Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa
File: 36d19c61-2356-453b-bdde-185259d9b804.roa (raw, json)
Hash identifier: GzmxHqxCafxZYNWu9g3xJjE73ZerE3XJKw3yv/GVFQk=
Subject key identifier: D0:FC:B9:8C:EE:B0:DA:ED:53:A2:9C:67:A5:95:E3:54:98:FF:C7:92
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 46588BEB2A532BC852D7BF1A8F3D67761E41CA1C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:58:8b:eb:2a:53:2b:c8:52:d7:bf:1a:8f:3d:67:76:1e:41:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a377d37bf68dc2bcb2f20688926d6553fa898219afce1ee6740c986f6606bbd9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:a0:f2:d0:90:21:3b:30:b4:3b:30:23:ff:
61:53:07:84:86:93:2a:12:75:d4:fc:1d:45:e5:0b:
c7:a0:03:92:0d:8b:7c:c1:a9:89:fe:0c:ea:b0:79:
dd:8f:57:2c:ca:fe:c4:19:f2:d7:2b:0b:09:7e:03:
3d:f4:18:94:18:cc:ad:d4:9b:0e:6c:0e:8f:93:a0:
35:4d:f1:f7:83:92:8a:7a:75:80:03:63:45:a6:fe:
c1:f7:97:8d:49:27:a0:da:74:68:13:d1:ab:b3:42:
f4:30:08:d5:2e:3e:db:b5:30:b0:72:11:50:52:3a:
8a:0d:2a:68:6c:5d:94:af:86:e2:b6:b1:f3:6c:ac:
19:37:91:29:d4:17:76:cb:ec:8a:ca:5f:37:a1:49:
ca:1d:45:80:39:bb:5c:ac:c3:f8:bb:82:3d:e8:e3:
4f:f5:df:06:77:bb:1e:8b:8f:ac:a8:c5:e0:b5:bd:
ae:ce:4d:a7:c1:b3:7e:e6:e0:c9:e2:0d:38:b7:17:
8a:1b:90:02:d9:ac:24:0c:0b:e5:01:4a:f3:49:f1:
55:14:28:70:6e:58:53:46:7b:7f:94:8c:20:66:53:
b6:40:71:37:09:56:00:49:dd:55:58:b8:d9:96:6d:
7a:d5:9e:43:f3:aa:1d:80:5f:10:5e:09:2d:c1:92:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:B9:8C:EE:B0:DA:ED:53:A2:9C:67:A5:95:E3:54:98:FF:C7:92
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3c:7a:cc:1a:d6:7a:36:bf:4a:ce:d0:cc:a1:2c:04:94:f9:
c5:82:88:e4:35:d5:34:22:90:73:65:a1:e1:3a:c7:11:c3:2e:
10:a5:e7:23:9e:94:b2:48:92:9e:e5:71:8e:2e:e7:7c:1b:87:
3e:85:30:06:48:5c:df:a8:25:b8:90:20:92:12:89:5a:e6:2e:
35:e9:46:2e:e8:9f:cc:d8:67:f1:f3:99:db:37:3e:ba:1e:c4:
c5:4b:58:a7:84:2c:57:b2:ed:56:63:c1:e7:9a:75:49:06:32:
7d:70:6e:45:34:0f:e2:52:c0:d9:7f:62:58:2c:f2:3b:ac:85:
0a:48:8c:9f:61:63:7a:ad:e8:16:bb:e8:f1:7a:b7:99:04:f4:
4a:50:92:88:ab:0d:ee:bc:7e:29:00:1b:63:4d:44:5e:58:41:
e2:f4:ec:89:ff:90:31:65:01:31:4b:c7:03:b2:25:50:cb:0e:
19:de:38:aa:06:1c:51:66:5c:36:ed:d2:ee:72:77:11:1c:29:
0e:d3:a8:1f:c1:4e:43:b3:3f:bb:e1:4e:d6:b1:99:31:a4:91:
e7:86:c8:05:b4:9b:35:e9:20:85:47:dd:d8:af:77:e5:1c:e8:
73:a0:38:4d:34:b3:37:03:5b:b4:9a:47:75:ba:d7:37:c1:cd:
57:4f:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:56 2025 by rpki-client