Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1d5ca7d-454a-4bf5-bbe9-1e8e731a79a5.roa
File: b1d5ca7d-454a-4bf5-bbe9-1e8e731a79a5.roa (raw, json)
Hash identifier: BlykPCCtaBC0SBkMdsCHvdw0FSN83RmGVpJ97gOFACY=
Subject key identifier: 03:73:1A:A4:0B:6E:F2:77:88:3E:47:49:F8:E6:E2:91:AB:D9:38:CE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: EA7A1D8CC3FCAC1C05852E98A8B6C2F7B8E4E1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1d5ca7d-454a-4bf5-bbe9-1e8e731a79a5.roa
Signing time: Sat 22 Mar 2025 00:40:13 +0000
ROA not before: Sat 22 Mar 2025 00:40:13 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 7224
IP address blocks: 3.2.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ea:7a:1d:8c:c3:fc:ac:1c:05:85:2e:98:a8:b6:c2:f7:b8:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 22 00:40:13 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: serialNumber=5a7e305fd2bdae73c8f8d3aed2884879180e50bcb9f7e6fef0a1a7d2c87ead38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:4b:dd:ff:2e:49:5e:cc:6b:ea:32:d6:d7:
6e:24:99:17:03:f8:70:de:19:f6:4a:76:e7:b2:c3:
09:1b:c0:a2:25:cf:5d:2d:47:28:95:3c:a9:16:43:
60:1e:eb:88:d9:14:51:b7:92:50:c3:fb:05:1c:99:
da:17:69:d7:a8:1a:3e:00:29:0b:7b:8c:bd:07:12:
52:4d:ba:53:8f:e0:fb:a9:db:7a:03:0b:f2:58:6d:
36:d9:92:a0:6c:3b:c2:80:19:f9:0d:df:a5:42:7d:
7b:31:01:69:2b:a6:a8:a0:7e:bf:2e:80:01:03:60:
6c:2b:7b:93:ef:00:6b:bf:91:bb:37:f2:2d:61:55:
ba:8f:e2:53:3d:e4:4e:b0:65:6b:62:aa:81:93:dd:
a7:65:00:80:4c:57:43:54:79:22:fb:95:a9:76:f6:
1f:90:cc:2d:be:c0:12:89:9d:a1:81:92:38:ea:96:
04:b7:a3:1b:b8:fe:4d:12:4f:9c:54:e3:36:69:f5:
84:00:bb:10:85:77:b7:ac:af:6a:2c:ed:67:ec:6e:
35:e6:1d:8e:9e:c1:d7:8f:e9:0c:63:21:14:ef:33:
f2:9d:e3:a6:13:95:6a:be:fd:a1:76:c6:72:54:c5:
53:b5:4b:cc:94:ca:f6:2e:9f:15:d2:af:91:9c:28:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:1A:A4:0B:6E:F2:77:88:3E:47:49:F8:E6:E2:91:AB:D9:38:CE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1d5ca7d-454a-4bf5-bbe9-1e8e731a79a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.24.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4f:27:ac:25:69:e7:a3:83:97:61:7c:f8:8b:7c:9b:a5:53:
75:ce:54:86:30:64:a7:13:9f:22:70:e5:63:df:b7:ea:29:7f:
a7:b6:2f:93:51:69:1f:8c:00:23:09:f2:50:36:7b:5a:b9:6f:
77:06:fe:0d:c2:b7:f0:36:47:49:7e:da:30:60:ee:c8:9b:d2:
80:7c:df:1b:c8:d7:26:d8:9e:8a:44:7e:ae:6b:6e:91:45:44:
e2:70:aa:16:55:71:29:4a:7a:bd:c9:c6:a3:02:00:fb:34:9a:
cd:d9:4d:f4:65:1b:85:23:60:2f:b3:5d:95:75:d4:a6:2d:8b:
77:e5:bb:6d:a1:72:27:9b:14:a9:67:af:f9:c3:f7:0b:c5:2f:
d5:06:f5:76:59:61:7c:0d:e9:ac:03:7d:51:a0:d0:70:c5:c3:
d1:e9:86:a8:a9:25:ef:c4:c1:2b:9f:02:4d:c5:c0:1c:ce:35:
b6:c3:f5:f5:81:64:b0:46:2c:ce:6e:e4:24:d7:11:e3:02:a1:
bf:81:51:76:54:80:35:38:1b:89:68:17:45:65:d3:ff:f4:21:
8d:73:4e:4e:99:77:d9:f5:08:76:21:db:d7:51:e8:b9:bd:24:
fd:15:c2:80:6c:e0:9a:3b:b3:2f:09:a7:b2:30:1a:ef:8a:50:
3d:1c:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:48 2025 by rpki-client on console.sobornost.net