Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ba6cdb2-4752-4cba-b3ef-d76cfb4ad96f.roa
File: 3ba6cdb2-4752-4cba-b3ef-d76cfb4ad96f.roa (raw, json)
Hash identifier: 3OOYNLUUS81ex0nxjww9kEf1HHi6+uA/Hg6oU7dNl9w=
Subject key identifier: 99:FB:3B:F0:AE:14:D9:2B:C4:39:63:F4:21:2E:E3:83:35:24:B0:70
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 71E24EA669A28F5D10B5460EFEAD00A5AC7D700D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ba6cdb2-4752-4cba-b3ef-d76cfb4ad96f.roa
Signing time: Tue 01 Apr 2025 00:10:32 +0000
ROA not before: Tue 01 Apr 2025 00:10:32 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 150.222.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e2:4e:a6:69:a2:8f:5d:10:b5:46:0e:fe:ad:00:a5:ac:7d:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 1 00:10:32 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=86c86cb3301d6bc8782ea154c3b983b332cd225a21e94f38c18dd4642bc5b8c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:df:bb:b0:db:07:22:cc:3f:41:1c:4e:9c:
76:32:fa:aa:df:5c:0f:02:53:91:80:41:fd:68:0d:
d7:32:ed:f4:e1:93:90:3d:73:ba:3b:38:8f:a2:7f:
0d:e0:5f:f1:13:50:f4:76:fa:ba:86:3d:84:31:d6:
8a:89:4b:7b:94:79:8b:d7:27:bd:4f:c9:eb:8e:6c:
bf:bf:93:86:25:46:c8:c2:6f:78:ab:d9:f1:0a:b3:
70:8e:5c:a3:26:ba:e4:5a:da:d5:8b:79:d4:e9:2b:
a4:4b:dd:7b:df:19:8b:4b:24:cb:e4:dd:11:9e:2d:
60:53:74:7f:d3:86:42:ad:60:34:fa:28:39:f3:19:
49:34:0d:6a:68:67:a5:9c:e1:0e:cd:61:27:ab:4c:
39:f9:14:78:74:73:a9:ba:d2:a9:3f:43:93:40:ee:
52:2a:89:84:29:c2:32:98:15:a3:40:3d:f5:98:3e:
4f:b9:93:bc:c9:a0:11:0d:bb:9d:dc:6a:03:e3:2a:
c7:e8:c8:ef:c7:9f:63:66:aa:d5:66:18:42:ad:f0:
d2:79:de:46:4a:35:6a:65:3b:34:97:de:0d:36:c5:
b7:89:9f:7f:58:a4:7c:bd:35:e6:b1:13:77:3a:52:
46:98:a7:ec:76:48:e2:83:23:e3:40:c2:d2:41:d4:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:3B:F0:AE:14:D9:2B:C4:39:63:F4:21:2E:E3:83:35:24:B0:70
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ba6cdb2-4752-4cba-b3ef-d76cfb4ad96f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:18:17:79:4c:f8:65:dc:3d:13:27:1f:96:27:7e:64:9e:16:
dd:43:24:f6:5b:c4:9d:e5:da:6b:0e:d9:11:a1:63:7f:43:e6:
12:be:6f:dd:65:9e:e9:d4:37:4f:a2:ee:04:9e:8b:af:2a:21:
27:39:b2:a1:c6:f5:a8:15:eb:93:ba:d5:24:a5:41:74:ca:6c:
4b:00:57:d5:47:58:7f:3a:7e:4a:9d:4d:0a:6e:bb:5b:30:c7:
12:24:a9:03:c5:0e:f1:29:dd:20:b3:21:4c:50:ef:4d:ad:3c:
b6:2b:92:a8:e7:3e:24:db:f9:89:b4:d1:b4:c8:4a:90:6f:6f:
e0:21:37:2a:c6:81:01:e0:14:fa:0a:50:ce:93:9e:c1:d7:44:
6a:fc:83:5e:1b:3d:52:03:ad:7f:16:36:40:b9:f9:b9:55:37:
21:6a:98:f0:55:00:0e:0c:3e:9e:30:b7:26:ad:30:c1:38:61:
0d:5c:6e:3c:df:9b:c1:0a:28:8d:db:83:d4:0e:a0:27:7d:e3:
13:15:60:75:c8:59:54:cc:0a:34:27:4e:76:e8:81:7f:ee:e6:
36:20:74:b2:ff:38:4a:a0:6d:03:22:86:9d:e7:f5:4e:8c:9d:
d9:e1:0d:7a:c3:18:b3:ed:cd:b0:01:13:cf:a9:83:93:07:20:
eb:4c:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:39 2025 by rpki-client on console.sobornost.net