Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa
File: c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa (raw, json)
Hash identifier: c2yUAveTmoiKFf1abEKWza3ltUZtlb2FDWT1bFpJsCw=
Subject key identifier: A9:4E:BA:41:18:1C:1B:98:B8:21:D5:87:51:CD:EB:5E:37:21:E3:F4
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 32FF80FE8AB2977D9A536985F996835109B0F8F6
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ff:80:fe:8a:b2:97:7d:9a:53:69:85:f9:96:83:51:09:b0:f8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=7a65533826550d7f015b04aaf475a741fffb26329712170c201e9c7e1ecdaba2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:da:4b:b5:ed:93:3b:d0:42:3e:da:9f:4b:
32:02:7f:95:10:f3:bd:ee:fb:e9:0b:2e:01:7f:74:
ff:36:4f:3b:f3:c7:88:96:9f:60:8d:5d:71:75:f5:
30:50:94:73:0d:6f:68:6c:eb:86:ee:da:df:70:be:
ac:68:d5:40:97:2e:01:53:20:71:1e:ce:75:36:2d:
9e:39:a9:25:be:5b:28:86:80:49:a8:0e:67:b6:71:
a2:96:2e:f4:fa:51:ba:e7:a2:30:a2:9a:0e:ab:e5:
0d:75:48:42:66:0b:98:3f:76:59:d4:f7:0b:a8:bc:
8e:97:a2:5b:89:9d:b6:5c:dc:79:26:ba:06:bd:12:
5d:60:76:d3:8c:53:15:a3:eb:ae:0b:b7:2d:90:d5:
0e:9d:b8:4c:fc:f8:a3:cf:ee:2f:5e:83:4c:a7:fc:
82:51:52:42:19:d9:f1:f2:a8:4d:ea:4f:81:91:fb:
73:49:79:0b:bf:3e:c4:6c:77:46:89:a0:2c:35:b4:
e0:1a:d8:11:d8:cf:c7:fe:d9:d3:f3:4f:64:66:d5:
55:1a:f6:27:cf:b9:43:3d:cb:88:c5:7b:55:5a:cc:
8c:fa:8b:e2:29:d5:5e:36:f1:d8:31:31:cb:31:ed:
84:b8:bf:95:3d:0e:fe:47:83:a9:40:42:06:fa:51:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4E:BA:41:18:1C:1B:98:B8:21:D5:87:51:CD:EB:5E:37:21:E3:F4
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.10.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d0:20:dd:d7:50:b4:d7:08:d5:cf:80:37:49:ea:13:85:33:
2c:71:a0:92:8c:a8:5c:c6:11:34:36:bd:43:5c:87:1f:a2:c6:
ed:ac:ba:5f:7e:8e:89:92:40:29:e6:58:8b:de:26:47:a9:9f:
48:33:45:85:93:b1:c4:f4:21:fc:93:5b:86:21:e4:9f:71:5a:
e9:5a:70:11:a3:f9:5c:9f:02:2e:4f:53:eb:d2:ea:24:12:28:
33:a2:e2:e3:09:23:14:73:dd:be:84:c6:a5:71:a6:96:f6:97:
16:27:ed:a4:0b:ed:62:f0:f3:14:bc:c5:f0:08:c8:0e:b3:29:
b1:c1:dc:0d:16:68:93:4f:a7:30:e0:74:dc:db:bc:0c:2b:7b:
b4:6f:ac:ed:91:88:89:41:f8:77:d9:f1:73:c8:0a:60:00:d4:
78:30:0a:3f:aa:6d:6a:d7:b3:bc:51:ab:3f:c8:65:d4:8e:df:
cf:5a:eb:13:df:3a:0f:f6:35:f9:8d:fe:b5:86:0a:ef:9b:a1:
7e:b4:3d:b5:0b:1e:fe:ef:64:2f:e1:a0:a3:91:0d:db:1e:a6:
dd:7b:01:f4:f0:9b:86:1f:c4:ab:c8:fe:c4:7b:6f:42:75:aa:
60:17:33:2f:ee:97:af:03:31:3e:fc:ec:8c:2f:cc:88:e9:43:
b0:af:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:19 2025 by rpki-client