Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
File: 27e99577-d3d4-4681-953c-071c09e6aecd.roa (raw, json)
Hash identifier: HcrPeeStzewzwt6MlnE133m5ghLb+tTUENueZL48FBs=
Subject key identifier: F5:2C:C7:CB:3C:9E:21:91:3D:11:82:6F:64:29:D1:7D:AF:EA:36:A0
Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial: 558973AADB310345D7225A767E00F91A2F895A95
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 184.169.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:89:73:aa:db:31:03:45:d7:22:5a:76:7e:00:f9:1a:2f:89:5a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=7dfd176f765cbac3a7372e56570dc5a9295833f403c43484a81548cbc954e216, CN=71c3876e-b944-4600-92c7-cec33d89523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:42:02:94:19:28:9f:55:47:fb:a6:39:95:
14:5a:ed:c7:57:8d:7e:f0:a1:93:56:c1:0d:e5:59:
5d:f5:b5:3d:ba:7c:f8:91:7a:0f:65:41:cf:15:4c:
ee:2a:f7:03:cc:f5:01:52:9f:48:42:dc:b5:dc:dc:
b0:7d:00:8f:03:22:17:25:85:ea:f4:00:e2:08:6e:
74:c7:06:35:3d:5f:64:16:42:ad:e8:da:e1:d2:4d:
75:75:b9:96:b7:d5:bd:d6:f9:e7:be:2f:b3:92:cb:
1e:b5:2c:6a:91:db:d9:59:08:0a:15:b3:ae:27:be:
e9:ca:02:a3:22:a3:64:d3:72:5a:b7:ae:3e:c5:e4:
9d:70:9e:ae:bc:39:c0:96:81:01:7a:1c:f8:10:23:
25:47:1f:3a:a2:29:86:3f:86:93:49:7f:46:8c:48:
a6:34:5e:ef:76:12:b9:12:f9:45:71:a7:06:23:29:
32:29:99:e8:b6:01:92:66:96:81:8b:9a:56:4d:28:
47:00:8f:5b:73:1b:3f:d2:c2:ed:d9:fe:a9:2d:64:
c4:05:c2:76:b6:58:0a:c9:30:75:3a:60:9a:f1:af:
69:1c:c4:c7:7b:26:b0:7b:5a:3d:92:0d:52:ac:34:
d5:fe:56:45:ec:c6:d4:d0:c3:83:8c:b5:ca:95:0e:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2C:C7:CB:3C:9E:21:91:3D:11:82:6F:64:29:D1:7D:AF:EA:36:A0
X509v3 Authority Key Identifier:
keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.169.128.0/19
Signature Algorithm: sha256WithRSAEncryption
67:82:aa:5c:e3:8e:d7:e9:a7:c4:67:48:6e:e3:44:42:2b:91:
8c:d0:ff:47:15:4c:cd:87:53:89:7c:9d:a1:5e:38:c7:3e:cb:
75:77:6c:66:f1:fb:a9:ab:6a:b2:a0:1c:9c:4a:6d:3a:da:ee:
88:2d:f3:a7:ff:b8:f8:0b:45:c3:f1:a5:c4:16:f6:fe:1e:0d:
fa:e0:85:e6:bd:f2:0e:4c:68:40:e7:8e:9a:ca:c4:39:59:92:
a2:97:c0:d1:23:97:27:b9:0e:4f:dc:9f:73:18:a5:a2:aa:b7:
20:13:7c:95:d9:4a:55:2d:25:b7:9a:ae:9d:10:2b:cd:5c:8f:
40:27:4e:59:b0:b0:15:a6:08:53:1d:0f:8d:ef:67:b5:40:b5:
c6:ee:4b:c3:9e:31:6c:e9:4d:30:e7:0f:9c:1a:61:17:d7:1e:
48:fc:43:c6:d0:22:3b:4a:43:b5:4e:da:5b:11:82:ca:1c:e3:
26:a3:87:7e:62:a1:13:55:96:20:ae:30:23:99:eb:a6:75:e5:
51:69:55:cd:80:8d:a2:c6:4b:19:eb:3b:58:bc:7b:2d:46:eb:
85:c4:9f:5e:7b:11:10:22:d6:b0:16:cf:e6:64:02:8f:c4:47:
0f:24:2d:22:1c:2c:b3:ce:e0:48:f7:b9:38:10:4f:7e:58:f0:
dd:d9:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:39:17 2025 by rpki-client