Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9142125-5a62-47e0-9551-2d4f79e3efcc.roa
File: e9142125-5a62-47e0-9551-2d4f79e3efcc.roa (raw, json)
Hash identifier: OhFQC3+KXBd54BD0PAbMEOgTYKnJM4TldQfxqZcCcaM=
Subject key identifier: 83:0A:FE:74:BD:CD:F0:98:27:4D:DF:18:AB:33:6E:C7:9B:25:62:AB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6E78185998EB26BCE2D638492992FC964AA9F6DD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9142125-5a62-47e0-9551-2d4f79e3efcc.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 8987
IP address blocks: 35.71.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:78:18:59:98:eb:26:bc:e2:d6:38:49:29:92:fc:96:4a:a9:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:7d:6e:ea:cc:b3:00:fe:8b:9f:af:9e:50:
8d:68:e3:0c:bd:d8:1f:2f:6b:c3:3d:84:a8:c5:fa:
bb:88:c0:0f:ef:0c:62:3b:e4:2c:2d:92:06:e5:e5:
16:61:8b:5c:e0:14:37:be:15:76:b6:04:be:98:26:
13:0a:53:31:cf:93:84:e7:7a:17:63:9f:1d:55:05:
c3:a3:2e:f2:50:a6:17:80:c0:5f:cd:8f:93:9d:3b:
55:fb:39:a5:3e:da:a6:c0:19:91:bd:9a:3b:ec:1b:
fc:33:5f:2b:12:fe:01:cd:62:c1:68:01:40:31:63:
50:ff:3b:f7:38:b8:53:68:88:bd:a9:77:11:b8:9d:
d9:28:b1:4a:b7:24:27:52:d1:af:cb:36:41:5d:04:
87:7a:0d:79:35:ac:e1:ab:f3:25:4b:3e:ef:60:a2:
70:8e:ae:34:35:a2:a3:71:e2:c0:bf:af:a4:f5:47:
15:99:90:9b:55:be:4a:91:22:f8:09:e0:51:63:81:
37:17:fc:d5:df:ac:ca:52:1c:79:77:09:c5:e4:1a:
37:ef:54:e1:60:a9:f7:40:d5:20:72:b0:ee:67:19:
63:b8:f6:9a:2b:29:01:e0:8f:34:d6:fd:e3:c8:c3:
9a:eb:9e:80:0e:36:5d:5d:a3:30:a1:5b:73:f0:ab:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:FE:74:BD:CD:F0:98:27:4D:DF:18:AB:33:6E:C7:9B:25:62:AB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9142125-5a62-47e0-9551-2d4f79e3efcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.71.115.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ba:6b:92:cb:44:cf:2a:e0:0f:6d:e3:f0:3b:f6:75:79:f6:
7c:cc:1b:75:31:73:f2:85:38:8c:06:95:07:1a:9e:f7:55:ee:
b8:28:2e:b6:83:e5:07:32:f8:77:13:37:74:bd:1c:0f:4c:89:
30:08:c3:01:37:4c:23:63:eb:01:9a:85:ac:2f:65:7d:5c:50:
8f:7f:4c:e8:8e:aa:fd:0d:fc:12:97:27:78:50:3f:ee:f6:db:
86:24:42:b0:94:81:12:db:f3:33:b2:cf:80:6c:06:6c:b0:d3:
64:9c:28:c9:61:3d:69:31:8e:3a:be:5b:1a:e0:b3:34:ad:b9:
b8:d9:8d:b2:d0:40:96:f7:60:3c:c6:54:40:0d:a1:97:9c:be:
62:8e:ff:7e:00:59:ee:de:69:55:c8:d0:42:36:7a:ac:a2:42:
19:fb:39:da:a7:a2:c0:6f:c8:3d:48:6f:4a:57:40:1e:85:4b:
2e:91:7b:15:e7:d7:6a:6f:64:34:3d:b9:a2:4f:f6:b2:2d:c3:
74:e9:a4:17:09:e3:05:8c:8f:de:e1:e6:6c:1b:8a:e2:b3:b8:
f4:46:2b:36:7c:81:94:03:1c:e0:cc:9d:07:98:55:02:03:c9:
36:a0:59:4e:d6:c8:c1:70:e3:3d:92:66:b5:9b:a3:a3:ec:e5:
93:68:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 10 17:28:34 2025 by rpki-client