Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa
File: 11945389-cb8d-4ce5-b182-8c948fa9f46f.roa (raw, json)
Hash identifier: IysaGflY9HEGhWo3UaXDY8DEVJbPglNczW9wudkZwiQ=
Subject key identifier: 4D:D3:4D:6B:DB:39:D7:75:B6:D5:8D:0B:A4:B5:2F:05:F8:54:1C:3A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5B2DB5A1858F77605629574332BD76BF76E6FF55
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa
Signing time: Mon 31 Mar 2025 16:40:19 +0000
ROA not before: Mon 31 Mar 2025 16:40:19 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:2d:b5:a1:85:8f:77:60:56:29:57:43:32:bd:76:bf:76:e6:ff:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 16:40:19 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=5e25824fbf6b8390640c790dfacbe7f9854cbe4f6ed2d6391d144a16044eafad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:9d:42:41:8a:1f:29:9c:53:0d:6a:72:c9:
2f:d6:dc:36:bc:35:35:7c:b0:75:0a:32:b0:bd:9e:
cc:3a:ab:11:7e:f2:8f:28:81:1f:9c:97:19:c8:4e:
f4:40:c2:55:2a:c6:c9:6c:33:04:40:24:e4:47:49:
6d:a5:cd:d8:a7:c2:d5:09:13:c1:99:22:9f:40:f7:
70:7d:2e:a9:37:31:04:8f:54:ba:6f:24:9d:4e:a7:
f9:15:2e:a7:95:b3:14:ba:78:c2:5c:b3:62:23:c7:
6b:7b:65:8b:20:f6:24:67:32:da:d2:02:eb:09:05:
3e:45:c8:94:c4:8a:a9:88:dc:98:f5:92:bb:2d:58:
ca:6c:eb:a3:ff:de:b1:7d:ba:46:f6:ed:96:4c:98:
b3:6a:6e:de:f3:11:e1:45:a0:7c:29:4f:7e:29:24:
26:cd:2f:50:84:ac:02:56:cf:be:bf:8e:9c:e8:0d:
f8:9f:a3:aa:67:c4:c9:10:c0:55:86:df:31:39:55:
90:d6:bb:2e:66:16:31:c8:3d:a0:38:95:36:96:20:
ee:43:55:d5:62:d2:0c:9c:1a:9e:5f:9a:b3:86:46:
9e:22:69:12:9c:09:d2:c0:43:28:ec:65:49:97:73:
26:3c:0b:3f:5e:0c:5e:a3:f9:b4:85:24:5f:da:a5:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:4D:6B:DB:39:D7:75:B6:D5:8D:0B:A4:B5:2F:05:F8:54:1C:3A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:9b:08:fc:e5:54:28:ab:79:13:63:f3:c3:6b:a4:29:a0:e7:
79:8b:4e:d5:1d:71:bb:cf:bc:44:1b:ff:75:4a:b2:40:bb:40:
12:59:89:2c:25:6b:43:30:c5:d0:8e:ee:a4:84:45:01:d1:7c:
46:12:b0:07:ec:16:b2:31:9d:63:3b:e8:67:6f:97:70:47:86:
2f:a3:99:df:df:49:ea:87:d5:2d:25:be:88:63:f4:b3:05:c3:
06:a2:67:0e:46:cd:00:fe:8b:06:39:8f:00:97:f5:62:67:a3:
07:30:a3:5b:92:93:31:ee:eb:a0:ca:04:a6:ca:ed:7e:85:da:
f4:21:a6:64:aa:4e:81:e7:86:e2:09:bf:7e:cc:b4:1c:41:51:
33:3f:f2:32:16:0d:d4:b3:8d:89:bf:2e:ce:93:db:a6:ec:b0:
41:bb:70:a3:6e:0c:01:04:86:5e:11:71:2f:84:74:cf:08:26:
6d:5a:39:06:88:e0:8c:71:49:21:dd:5d:35:b7:51:7c:9b:ac:
66:48:33:8f:54:24:0e:4b:74:31:cf:e7:61:1e:41:ff:52:8f:
ff:a6:1c:ed:d5:a8:43:8e:bf:3b:03:65:27:eb:d7:c5:8b:83:
ef:4c:43:6f:30:d9:4b:b4:b7:57:da:4b:b6:30:79:37:43:d9:
33:61:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:36 2025 by rpki-client on console.sobornost.net