Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e41be3ce-ed0e-4c7e-a9fd-4114901fa40b.roa
File: e41be3ce-ed0e-4c7e-a9fd-4114901fa40b.roa (raw, json)
Hash identifier: OjoYFyRe4+XWkhOV+4HZCvmoqvJ0FIJTfUpOjtS0keE=
Subject key identifier: 32:98:B4:03:E8:3C:C1:A4:FA:39:5B:57:D8:3B:4F:5E:0D:2C:56:02
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 5DB0D3FD6ABF5B9D1346DF2D3436811F71AB09D8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e41be3ce-ed0e-4c7e-a9fd-4114901fa40b.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b0:d3:fd:6a:bf:5b:9d:13:46:df:2d:34:36:81:1f:71:ab:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=4c14bb4997967e3c500b8535d12b8c5896953ec20f079131856b6ec062f58ea2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:58:df:78:d4:da:55:8f:c4:5f:7a:49:3d:
c9:f6:96:1d:65:51:11:06:37:a4:72:82:f5:e9:4a:
06:32:b4:ae:de:60:7b:19:85:fa:bb:16:22:3e:5c:
e1:a7:fc:90:63:02:3d:7f:ec:81:39:f0:bb:09:49:
1a:b9:67:bd:7b:b5:1b:19:67:e7:87:77:71:ab:07:
ae:6d:9e:32:e9:98:10:4e:e3:c5:51:24:f5:b7:b2:
fd:23:71:aa:c6:a4:ce:ab:cd:09:ef:7c:55:19:22:
e0:59:a7:1b:0f:3a:27:c9:45:24:6f:7b:6e:c6:f3:
49:45:17:79:9e:7b:3e:51:97:3a:84:af:5e:f8:63:
e1:ff:9e:7c:b0:95:fe:ba:00:03:e7:15:d7:a4:65:
cb:ad:55:a9:da:f0:e1:2a:8d:dc:0b:db:38:41:6b:
13:00:1e:88:b6:b3:bb:04:92:57:d8:4d:05:47:a7:
ea:30:53:8d:6f:c2:b6:27:d7:e8:4f:74:dd:70:b3:
70:82:04:08:bc:4f:d0:ee:0e:6c:e2:ce:9c:3b:0f:
d9:08:0b:aa:0f:29:ad:e5:df:ee:65:28:9e:1e:b4:
c0:b1:75:06:d0:db:6b:cd:e9:3a:be:cf:2f:23:52:
7b:59:2e:9a:db:ca:21:5a:be:ca:bb:55:b7:49:72:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:98:B4:03:E8:3C:C1:A4:FA:39:5B:57:D8:3B:4F:5E:0D:2C:56:02
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e41be3ce-ed0e-4c7e-a9fd-4114901fa40b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:2f:f8:10:43:4e:d6:51:ac:66:04:6c:43:fc:8f:dd:ff:43:
70:a7:b6:c6:36:24:9e:d5:54:79:26:ef:60:f5:c5:1f:98:76:
ec:6e:4c:73:48:c2:9f:94:b5:f9:fb:95:c9:35:e9:90:71:77:
c2:e0:b0:df:6a:85:e1:d5:44:4d:22:aa:a4:8b:f8:0e:52:6b:
66:03:e3:3e:7b:80:bc:4c:e9:e5:77:30:f5:a6:a8:67:e8:ab:
fe:82:74:05:af:48:2b:9c:82:94:32:07:76:c6:d2:b8:0c:99:
20:79:36:a9:c5:28:62:61:0a:dd:b2:18:8b:bb:ad:5f:0e:e3:
c8:70:86:f6:92:c0:97:fe:d8:ec:b7:80:53:96:d6:0b:91:73:
2e:3c:c8:7a:79:9a:84:7c:5d:18:83:82:96:e4:40:ab:6d:7b:
d6:17:89:55:b9:a4:41:3a:c3:d4:e2:80:15:81:44:b1:95:f2:
80:6f:ce:aa:3d:8e:a4:e5:59:fc:5a:55:8c:3f:71:7a:7b:d5:
41:cb:61:86:8f:70:fb:b4:2c:33:3e:ee:9c:ef:69:de:39:ce:
9b:bd:ce:02:17:5c:bf:54:54:4d:80:7a:2c:18:41:21:1f:d3:
8b:92:8b:18:d3:58:0d:60:8d:9f:ed:0a:8e:ae:a0:2b:30:c2:
1a:4c:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:00 2025 by rpki-client