Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa
File: c4bd10f7-4532-468b-8647-e7dca834ad1c.roa (raw, json)
Hash identifier: KyJUFU5/uHrBwEq15zsttxL3397wpPpD0iYngx4tV1U=
Subject key identifier: 05:27:8A:F1:F4:47:7A:05:85:89:7D:E0:7E:CD:25:C1:2D:06:3D:2E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 1F6F2D15C7C8FB027F9FF0FDBFBF912587AAD542
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6f:2d:15:c7:c8:fb:02:7f:9f:f0:fd:bf:bf:91:25:87:aa:d5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=105d1a81fab642357a5ff7c2a9c7cd56e15e2b88ddf4457d6ffc8e1d16f28f61, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:8d:38:a8:e0:52:2b:5b:49:76:26:30:74:
67:a8:2d:42:78:ca:b5:b1:94:b3:94:63:0e:27:6f:
31:0a:64:8e:8b:d7:8f:60:f6:74:43:7c:a0:f5:e7:
0a:32:11:bd:65:94:f2:b1:2e:0a:13:28:96:25:fd:
cc:4a:f1:e6:6a:88:62:d3:7b:4d:98:db:14:66:2e:
4b:20:f0:dc:a1:8d:58:20:76:e0:79:cb:55:e8:c9:
d9:f1:f8:39:c5:29:a9:53:5f:7a:81:9f:d6:fe:21:
3e:b3:a0:b6:d4:66:60:f2:4c:05:91:40:91:2f:c8:
e0:aa:64:b6:29:ed:6b:28:e2:bb:8f:56:11:13:2a:
0f:36:c2:b7:97:be:99:02:7f:5b:a4:8a:b1:c3:82:
d7:d7:9b:5c:34:14:30:aa:00:cb:ea:df:fe:f9:41:
80:d0:19:2f:a7:3c:6f:6c:53:c8:33:4c:58:dd:4a:
4f:d9:09:32:d3:31:63:d7:53:9b:db:a9:8a:39:40:
04:43:a7:60:2d:ca:68:35:38:81:ff:45:a7:09:4b:
6d:36:b4:87:2c:36:20:fb:f4:39:34:af:94:cd:04:
c8:fc:c7:62:2e:f8:72:7c:4c:d5:23:86:8a:31:ff:
2e:c9:34:eb:93:68:7c:29:4e:ff:58:09:91:fe:4b:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:8A:F1:F4:47:7A:05:85:89:7D:E0:7E:CD:25:C1:2D:06:3D:2E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.12.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ce:0a:9f:d0:3d:d2:4f:ac:c2:4f:c0:ad:14:23:02:3e:70:
46:dd:3e:44:2b:36:c0:09:c5:82:1a:32:a0:c4:e0:e5:cb:17:
e3:0f:e9:8e:ad:23:f4:c9:07:28:f7:7d:db:2c:4a:9c:51:5a:
f0:8a:0e:8a:e6:a1:9b:93:f1:b6:af:d0:e8:07:78:fc:2b:b3:
c2:7f:13:61:a8:ee:62:a0:dd:56:d2:6f:4d:3b:b2:2c:4e:6d:
05:19:25:2b:fe:80:a9:66:0c:ad:e4:9d:c5:53:21:d6:c3:44:
29:32:44:46:92:2b:06:60:d2:72:3a:b8:5f:a1:af:be:5c:0d:
bc:36:35:ee:79:a8:e1:f7:27:e9:2b:c4:94:ec:bc:bb:9d:05:
2d:87:d4:16:c2:14:68:a4:c4:82:bf:59:b8:ef:e4:79:56:2e:
a3:5d:ef:53:99:10:36:71:a3:94:18:41:92:1c:9e:6f:07:56:
c3:55:97:38:b7:c3:fe:12:ac:a7:a1:f0:8e:7c:2b:69:98:14:
41:d6:1b:ba:cd:40:5f:bc:cd:48:f4:a2:d9:2d:07:48:05:06:
6d:cb:f6:e5:9e:95:1d:73:a6:75:f0:17:55:fe:23:dd:2f:16:
f0:0b:46:ee:50:a4:bc:16:4b:c9:60:b9:79:10:86:8c:f7:e9:
5c:25:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:55 2025 by rpki-client