Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa
File: f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa (raw, json)
Hash identifier: Rn4MHCrAsXa4qC6x4VhALVocICIR36+X+kNtWILoEZU=
Subject key identifier: E8:66:08:5D:F1:95:47:1C:ED:06:B0:12:E0:BB:A3:AA:77:B8:82:1A
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 796B52E5D6A5AD995B8D756D21A1108FDA48759A
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.127.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:6b:52:e5:d6:a5:ad:99:5b:8d:75:6d:21:a1:10:8f:da:48:75:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=6089441cc269a906e8cc4323ba5f4f66bde580f7c7fb34abd35945ee74ede888, CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:df:1e:cd:10:47:4f:ea:0f:de:c8:ce:0e:
82:c6:6b:87:32:33:8e:a9:ea:a7:c5:29:02:b5:d3:
b6:12:5d:fd:90:d1:5e:2b:0f:d2:15:3f:a2:69:32:
81:8f:4e:28:1f:12:5e:23:9f:a5:6c:f6:36:14:3d:
2c:33:29:dd:84:46:30:b2:b8:d7:d8:fb:fd:24:fa:
7d:61:07:16:01:88:49:ce:83:e7:7e:b4:10:de:be:
af:93:58:e7:b9:30:4f:64:17:08:94:48:59:01:46:
9e:be:03:fb:49:4c:48:bb:f4:a8:96:6c:81:69:c6:
35:eb:92:71:f6:a3:99:2e:10:cb:1d:88:e6:0b:2f:
d4:e7:2f:b9:f6:5a:ac:5f:94:ec:98:25:f5:cb:82:
0c:31:47:f5:e7:b0:18:ec:64:12:a6:6e:33:7e:59:
ac:ab:15:14:8b:5a:00:58:5a:ec:e6:42:47:72:ce:
12:e6:f0:b5:9b:72:b6:cc:e5:7b:61:2d:c0:c5:6f:
3c:1d:17:fe:14:e2:9b:0c:5e:cc:1f:43:cf:81:26:
01:da:33:88:9a:2d:fb:08:83:0d:31:65:87:a9:8b:
82:02:b2:b2:32:24:08:fd:e9:9e:b6:3d:76:d2:88:
9d:78:2b:ba:da:39:39:63:12:4c:ad:4c:e7:16:cf:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:66:08:5D:F1:95:47:1C:ED:06:B0:12:E0:BB:A3:AA:77:B8:82:1A
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.127.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b4:f5:e7:f2:19:1e:01:4f:ea:04:93:cc:7e:80:cf:f4:f0:
ce:2a:a6:6d:70:41:4f:ed:3a:cd:33:e5:bb:86:b3:f6:ba:1a:
ee:f8:50:58:df:81:c5:06:df:9c:0a:d1:f6:0e:48:d5:dc:d5:
95:2c:12:20:0e:04:22:a7:64:56:f5:87:31:ef:de:85:a6:8f:
ce:fd:09:ae:c0:ce:58:1e:fd:e5:ee:d5:a3:cc:df:e1:70:2c:
f5:93:0b:18:3f:c4:d6:2c:60:5f:02:7f:07:45:e8:4b:fc:d5:
f7:07:69:f6:2d:e3:67:3b:1a:a6:65:40:54:f7:e1:d7:49:cb:
6c:a2:48:fb:52:01:f6:41:cb:4c:37:fc:49:b1:44:6a:0d:d9:
03:ad:65:49:f6:b3:41:31:b0:e3:3b:58:34:35:54:74:b4:a0:
f8:9a:54:88:23:69:57:a0:d7:22:49:58:e7:c6:d2:a9:e3:11:
83:fd:2f:f8:75:74:b5:12:29:18:31:0b:37:d7:d5:49:e2:a9:
13:d6:3d:bc:70:ed:5a:5d:81:53:8a:54:fc:28:e5:0a:2f:87:
37:78:97:f2:7c:7a:7a:69:f2:4f:92:ef:af:47:0d:38:af:a1:
bf:8c:ac:3d:01:2f:df:43:64:e4:7c:04:75:8e:6f:3d:55:86:
a1:2b:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:07 2025 by rpki-client