Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/290764c5-d8b5-4ef5-a548-14fbec8dba2e.roa
File: 290764c5-d8b5-4ef5-a548-14fbec8dba2e.roa (raw, json)
Hash identifier: MBb9qj0TvHPYIqB5vODkL+mP8mLlQ7HcZ+QAptuAKpo=
Subject key identifier: 4D:5C:F7:1F:B1:BB:E3:DF:62:F9:E3:F1:BE:75:7C:08:C4:AE:C0:C5
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 5D72BC1300026010AFFCF7F694A0C761BCC54284
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/290764c5-d8b5-4ef5-a548-14fbec8dba2e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:72:bc:13:00:02:60:10:af:fc:f7:f6:94:a0:c7:61:bc:c5:42:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=f9adc2fa91f315c661e55aca0e937e6e5600bd7394e55ae953733d5a447f37cd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:7b:2a:d5:f0:3a:ac:e8:36:a0:9d:61:e5:
4b:ed:f9:f4:d5:15:37:f5:81:d9:64:30:e8:e3:51:
06:55:0d:f7:22:bd:e3:3c:8a:0d:75:32:9f:88:2f:
73:6e:18:f6:5c:f9:4d:5e:3d:0d:21:7e:00:13:ff:
55:20:f4:fd:a4:aa:13:2e:a0:e1:68:81:e6:51:4f:
42:34:a4:b4:1f:ec:c4:33:91:0a:e3:27:e7:d5:ad:
da:f7:42:e4:73:4d:20:76:9a:c9:94:ac:2d:aa:0d:
0a:10:2d:04:e6:bc:78:18:25:37:09:11:fb:af:73:
66:4e:e3:64:cf:f4:d2:0b:d6:7c:95:ac:24:6b:92:
9d:28:ad:f1:e7:50:73:20:3d:c4:b0:bd:1f:1c:80:
c3:b9:ff:1e:59:eb:48:f5:a1:7b:04:c2:4f:b9:d6:
74:99:d7:2f:40:66:74:d7:5a:a7:64:b7:43:d3:db:
cd:8c:08:6e:2c:0f:48:39:fe:19:9a:40:63:d8:bf:
19:c8:c2:3a:f0:c9:86:5f:20:cb:27:61:4b:95:f9:
18:a1:c3:e9:d8:21:c8:50:79:e3:20:e8:37:3d:57:
18:41:7e:9f:d3:8e:d9:55:dc:77:d2:32:6d:e5:b7:
c8:28:cc:1f:56:e2:db:bb:0c:80:e9:93:e5:9e:15:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:F7:1F:B1:BB:E3:DF:62:F9:E3:F1:BE:75:7C:08:C4:AE:C0:C5
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/290764c5-d8b5-4ef5-a548-14fbec8dba2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.6.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d0:0a:19:22:bf:f6:27:17:25:1d:fe:fc:5c:f6:12:ea:2d:
b3:5b:66:e2:86:98:2b:5b:50:2e:3e:4e:7a:0d:82:61:c6:9d:
94:80:b3:55:fe:78:f8:8e:b8:97:58:d4:86:3a:5b:b2:58:66:
65:9d:99:9d:0c:f6:85:4f:b6:d0:94:e8:a5:02:1d:d5:01:7c:
42:11:68:80:ad:3f:98:7d:b8:e5:10:e9:20:38:a3:9a:13:d2:
7b:f5:8b:0b:41:d4:df:5b:70:2a:cd:8c:69:d0:0a:50:da:94:
79:7a:66:27:ed:9c:64:28:a2:05:f8:7b:3d:3f:b7:f2:84:67:
9e:b2:ef:38:02:b9:70:e7:a3:1e:85:99:13:9e:d0:c9:5e:93:
55:cd:3e:f6:47:43:8f:0a:17:46:49:fc:9a:43:aa:ae:d2:fc:
1e:03:1a:51:4e:2b:4d:62:ce:f9:55:f7:a1:86:33:38:53:02:
73:30:e7:85:ec:0a:ab:ac:16:b2:9d:79:53:3c:3a:16:c4:34:
eb:3d:5b:33:bd:4f:56:7e:f0:72:d8:19:7c:6a:0c:88:bd:6d:
7d:39:9f:d3:e0:eb:bd:81:7f:6f:b7:ad:9e:c7:13:8f:2a:84:
59:01:97:9c:67:ed:0d:76:55:dc:fd:80:8a:7f:08:56:b2:be:
01:b1:ec:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:44 2025 by rpki-client