Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7f949155-bd07-4247-ba27-fdd3a918eac0.roa
File: 7f949155-bd07-4247-ba27-fdd3a918eac0.roa (raw, json)
Hash identifier: yD1O/40H914HV1tcT5fNjof8mvGjgle9eVYWC7metOU=
Subject key identifier: 22:5B:99:63:0F:46:95:F8:86:EE:3E:4A:EC:74:CB:74:75:67:5D:BB
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 48CD95A7427C91EE0DE95D5A1F6C4995EC37E0D2
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7f949155-bd07-4247-ba27-fdd3a918eac0.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cd:95:a7:42:7c:91:ee:0d:e9:5d:5a:1f:6c:49:95:ec:37:e0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=0554a20b4b9cfef8cc66fa80ed7c0c08e135a0bb11c02a16e05e12ffda0ee9cd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:b2:e1:1b:24:b6:2c:7f:a8:3b:50:52:33:
2f:c2:1d:28:0b:0b:18:a3:eb:89:df:1b:f3:75:37:
fb:10:b6:44:f1:56:10:02:7c:c2:3d:10:db:6a:22:
a6:24:10:5c:7b:36:e6:6b:33:72:35:a0:c5:4b:63:
05:37:59:71:75:57:34:97:8f:ba:b7:66:58:8b:ae:
54:bf:48:52:48:83:f8:d1:ad:a1:a9:ed:fe:d7:70:
0f:9a:a0:69:4c:6c:72:df:7d:8d:9a:c3:f5:b3:b6:
59:d4:e0:43:51:70:e1:df:ae:06:ab:01:b8:04:7b:
bf:01:ad:ea:16:0e:8f:75:03:eb:91:b1:e5:70:d4:
d0:71:92:ac:be:3a:e2:90:1c:0e:de:7e:d2:95:05:
ce:86:b2:9c:82:8d:83:2e:16:39:88:d8:26:1b:8f:
0f:de:05:f5:ee:5a:a7:29:0c:6a:c6:6f:19:d6:f4:
66:f3:65:89:e4:3e:df:27:43:ec:a2:83:0f:2c:80:
91:b1:bd:d8:04:ab:7d:ca:e6:74:c8:e4:0a:79:39:
1a:37:25:92:1b:95:cb:9d:11:be:33:a7:03:45:d0:
07:22:da:d4:c9:1b:5a:b3:41:f1:81:87:49:cd:b4:
19:3a:19:59:ff:a4:89:da:9f:11:fa:46:c2:5b:4a:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:99:63:0F:46:95:F8:86:EE:3E:4A:EC:74:CB:74:75:67:5D:BB
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7f949155-bd07-4247-ba27-fdd3a918eac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:28:c5:76:d2:23:cf:14:79:94:6e:37:e1:bf:52:ca:40:6c:
47:05:a5:81:84:e8:18:9f:ca:8c:22:c6:58:15:66:ce:9e:18:
52:d8:c4:50:ef:52:cd:44:5a:25:2d:2e:c3:0e:29:09:de:6a:
c9:9d:d5:cd:e8:7f:fe:b9:67:18:23:aa:2c:44:83:a5:7b:17:
d9:16:db:5c:e8:38:8b:41:f6:37:a8:63:e8:02:15:1b:ee:79:
bb:f0:c3:ce:ea:bd:30:8f:4b:90:dc:f1:bb:ff:a5:92:2b:52:
18:d9:9f:e2:b7:05:0f:2e:be:22:69:c1:25:8f:9c:e9:56:40:
db:e6:80:f9:b5:73:6c:f2:1a:cb:8c:ea:72:9c:24:0d:86:d3:
97:7f:00:1b:19:1d:d8:17:cd:6a:14:59:cc:80:cb:87:3c:fa:
79:4a:e2:bf:38:1d:34:93:42:98:5c:3c:a9:50:ba:9e:1d:87:
80:e1:f5:e0:3d:27:38:5f:c8:44:04:c8:09:b8:41:e3:d3:bc:
b7:8f:5a:ca:46:3f:2a:fc:14:3c:fc:e0:23:d4:57:c8:ab:ee:
dc:93:44:40:ac:35:13:b1:b7:e4:90:cf:e4:af:3a:1d:0a:b2:
f9:58:1c:f6:09:5f:3d:c8:b5:33:d3:95:46:58:54:25:14:70:
19:e9:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:13 2025 by rpki-client