Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f81a06d-c815-4f26-a7e4-79ad12b19938.roa
File: 6f81a06d-c815-4f26-a7e4-79ad12b19938.roa (raw, json)
Hash identifier: fsvxZGNCimafiVw1CnoeiBjNCyKhmIzb1Zyi3C59dsc=
Subject key identifier: FF:48:35:FE:8C:1A:BB:8C:97:29:08:0A:B3:92:EB:D3:16:EA:D0:64
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 06DCBF36317CA8C1D98DB0B32DD7244736BA95FA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f81a06d-c815-4f26-a7e4-79ad12b19938.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:dc:bf:36:31:7c:a8:c1:d9:8d:b0:b3:2d:d7:24:47:36:ba:95:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=4ab8bf3926c62a2801123687e2404022188c4ce237448b6e88b563fe524e3370, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:fb:b2:ec:aa:6a:2f:dc:dc:50:c4:cd:7d:
69:c7:4b:30:41:0b:5c:ae:44:c1:e1:dd:c7:e7:da:
fd:af:f4:96:41:9d:7e:76:86:45:e1:4e:af:70:16:
f7:60:3a:a5:c1:94:b3:aa:52:44:ee:31:bf:95:b3:
65:7f:67:b1:24:1c:49:c3:0a:4d:37:dc:49:7b:8e:
5b:6a:9a:dd:a4:c5:b6:39:10:97:23:29:2f:9b:4d:
64:22:20:1f:f6:77:b4:b6:04:e3:c0:91:8b:b4:ae:
3d:1e:92:1c:77:76:28:c5:3d:d8:5e:ae:13:8d:74:
eb:a1:f9:ec:33:b9:a2:b4:0a:a9:65:d0:8d:3d:97:
10:e9:47:5e:be:cf:9f:6c:71:66:a6:a9:ae:ac:53:
a6:c1:7c:48:aa:0b:16:6c:0d:72:cf:2f:b0:66:e2:
55:fe:27:92:26:e7:bd:f8:d2:97:07:d9:c5:13:a6:
ad:ef:fd:01:b9:2d:8d:79:d5:db:b1:ae:b4:c4:4e:
d6:57:39:2d:f9:48:e9:0e:3d:2f:22:7e:54:d7:f5:
6e:2c:72:be:38:88:ad:b3:44:ef:8f:f4:15:f1:34:
f3:84:bf:69:bf:60:0b:9f:ac:8f:07:e8:1b:18:9d:
84:0d:02:07:b1:44:44:de:34:4c:8f:8d:24:4f:c5:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:48:35:FE:8C:1A:BB:8C:97:29:08:0A:B3:92:EB:D3:16:EA:D0:64
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f81a06d-c815-4f26-a7e4-79ad12b19938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.64.0/24
Signature Algorithm: sha256WithRSAEncryption
32:21:5f:ac:f5:91:cd:68:b9:12:53:4f:51:87:1a:7f:48:ec:
8a:f4:a1:c4:23:55:b2:81:14:10:57:99:a0:e4:71:2f:82:f3:
6b:56:da:22:6f:49:46:78:88:7a:ba:9e:77:74:fc:bd:2c:3f:
46:c0:e2:57:b7:b0:5f:fa:92:76:fa:4c:e0:4f:19:ed:9d:80:
da:c9:09:56:e2:e7:1a:6d:e0:50:cf:fe:f0:a4:91:b0:c5:03:
68:76:26:1f:f8:bf:2b:2f:0e:a7:e3:27:ff:c1:ec:7c:17:a9:
7e:2e:a4:cf:6b:d3:63:34:af:d7:0c:b9:47:21:46:11:f4:8f:
43:b2:98:1a:48:b1:f5:10:4d:95:22:30:9c:68:4b:17:27:fe:
25:ec:b4:2e:07:ef:60:f6:5f:44:4d:81:92:35:c1:83:00:57:
7a:02:f6:05:6e:75:4b:47:cd:0f:08:5a:75:ad:0d:8e:d3:4e:
4f:5f:58:7a:28:14:84:5c:0e:7a:2e:09:60:fb:c6:04:0b:35:
95:3f:9d:de:c0:43:24:34:56:a7:ba:fa:e9:e4:fa:a0:11:d2:
70:39:df:c8:ab:d3:1c:34:97:65:e4:1c:ec:86:de:46:2d:b7:
ea:74:84:16:56:90:4b:09:5e:36:5c:e2:1b:7f:35:28:8d:f2:
35:64:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:36 2025 by rpki-client