Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac9bd65e-6772-4413-8b8d-83e7863a2020.roa
File: ac9bd65e-6772-4413-8b8d-83e7863a2020.roa (raw, json)
Hash identifier: 95RA9aMMN4wTEWvlfFLg63XWFz+0GiwsVoSVFQohHaA=
Subject key identifier: F7:9D:A7:2D:5C:44:F2:45:DA:EC:8D:1D:BF:9A:20:A3:2B:00:5B:F4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2795BDEDF335F771D0E2DE3B2046CFB8C6546C48
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac9bd65e-6772-4413-8b8d-83e7863a2020.roa
Signing time: Mon 31 Mar 2025 17:21:39 +0000
ROA not before: Mon 31 Mar 2025 17:21:39 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.196.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:95:bd:ed:f3:35:f7:71:d0:e2:de:3b:20:46:cf:b8:c6:54:6c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 17:21:39 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=8f3d16e356851fefe0d614dc5acff8033044cf533b08c76636e330ae7fed9d70, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:7d:9e:7c:1a:7e:e1:e4:ba:c4:f8:b3:c7:
97:00:ed:7a:5a:2c:09:cc:61:eb:c6:45:dc:29:7f:
09:8c:72:0c:5e:cd:2d:fa:e6:82:99:a2:5f:f1:91:
05:4e:40:5b:3c:29:89:a6:1e:0f:fb:39:7c:3f:b8:
27:cc:bb:6c:ff:d3:a5:8d:cc:77:bf:ff:ea:0b:15:
ea:71:25:4c:52:9d:d6:03:23:52:6a:a7:a0:63:24:
71:51:9c:d3:fe:31:cb:d0:fe:50:5b:b8:a8:4c:23:
fb:49:be:c7:07:c2:8e:28:b2:5d:c5:e8:84:1f:f0:
6e:f1:29:4a:99:80:7b:ea:c9:49:1e:58:d5:5c:f5:
ac:a9:8d:dc:f1:2f:26:ba:a6:85:d1:70:ed:85:1f:
19:7b:5e:83:42:cf:0d:dc:2d:6e:66:88:b3:df:d8:
31:93:d0:65:b5:da:57:e3:d6:a6:9d:92:d2:91:ab:
e1:4d:50:cf:30:34:67:53:d3:ac:49:e2:b7:32:df:
83:78:ce:8d:d7:05:c4:1b:ac:2d:80:37:83:7f:a3:
7c:02:0c:42:16:02:4b:8a:bb:b6:fe:19:8e:76:cf:
2b:e6:d2:93:2b:0b:62:33:1f:d1:00:18:80:e6:3d:
ea:58:7f:3f:e1:97:18:07:6a:09:8d:d7:a5:f6:6f:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:A7:2D:5C:44:F2:45:DA:EC:8D:1D:BF:9A:20:A3:2B:00:5B:F4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac9bd65e-6772-4413-8b8d-83e7863a2020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.196.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a3:a7:a5:94:df:a9:4e:b8:08:f6:a5:34:c1:e6:ca:a5:46:
9f:37:8a:fa:aa:87:5e:f6:70:7e:7d:71:a8:6d:ba:07:5e:3a:
e1:d6:ee:31:87:e5:bb:f3:19:77:c5:68:ec:f4:9f:6b:e6:b8:
08:07:99:ff:a3:ab:5e:ee:db:10:81:d0:35:b2:98:9e:96:1f:
24:16:c8:49:67:9c:c0:62:47:55:c5:b4:99:a0:c4:7f:9c:4e:
2c:39:57:94:98:00:75:29:56:f4:8f:21:22:91:6e:b7:60:6d:
f8:e9:ef:cb:6c:43:8c:04:3b:fc:e3:ad:6e:37:f6:04:81:83:
83:74:0a:94:f1:58:0a:51:61:44:c9:89:3f:9e:c5:f4:9a:8a:
5d:be:96:dd:83:f7:af:86:f8:09:c0:af:cb:84:6b:27:7c:3b:
f1:9f:78:29:c3:91:c8:09:25:7a:4e:40:4c:9c:15:60:be:bf:
19:05:fb:0f:4d:3d:8e:5e:e6:d0:09:13:d6:12:25:55:fb:33:
82:0e:90:3a:f2:1f:d5:52:b3:a7:aa:d5:a2:2d:49:ab:7d:22:
1d:7d:b1:9e:30:7d:70:37:32:d3:f3:11:95:bf:4a:25:74:b4:
6d:c1:b2:fe:2f:07:63:ed:eb:ab:52:fd:6c:23:cb:5f:6e:66:
45:05:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:48 2025 by rpki-client on console.sobornost.net