Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
File: e96848dd-3369-4e73-af27-2bec7ae42c0e.roa (raw, json)
Hash identifier: scj0u+BVHT049+V8oe7ZhYS7/xkhJNg/bXGXEH8jVqQ=
Subject key identifier: ED:71:AD:2E:A4:23:1F:B7:FD:75:CF:A3:B3:A5:34:F1:78:AE:C0:64
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4FEC1FDE9C5C1B97DC04ADED75DC3719D32D41E8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ec:1f:de:9c:5c:1b:97:dc:04:ad:ed:75:dc:37:19:d3:2d:41:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a094e0fa6f2cd2285284ac54cfda860c6d4688ed16a5df2327b8b8a084ab9885, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:1e:2a:9c:f7:26:f5:ce:62:22:61:50:d4:
9a:ad:a5:96:e7:27:e0:22:a1:48:aa:38:f4:86:4d:
fe:c8:05:c4:d2:a9:72:ac:e9:07:03:5d:c0:dd:a1:
62:47:dd:ac:53:43:e6:3d:9e:af:80:9c:9e:08:16:
e9:81:59:12:06:7f:8c:48:9a:c2:23:92:6f:35:2f:
66:37:39:c8:26:85:c4:b6:3d:28:19:91:30:17:e8:
f6:7c:0e:8f:ac:78:9c:6a:a6:98:b3:c9:03:63:73:
1f:93:76:b0:9a:ad:6b:c9:a5:99:8c:9a:9e:c7:0f:
22:5b:5f:2d:42:04:06:47:fa:40:81:29:ce:a4:d9:
98:97:70:d3:dc:13:34:cf:c7:17:9a:49:05:7f:97:
3d:79:73:c6:e8:d6:c0:39:4a:c2:91:2a:dc:25:8e:
b7:b6:2a:7d:7f:07:84:e3:47:1d:fc:fe:c0:e8:e3:
8a:09:47:c8:ea:8e:c7:2a:c9:43:88:df:3a:a6:9c:
92:fe:85:7a:2a:7a:76:e1:a7:df:e5:7b:6f:86:a2:
fb:83:8c:3b:44:3a:fb:c5:a1:d0:67:01:d3:fb:59:
46:76:8e:8f:e9:69:f9:33:cb:c5:dc:86:e4:c4:d0:
30:e3:be:b6:68:b0:26:18:3e:e7:06:47:bf:ca:18:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:AD:2E:A4:23:1F:B7:FD:75:CF:A3:B3:A5:34:F1:78:AE:C0:64
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c9:c2:09:c2:74:b5:62:07:88:e0:97:5d:06:1b:10:ea:4f:
26:13:e1:e3:05:24:d1:f1:aa:3e:a9:71:f4:88:38:aa:2e:2d:
6f:e7:ed:0c:a4:11:5e:58:9c:8c:d9:a3:88:9c:3d:c6:48:f0:
6a:8f:8e:4e:c1:ab:4f:88:e5:7a:a1:7d:e3:57:ba:7f:4d:00:
a4:18:7e:46:36:dc:5e:69:c1:9e:85:7e:74:66:db:f9:57:97:
66:f5:97:0a:75:08:57:d0:9f:8d:8d:9f:4c:b9:0c:78:10:78:
39:0e:ee:c3:b1:75:57:ea:a8:45:b8:bd:30:35:d4:cc:8c:bb:
75:7f:87:a4:8c:3f:8e:5b:99:b7:d6:5a:21:b9:8a:52:c4:43:
f7:b7:6c:d1:7e:04:4b:d2:9e:dc:d7:6f:dd:74:11:ea:bf:88:
8a:50:80:1a:fa:f4:4c:12:4e:b5:b6:5c:37:50:aa:cf:58:79:
11:c8:39:0d:ec:31:d3:09:35:bc:90:2e:60:57:58:05:3e:92:
a9:7e:e9:4e:37:80:af:e7:10:c2:96:4b:95:1c:9d:cd:92:11:
98:76:05:85:ef:5e:27:22:12:a4:82:03:b1:8f:2a:5f:52:3c:
c6:a0:be:ed:e0:16:e9:f3:d8:9b:4f:76:05:1e:be:ae:a1:90:
8e:e0:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:51 2025 by rpki-client