Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
File: 3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa (raw, json)
Hash identifier: aSq7s+o6UADb3lwHnx4Z5WlVhm58kl/+sgGS4YgXhHA=
Subject key identifier: 6A:0A:09:80:F1:4F:1C:91:0C:C5:EA:AE:1B:72:66:09:8C:36:2F:CA
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1C0FEDF5D7750743B836A7357007556C6CAEC746
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0f:ed:f5:d7:75:07:43:b8:36:a7:35:70:07:55:6c:6c:ae:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=ab324d1dabb8d8295261328980187520851d90721555378adfe0171c97a8259f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:cd:23:90:b8:f0:63:06:a9:a9:1f:f1:94:
af:1b:22:13:5d:1d:3f:81:8f:60:5a:bd:19:30:c6:
c3:d3:3f:9a:6a:2d:2f:62:a8:2e:58:e4:bb:45:2d:
32:8a:b4:96:4c:f5:4f:2c:ea:e9:69:d5:87:bb:c1:
63:59:7d:46:a1:43:48:e9:34:0b:e6:7e:64:b5:f2:
7d:2e:84:53:04:a7:fb:77:9c:0e:c4:a8:0c:4f:5f:
60:53:b8:1a:20:78:2b:aa:e0:b0:33:75:29:1e:42:
0d:6a:26:b4:c6:d6:27:83:c6:53:dd:14:8e:b6:b3:
95:ce:36:91:48:21:2b:79:c2:5b:0c:ba:32:bc:a2:
2a:52:6c:eb:58:7a:d6:c1:7e:f5:e4:a5:8d:35:61:
a4:e8:9d:46:dc:dc:8d:5e:31:8f:d5:df:3c:66:48:
8f:6a:d9:9f:e1:4e:c9:f6:04:f1:4d:20:2e:cf:48:
64:c7:af:1b:64:08:b1:e2:9b:a4:32:66:48:87:4a:
6a:f3:66:ec:bb:3f:41:a4:69:b3:42:0b:5b:fa:6f:
db:90:ce:b6:48:b9:e8:59:4a:f4:2b:88:33:02:b8:
ab:0f:fa:d4:73:d7:3b:74:e6:cd:1b:0d:fe:6a:cb:
3c:a7:86:05:3e:03:84:c8:b5:6b:7a:14:14:6c:c5:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:09:80:F1:4F:1C:91:0C:C5:EA:AE:1B:72:66:09:8C:36:2F:CA
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e7:cb:2d:00:f5:2c:8b:13:86:92:cc:98:a2:78:a1:00:53:
c7:4f:ea:77:e1:bd:3f:02:43:bc:02:27:7f:bb:1d:4b:9d:c6:
ca:c5:cf:74:8a:eb:bb:6a:d1:39:10:95:52:a1:44:2c:ff:d2:
3c:5f:74:ab:7d:f8:95:cf:64:35:81:88:c0:25:3b:6f:ae:68:
ac:de:e4:41:95:03:a6:21:be:a2:a2:b5:ac:96:b2:81:81:56:
65:2d:ab:7c:80:17:ae:92:68:0f:f3:60:dc:41:e3:09:6a:f0:
f1:91:d5:6b:36:09:17:16:18:90:ec:95:ac:53:26:f7:7d:6a:
e6:3b:44:d6:7a:2f:5e:47:0d:5a:4a:5d:59:6c:83:59:48:58:
0f:ad:ab:a0:a2:b1:f6:b4:ed:56:36:e1:ce:e0:fc:ce:d9:dc:
2a:f9:8b:6a:2f:7b:59:2e:1a:ff:89:50:5f:2f:db:c3:32:05:
19:bc:94:11:b3:25:85:16:fe:72:19:df:80:9d:51:93:d3:55:
7d:d1:90:12:41:4c:4b:dc:d8:7c:03:f5:9c:39:94:ff:59:86:
ab:3b:49:58:4b:6c:8a:be:62:78:b4:4e:4f:99:f0:f1:93:18:
8b:87:11:f8:0d:cc:06:3b:40:a0:01:74:02:d0:58:94:a2:a8:
ab:d8:53:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:32 2025 by rpki-client