Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd5a24d8-c5eb-4bd2-83e6-fb8221304409.roa
File: fd5a24d8-c5eb-4bd2-83e6-fb8221304409.roa (raw, json)
Hash identifier: 9rZ9jzATZdWQDuHQQln8Gt+JDyDnZIfODGC8Ned3yEk=
Subject key identifier: 4F:12:23:45:F0:8E:2E:CE:F3:2B:8C:83:5C:F5:F5:28:C6:6B:D2:94
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 53236FEAAA6955C2721CF6E619842039EDE8DDE7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd5a24d8-c5eb-4bd2-83e6-fb8221304409.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.124.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:23:6f:ea:aa:69:55:c2:72:1c:f6:e6:19:84:20:39:ed:e8:dd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:81:c8:16:35:b3:6a:55:a2:cd:df:1b:3d:
11:a5:54:b5:8c:dd:d8:e7:3a:f8:fb:02:6c:09:9f:
7b:b8:9a:c0:4e:8a:7d:92:56:08:8d:a1:d6:34:1a:
6a:10:0f:ed:f5:a6:86:58:e2:d7:a8:ba:08:b8:a4:
12:77:76:0c:b0:a1:52:4e:f6:6f:da:6f:b1:2d:94:
27:2c:c7:b9:a4:94:d6:7e:8e:79:54:0c:6c:b2:6a:
90:87:34:4b:d8:98:f0:af:7d:43:c6:cb:6b:7d:36:
ac:30:5d:4e:a6:33:db:71:3a:57:9c:a3:13:5f:4d:
08:18:e8:27:11:8b:d9:63:a2:48:e0:33:41:c1:95:
2a:be:95:c9:58:08:0b:83:42:2a:f8:ba:47:9f:92:
73:ec:c4:db:83:e2:9b:ef:db:1e:0b:d2:f9:ce:41:
c9:07:33:0a:d9:d6:0e:72:60:08:68:52:23:81:6a:
3d:54:94:d6:63:e8:ce:f7:fb:d3:f2:5f:67:d9:52:
92:85:94:5c:27:af:8b:90:44:0e:e0:e2:b0:87:7d:
de:3a:57:5a:e0:03:f3:3d:0c:ed:ff:f6:8d:95:79:
35:d7:b2:df:03:e7:fe:15:71:d0:d4:c2:a4:df:91:
92:ec:c2:5f:f3:92:66:7b:e7:2f:bd:41:13:c4:a2:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:23:45:F0:8E:2E:CE:F3:2B:8C:83:5C:F5:F5:28:C6:6B:D2:94
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd5a24d8-c5eb-4bd2-83e6-fb8221304409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
8a:26:9f:ab:2f:27:aa:7a:ae:ae:d6:71:5a:d1:eb:1b:ee:8f:
5d:e2:3f:b9:07:81:b3:ca:d2:7b:c5:c0:44:11:b4:18:81:e0:
3f:12:b6:36:90:6d:ee:90:71:e5:4b:94:f2:36:b5:80:07:28:
23:ce:22:5f:f4:f4:73:b9:65:30:84:31:d1:4f:ea:18:97:73:
bf:01:60:6c:9d:ef:ad:f7:57:65:c6:a5:15:41:3b:aa:70:b8:
aa:c8:42:ba:94:8e:94:96:b1:77:b0:91:40:70:66:41:3c:8a:
17:bf:e6:fb:63:de:49:2b:86:28:54:c6:03:7a:2a:15:03:41:
84:3b:dc:60:30:c3:a0:a3:02:28:ab:8c:fb:f1:dc:95:c1:3e:
79:4d:79:cf:58:9e:15:65:9c:86:57:f6:ff:22:4a:49:c9:6c:
56:e9:7c:47:16:d5:bf:da:f5:05:99:54:16:9a:7e:b0:09:90:
ba:3b:31:e1:c9:37:39:5a:b6:31:ba:0e:45:9f:16:d5:80:d2:
47:67:50:df:ec:fe:ea:62:b4:91:81:be:ff:32:29:e2:9d:a7:
4c:11:aa:74:eb:b8:55:8c:75:5c:ab:be:01:ab:23:eb:ee:52:
5e:96:a7:67:9a:6c:75:86:f1:5e:d6:bc:b0:f3:de:18:3a:05:
53:aa:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:12 2025 by rpki-client