Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c0b0172-d659-4706-bab8-89b4e66cce65.roa
File: 2c0b0172-d659-4706-bab8-89b4e66cce65.roa (raw, json)
Hash identifier: GxZ2fU5wL3MzCazlKSXBSV2DTGsJMlbfk1/FGPcGnF0=
Subject key identifier: BE:FA:5B:AE:AB:93:AC:DA:D8:A1:49:60:3B:1A:F4:78:52:ED:DC:C4
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2B6EA94259AF662EBA1A54B137DC3B7BB11D6C8A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c0b0172-d659-4706-bab8-89b4e66cce65.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6e:a9:42:59:af:66:2e:ba:1a:54:b1:37:dc:3b:7b:b1:1d:6c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=e4f1b3af60ec99a8803ed87a458d1c2cf5b7f0e183971ca9fd3dc291927db653, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:a8:25:f9:73:dd:24:b2:77:4b:35:11:37:
a5:02:b6:fa:2e:83:6e:63:4a:57:83:e6:9e:ea:22:
ba:ac:5c:39:18:76:1b:b9:c5:85:4e:d4:1f:98:78:
e5:2c:c1:fc:d4:2c:2f:d3:7c:19:24:ee:2a:cb:ed:
57:b1:a1:42:2c:bb:58:31:6d:6b:be:25:99:d4:89:
d3:dd:7b:43:33:55:df:57:d5:d3:a8:d9:36:7f:7c:
10:77:30:97:df:99:1d:2e:b5:0e:b5:b7:4b:97:08:
9c:b6:24:76:de:cf:e7:0b:b9:2b:1a:f7:c9:6a:99:
82:0a:68:d0:aa:c7:36:4a:b2:f3:c5:04:48:f4:8c:
e4:e6:a5:64:cc:74:a9:19:26:2d:78:5e:99:e8:4b:
91:d7:15:73:9d:bd:8f:24:f5:8a:7a:75:fc:e9:fc:
3e:84:f0:b0:0b:1f:8a:cf:fd:84:d6:c8:8f:31:09:
5b:94:53:cb:20:f6:ef:bb:30:2e:ed:2c:e9:19:c1:
47:ee:ad:96:85:6b:8c:fd:fb:90:98:14:0d:3c:b0:
74:4b:5a:6b:77:74:42:92:42:7b:60:87:03:9d:c4:
4c:fb:04:dc:68:35:75:75:5f:e8:fe:d5:6c:a7:2b:
b7:c9:67:a5:70:06:e0:b4:ac:81:70:87:70:b2:ec:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FA:5B:AE:AB:93:AC:DA:D8:A1:49:60:3B:1A:F4:78:52:ED:DC:C4
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c0b0172-d659-4706-bab8-89b4e66cce65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.89.0/24
Signature Algorithm: sha256WithRSAEncryption
79:34:68:9e:5a:fb:52:e6:5d:63:98:f8:b4:2b:8b:84:ef:94:
c8:53:1d:dc:7d:16:88:8e:27:c1:5f:14:43:51:44:25:a7:57:
8d:f8:bd:5a:7a:b4:76:cf:e9:0f:e1:4a:5c:a9:40:b7:0f:5a:
2e:5b:66:eb:72:a2:ea:41:53:1f:97:56:24:58:50:78:fb:39:
c7:e6:9d:b8:cf:38:4e:f4:b1:7f:be:67:bd:85:0e:0b:ec:27:
39:45:f8:44:00:29:dc:87:a2:63:c1:e3:46:c8:0b:1b:0c:45:
2d:5f:37:bc:2b:1e:63:e4:71:38:29:8b:80:ce:2d:f4:ac:ea:
43:20:13:41:01:60:63:7b:34:6b:bb:57:68:91:02:53:8c:59:
75:2a:59:c2:e1:17:fb:a7:63:6a:0b:f6:b7:b3:8c:0c:9b:52:
02:05:fb:02:e5:57:0c:b6:ab:71:fb:82:11:17:fc:eb:bf:50:
bf:d7:80:25:d6:f8:5d:bf:b0:b8:dc:88:59:b5:01:4c:9c:f1:
f8:af:d6:9d:06:38:25:01:04:f6:c6:0c:23:81:74:f3:db:95:
bc:29:77:2b:55:24:89:ad:d0:70:dd:93:ed:13:46:9c:7e:cf:
c9:17:69:08:3f:39:66:6d:8d:af:ac:11:dc:17:e6:63:53:8f:
89:52:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:48 2025 by rpki-client