:59:1c:ed:cb:52:59:cb:f3:6b:7e:56:57:c4:
eb:e4:0c:b5:95:9c:29:dd:22:e0:ff:ea:d8:c0:9e:
b1:8e:22:fb:cf:78:7f:45:56:fa:d8:85:a8:86:00:
e4:a5:da:49:2f:c4:a1:db:cb:f2:93:df:8e:d9:8d:
a3:e0:33:b1:6f:10:56:64:64:18:24:2e:91:97:9c:
19:84:50:84:0f:c3:8c:e4:3c:f1:be:87:d6:36:8f:
b5:46:38:7a:29:ec:82:cd:c7:0d:5e:6f:71:e2:f8:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4F:57:F6:17:0B:0B:F4:EF:CC:5F:C2:A5:F5:70:4A:96:50:0F:28
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc8450f5-e5b5-43f0-aca2-5aa5247f6b9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:33:60:ea:8b:f2:5a:65:15:fb:05:c8:20:05:94:e8:fa:0a:
c7:13:31:a6:68:fc:1d:b0:59:9a:a8:92:5f:36:68:3b:83:54:
14:41:e8:18:e4:14:ca:3b:4b:88:46:85:30:a3:e4:57:45:b0:
4d:e5:5f:b5:dd:8a:69:ac:a6:15:52:85:09:a4:d7:b8:ca:ac:
06:6d:fa:93:8a:21:e7:6c:ef:45:68:59:d8:7c:c2:28:01:6c:
c3:04:d5:aa:28:0d:75:38:b5:78:52:ab:c2:29:2e:56:af:40:
49:7c:31:2f:34:23:1a:a2:95:54:b1:f6:93:f4:cf:95:b1:33:
47:15:b8:e6:03:96:2d:7d:c3:fd:b3:10:77:19:ac:4a:14:2b:
cb:5c:cb:87:e0:d1:99:79:51:f4:3b:5f:6a:92:5f:8c:eb:06:
36:14:1a:0a:44:58:85:de:04:20:26:13:9c:4a:cc:32:21:a3:
19:7e:81:b4:70:9c:bc:eb:d5:9f:f0:a4:da:69:61:b0:85:01:
96:88:03:a5:b4:c4:8a:16:d8:e1:81:d9:25:21:0e:e9:c5:c6:
35:56:17:26:b4:86:cf:91:32:e9:06:bd:89:b2:d1:c0:ce:26:
6c:b8:c8:36:1c:80:9e:59:8e:da:46:c6:ab:27:a6:2e:6e:19:
3c:d2:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:39 2025 by rpki-client