Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8cb466b5-31bc-4c4b-accf-5409fef9403f.roa
File: 8cb466b5-31bc-4c4b-accf-5409fef9403f.roa (raw, json)
Hash identifier: HjMGR0pcxtXZGpvbio7alc8SFR2Jeicf7DThT8Ba988=
Subject key identifier: A6:CD:49:4B:D7:62:B8:8C:88:22:D8:A3:54:1B:CF:F1:F6:63:9B:C8
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 09D94C25B05F5385627141361450C17E4E18B8F4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8cb466b5-31bc-4c4b-accf-5409fef9403f.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 173.82.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d9:4c:25:b0:5f:53:85:62:71:41:36:14:50:c1:7e:4e:18:b8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=1c141392a5cf5aefde11920b488ea2f762f6b4701593f1bc2ea70109c0fe42c9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:28:f2:25:ba:ca:80:47:f1:52:6e:8b:83:
e2:ac:35:e9:07:07:68:ec:97:88:a6:03:f1:2b:ea:
f5:7b:23:28:21:f9:c1:f7:12:ba:f7:b1:69:37:fa:
e8:03:c1:46:7c:45:e3:23:d7:b9:80:ee:a0:d3:a4:
2e:25:cb:81:62:d2:20:d4:37:53:25:58:ba:62:c6:
3f:38:96:0b:54:57:16:25:49:5f:51:0f:9f:75:2c:
3a:cd:7d:23:3e:14:fa:ea:a1:61:6c:35:55:7b:10:
d4:17:9a:e9:35:1e:a6:85:e4:94:41:ee:78:1d:be:
e8:74:73:e4:6a:24:3b:82:e0:dc:2c:5d:1c:a9:72:
f4:d5:40:e0:e4:73:1f:cd:8d:71:f5:8e:95:b5:23:
38:79:b4:b3:7a:3a:91:66:d7:72:f9:80:65:5d:5b:
6f:6b:b0:8b:cd:72:69:fd:f6:09:34:a2:9c:3b:b5:
05:3b:05:0f:ce:fb:45:5b:db:2a:c5:c1:28:d8:17:
85:bc:7c:f7:3b:32:65:b4:d4:46:59:2b:db:d6:e8:
cb:7f:f9:8b:f1:b3:e0:0e:3e:c7:db:51:b5:59:3e:
f4:e4:c6:07:02:98:30:59:a9:18:f5:57:4e:49:c4:
17:92:ae:73:17:78:99:ca:f7:66:8a:86:19:14:cf:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CD:49:4B:D7:62:B8:8C:88:22:D8:A3:54:1B:CF:F1:F6:63:9B:C8
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8cb466b5-31bc-4c4b-accf-5409fef9403f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:3f:d2:a0:00:01:af:64:4c:e7:45:26:c5:55:cf:6c:34:6e:
01:1c:9a:95:fb:2a:b4:70:b7:f0:08:96:66:10:19:f8:1d:24:
c1:3d:7c:d0:72:6c:e5:6a:e0:02:41:d8:41:d5:fd:9f:a2:4b:
b9:a2:f5:1a:2d:a0:b2:de:da:63:98:aa:6d:85:f6:d8:8a:96:
91:88:88:be:60:4b:d1:4a:25:3c:34:6f:ef:e2:18:ad:3a:37:
e7:48:bf:66:be:ab:6c:04:22:17:21:8b:33:fc:dd:01:ff:e5:
eb:3b:8b:71:82:e5:37:20:cb:23:7d:02:f7:c1:17:8f:66:73:
b7:d0:c5:93:3d:ed:47:8f:f0:af:9b:99:be:4c:14:cd:5b:69:
b4:8e:b7:5e:6c:72:1e:9b:b9:7f:8c:79:c3:99:0f:47:3c:04:
81:25:43:a6:15:1c:db:da:d9:34:94:94:64:b1:c7:90:5c:7c:
cc:54:f5:07:cc:4c:71:6c:83:a3:46:c8:fa:e8:a9:af:3f:e5:
64:47:71:0d:64:65:14:ab:84:85:5d:05:74:1a:15:a3:07:16:
fb:46:09:c5:ef:de:ad:8e:00:3a:15:a1:e5:a3:07:8a:88:c9:
a9:6c:9e:6b:05:b8:dc:5d:d3:fb:7c:85:26:01:d7:9b:27:dc:
00:3f:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:47 2025 by rpki-client