Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa
File: 1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa (raw, json)
Hash identifier: 3NgeE8aJh8mK0e83TmVdG/5xaohSPiZECFh0ICEbMRw=
Subject key identifier: C7:D9:58:0D:DF:FD:D5:9A:0F:03:64:9B:E4:7D:12:57:50:84:D8:B1
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 289258C3CE9E82EDF14FDBD35DD991EDCB76541A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:92:58:c3:ce:9e:82:ed:f1:4f:db:d3:5d:d9:91:ed:cb:76:54:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=7426fbe0bbd565fe73db5b3086f55b03b567b58f538c66c67fe59eb0349e7933, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:66:16:24:c1:e7:f6:97:94:44:29:c5:73:
d3:d4:c0:b7:fa:56:37:d0:cf:85:a1:be:25:ab:bd:
f4:09:55:9b:9a:76:16:89:67:ec:d1:20:95:38:03:
2c:09:b4:d6:33:7f:ba:07:51:11:bf:ab:e5:ba:a8:
f9:c6:2b:af:cf:93:40:f8:91:9d:c6:d2:cf:14:f0:
cf:fa:61:87:f4:50:ba:bf:eb:43:03:97:4b:03:9d:
61:b3:f7:fc:00:06:7f:14:97:fa:4b:53:83:07:33:
d2:06:c2:4f:82:97:4f:3d:9a:8a:73:6b:4d:72:ed:
f6:c4:5c:1c:9f:72:88:bb:a7:18:c6:9e:31:12:e7:
98:cb:9d:c8:88:71:1f:3e:43:82:b6:97:cb:bb:5c:
20:5b:63:5a:d4:df:ce:fe:f3:4a:05:f7:90:59:89:
3f:51:89:c0:3b:e6:3b:13:1e:6b:e2:fc:3c:0c:e6:
dd:5e:9a:1a:66:1b:72:78:1e:ee:a8:48:26:d0:c4:
39:d2:fa:15:eb:f4:1e:44:1e:be:ad:e4:06:07:b5:
6d:d4:93:c5:33:d2:3b:f8:17:39:2f:66:63:d6:9a:
a1:66:0f:92:82:57:d6:7a:7a:4d:39:8a:b6:8f:cb:
2f:84:ac:0b:a5:56:2c:b3:fd:4d:ba:c6:f2:ad:fc:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:58:0D:DF:FD:D5:9A:0F:03:64:9B:E4:7D:12:57:50:84:D8:B1
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.95.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4f:65:b6:e9:31:cc:ac:d9:6c:ac:57:6a:cd:c7:ef:75:af:
f6:1f:a1:c1:11:4f:e4:14:9c:58:0e:72:8f:76:41:12:7b:cc:
4c:fc:c2:ca:1e:95:09:f1:dc:83:a5:c9:b7:12:83:42:1e:c6:
c5:c2:32:08:a0:aa:6d:cc:49:d8:02:5b:40:82:e4:bc:ec:6d:
8f:c5:c3:08:54:06:69:b3:d3:30:9d:15:32:ce:1f:11:11:ce:
a4:99:fb:d6:70:ea:af:52:fc:9a:3b:c7:8f:be:69:74:79:1a:
eb:7f:28:e8:9e:fd:e7:13:0d:01:f1:a7:5b:70:0f:20:1c:f5:
7d:17:7b:c7:7b:d8:6a:a5:80:7b:88:1a:ac:8d:fd:f5:41:3d:
1a:65:ce:3c:6e:2c:05:f1:3e:e0:45:2b:3b:7f:8a:3f:b6:7b:
f1:23:03:26:f7:a5:a9:04:ae:d0:3c:3d:f7:bf:75:46:71:00:
b6:73:fd:75:0e:aa:4b:73:bb:e4:4d:19:fe:aa:4f:dd:82:b0:
dc:3d:88:c1:52:96:90:90:5c:10:b0:ce:aa:ec:50:a9:9b:32:
af:94:f7:af:0e:c3:e8:a2:eb:cf:70:b5:b2:8c:6c:80:a9:bb:
88:5d:1b:d8:87:61:33:02:22:3c:e0:0a:a7:45:e4:33:fc:b2:
ca:58:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:20 2025 by rpki-client