Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa
File: 9a3e33fb-72cf-452b-86f9-913d47674dfa.roa (raw, json)
Hash identifier: bcGtYVDmClHpn3H0e7rIwnEsnIIBrW99F7NumLPbJhk=
Subject key identifier: 2E:DA:34:DA:BC:A7:86:29:03:B6:75:ED:8F:2C:77:65:47:28:75:91
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2C3251D00F19FDCC2C5DC949589E997F96C780E9
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:32:51:d0:0f:19:fd:cc:2c:5d:c9:49:58:9e:99:7f:96:c7:80:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=cfd2a0dc5fa696c8d3f4096ee3ea3919694e8af0f5c7109609e5e46fded27478, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:3c:c7:d2:19:c3:2e:da:fa:28:e5:8c:23:
f5:d9:19:28:e2:4a:61:47:14:20:71:a4:fe:c8:8e:
82:9e:72:0b:f4:75:a8:3e:f3:85:d6:af:99:bd:78:
30:e0:a3:e5:e3:a0:9e:3d:2d:d7:c9:db:e3:ad:de:
ce:d7:1a:f7:7c:2b:ca:39:71:bd:ab:85:41:18:05:
e3:ac:70:69:38:37:0d:d3:10:d0:b1:34:49:4a:e4:
70:37:31:3a:ec:a7:12:8a:f3:c5:2e:fa:a6:f1:46:
e2:c9:45:64:e4:40:4d:c2:55:1c:e4:b8:5a:59:6d:
72:db:a3:5d:93:94:a9:94:1d:c0:7f:56:cd:1e:ff:
51:00:fc:17:85:4a:c4:25:92:22:fc:26:e5:00:53:
83:9c:66:a0:fe:85:0d:64:9f:fb:7c:5b:ed:22:f7:
41:c6:ca:55:9e:87:81:bb:f2:34:17:9c:d9:c3:14:
1a:67:0b:35:96:0b:a5:0b:7e:ba:b6:60:aa:25:db:
df:a8:37:60:96:ac:98:6b:2d:e6:87:c7:9b:f2:63:
fe:de:0b:15:7d:96:95:7e:cb:d3:81:8c:3c:be:6a:
d2:a2:c7:d1:18:15:54:f9:e6:0d:18:ec:7e:8a:71:
8c:bb:24:66:23:ac:03:f4:9b:99:87:f5:71:36:58:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DA:34:DA:BC:A7:86:29:03:B6:75:ED:8F:2C:77:65:47:28:75:91
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.13.0/24
Signature Algorithm: sha256WithRSAEncryption
46:7f:15:34:09:8f:b6:3e:9d:92:86:6f:e0:d8:83:21:7c:8a:
fb:40:55:fa:b2:d0:fc:d4:6e:c6:96:86:ac:12:d1:2c:f1:db:
95:cb:7a:2e:5f:02:b0:8d:1f:ee:87:69:61:b1:c6:b8:70:a1:
56:0f:06:9a:1b:46:34:3c:cb:cf:f1:2f:43:9a:bd:18:7a:f5:
ab:b8:08:a2:3e:99:e0:84:1c:8c:23:e7:db:d3:42:d4:c1:73:
20:92:52:dd:22:12:f1:ac:00:ee:8a:56:9e:59:94:8f:08:58:
de:38:bc:47:dd:36:d0:a6:af:a0:1d:b5:8e:3c:57:72:1a:20:
b9:18:bf:31:10:8b:e9:9f:63:a2:d3:f5:c0:08:1e:32:d3:f7:
6a:e0:6a:73:25:11:ba:e1:7e:9e:96:60:d9:5d:14:85:7f:80:
a1:97:6e:a4:81:9a:62:85:40:d4:6f:8a:1a:12:e8:66:a8:4a:
57:5d:1c:6c:e3:c3:26:92:75:5c:05:90:25:41:33:c4:a4:30:
04:7d:4f:bb:b1:c6:ee:3d:df:ce:bd:42:ae:ba:53:24:6b:8a:
d8:4c:b6:7b:5c:55:4a:f3:8c:4d:8a:3e:b0:ea:df:83:34:be:
53:ed:05:5f:3a:ff:8f:d0:fb:10:cd:b4:0d:e1:41:a6:da:49:
f5:b0:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:57 2025 by rpki-client