Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d712a7-f3ce-497e-aae6-90aa99ab8e9f.roa
File: 69d712a7-f3ce-497e-aae6-90aa99ab8e9f.roa (raw, json)
Hash identifier: 3ToY1GgLIEX/W3xshD0OosHSEpdJvyLHQlRl4ft6uEA=
Subject key identifier: 33:97:C4:93:C8:E0:1A:2D:EC:85:5B:D5:21:48:2E:C7:F3:12:FB:BD
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 3713F733A4BD54F43D712E554994930818568B08
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d712a7-f3ce-497e-aae6-90aa99ab8e9f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:13:f7:33:a4:bd:54:f4:3d:71:2e:55:49:94:93:08:18:56:8b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=00b2935b838e947abeb51f7ae0aff74b1cdb915b16e849a4e033dda5d3f2f0ea, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:1e:4a:8a:cd:8a:a8:59:ce:ee:af:1e:b7:
ec:53:75:2c:41:03:d4:81:73:22:0f:d8:ec:26:fa:
82:9b:b4:e8:83:ac:a1:a5:68:ae:55:e1:d0:ee:a6:
d7:bf:b9:07:df:c9:e5:9e:8f:14:26:fe:70:3d:f2:
7a:e5:ed:0c:9d:4d:f1:c3:a3:2b:b9:78:8a:06:21:
f4:b9:dd:10:39:1b:66:b0:f6:de:81:11:e1:fd:3a:
75:49:2d:32:79:33:16:24:95:1e:0e:dc:dc:c9:17:
5f:1b:24:d6:c3:d5:4f:0d:1a:d2:01:71:bf:10:ee:
0a:5a:66:ab:17:74:1a:25:ab:01:3f:63:0c:05:e4:
d2:5b:b2:ef:da:5e:b4:18:0c:ee:88:41:73:af:f2:
f5:2c:87:cd:90:e8:3e:b6:3c:41:f7:6a:6b:c0:c6:
32:f3:38:84:e9:70:a0:07:a5:7e:4b:ad:05:a8:e1:
7e:7f:47:e4:29:dc:41:b6:4b:d1:82:9e:55:3a:da:
a9:ca:da:fc:b3:28:1c:38:a9:d4:8c:02:03:2a:74:
b0:b8:ca:b8:07:ab:47:e1:56:7a:7b:76:98:c1:66:
52:a6:7a:c4:76:50:50:81:13:e0:55:a9:bb:cf:be:
7f:44:e6:fe:91:3d:c7:3b:d8:64:6e:21:26:e6:91:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:C4:93:C8:E0:1A:2D:EC:85:5B:D5:21:48:2E:C7:F3:12:FB:BD
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d712a7-f3ce-497e-aae6-90aa99ab8e9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.15.0/24
Signature Algorithm: sha256WithRSAEncryption
18:28:43:9a:8a:fd:82:33:06:5e:de:ab:8f:d8:95:0e:c0:19:
eb:ff:07:05:ea:19:6c:ea:ee:39:22:0e:92:c6:6c:b2:5a:9c:
98:02:b3:ae:5f:cf:7a:ac:13:d7:99:22:10:a3:82:93:04:1d:
f5:24:42:b5:d0:86:f8:fc:e2:a1:54:0e:c2:89:fb:62:05:67:
7c:2c:53:35:46:f4:c7:26:a8:c7:58:f6:ba:fa:eb:50:a2:43:
da:c8:66:f6:99:44:45:34:ed:22:56:91:6e:e3:6b:52:6c:da:
b3:4d:74:6b:b1:e2:bd:11:27:b9:7c:4b:88:1b:aa:e4:f8:21:
5f:71:4a:53:04:53:3c:79:9a:dd:d9:f4:2b:13:06:8f:2e:e8:
96:44:cc:df:67:3a:df:da:d6:22:29:00:e3:11:7f:0b:7f:11:
3a:e9:cd:74:db:c5:91:43:72:e3:f2:cd:67:9b:e6:e4:06:bc:
83:1a:c6:20:2b:63:8a:f9:18:15:61:ea:9d:f8:8a:0c:7e:8a:
d9:f2:82:46:3f:5a:b5:2c:61:62:bf:b8:4d:15:1e:f7:37:c3:
33:4e:d0:dd:b5:14:53:fe:70:52:21:9d:82:5e:1a:31:1b:e0:
42:f7:08:17:8b:d9:df:4c:43:bf:75:b1:e7:84:c0:3d:19:e3:
b3:71:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:59 2025 by rpki-client