Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa
File: 3f672c72-4d5f-408a-8326-7e62adbed891.roa (raw, json)
Hash identifier: GdER47CrYx2LGtpmLU3lpaZzJbB2jSH85SYFn0TOX0E=
Subject key identifier: 3C:7F:23:65:FE:57:D2:8F:C7:05:1B:7D:0E:32:51:26:FE:93:B5:4F
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 17E49C4039B3A153806C214497CE9A69E5726281
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.249.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e4:9c:40:39:b3:a1:53:80:6c:21:44:97:ce:9a:69:e5:72:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=730e541a4d1bc7c7196e293d099c43fa0955c1e57fb07d028f18eaa3d3be8c1a, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:10:84:80:d7:cc:de:b6:0e:62:be:2a:af:
53:f6:9b:4a:c5:9e:0e:ba:94:90:06:2e:b8:04:62:
16:fe:7d:08:5b:0e:8f:75:e2:ee:f3:86:e1:7d:3a:
f9:ac:f8:41:23:64:41:10:6b:25:8a:08:63:e1:e8:
8d:b4:35:b1:a8:28:d9:bd:b3:53:84:97:a5:ea:0f:
ea:8d:1b:51:86:48:64:b8:1b:7d:45:eb:36:69:d3:
e3:5f:bc:4c:d5:1f:69:a5:7c:26:59:70:c3:0f:4b:
db:35:65:e6:a6:06:72:45:50:79:f1:b9:e6:bf:c6:
58:03:b1:b0:79:66:85:c5:f8:60:ba:96:b5:27:5a:
d8:8f:0f:d2:f7:b2:9b:74:2a:d1:3e:0d:1b:a7:f7:
ee:5a:9c:e5:4b:e9:c9:cc:98:e0:a2:4e:0c:6d:25:
a9:97:29:c7:de:d1:51:65:63:be:ca:d7:c2:c0:54:
7c:7a:34:1c:02:6f:b9:54:c7:59:65:86:49:ba:c1:
33:27:e8:5c:8a:13:96:1a:70:5c:12:23:90:43:39:
77:a1:93:d4:79:df:1a:12:73:20:77:36:27:8e:4a:
91:0c:ed:72:45:3c:3a:a1:34:b8:e6:f6:bc:a8:a5:
3d:c4:30:13:b9:45:cb:ee:b1:20:7f:ff:dc:7b:97:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7F:23:65:FE:57:D2:8F:C7:05:1B:7D:0E:32:51:26:FE:93:B5:4F
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:52:53:fc:f3:1f:b4:51:e6:c9:43:dd:02:81:b7:3d:f9:99:
c6:0f:87:ad:41:52:be:1e:d4:64:c6:f3:62:37:52:80:db:77:
50:8d:4e:dc:15:bb:c6:b6:d4:3d:42:95:a7:f1:de:05:84:2c:
8d:50:81:85:a0:83:f1:ad:55:90:38:de:69:1c:cf:ec:96:db:
65:df:70:42:66:9d:dd:51:dd:1b:e2:32:2b:da:0d:5c:4e:88:
3d:21:49:c3:b8:f0:78:8b:c1:a6:4d:11:9a:cb:17:73:ca:ef:
62:fe:dd:de:29:44:3e:06:d6:ab:bc:98:41:4d:a8:32:63:74:
d6:24:05:d4:e6:f5:a8:83:34:96:a0:0b:9f:87:af:9d:29:de:
c0:3e:fe:33:dd:dc:11:1b:b8:09:78:6c:59:f8:87:3b:97:6b:
fa:94:04:27:2c:ef:01:98:fb:b6:21:21:32:4c:a0:56:fa:53:
ae:bb:4b:29:e1:7e:e8:52:65:67:12:80:38:67:ac:b2:71:bf:
be:32:08:c2:a4:0c:ed:be:f1:b6:ac:ba:48:d8:a7:ca:ac:89:
da:82:72:fb:bf:ea:4e:05:30:16:79:87:2c:af:2c:88:31:0b:
fb:76:7b:6c:29:4c:4d:77:56:b5:80:a3:26:6f:e4:09:ba:0c:
92:28:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:58 2025 by rpki-client