Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa
File: 5569e911-3188-427d-83a0-0e8a45b335d3.roa (raw, json)
Hash identifier: WDDoZuI4CGLGG8Jlj9l355RUk7fIfomZ5JID4SPwEWE=
Subject key identifier: 9B:D1:12:F8:CD:15:84:16:FE:A7:05:64:99:75:E0:E0:7C:F2:84:6F
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 49B8A102AD186D10195D7C501A00AEC05608DCF6
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b8:a1:02:ad:18:6d:10:19:5d:7c:50:1a:00:ae:c0:56:08:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=50c3aadfb2e773f7cc434ec3cd57cf7cad21f15beb640770c325955fbb576527, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:59:37:d1:b7:77:e8:dc:f7:45:ff:cb:e0:
f5:4f:52:1d:e8:3b:c5:5c:cc:bc:51:83:97:cc:40:
af:ed:1b:5d:76:77:79:14:2d:1f:03:8a:86:e2:1f:
c7:d2:79:67:0d:8b:34:80:de:d7:03:d3:f1:ee:ce:
ab:60:59:77:80:81:03:48:bd:f6:0d:d4:00:78:fc:
d7:1a:ba:66:24:ef:62:35:c0:6e:03:66:dc:29:ef:
73:f6:5e:24:9a:e3:46:9c:74:04:af:e5:23:56:cf:
03:9d:e7:02:2a:fb:91:6a:88:58:17:e0:cb:c2:3e:
f2:dd:dd:6d:6b:f2:a3:43:ca:a6:0b:4d:ee:89:6b:
2f:9b:5f:f5:9a:a1:36:a4:51:f4:79:9f:26:9e:4f:
87:e1:01:c9:8b:ce:b4:61:1e:5d:db:dc:b1:7d:69:
55:73:97:10:d5:de:64:42:e6:61:8d:ad:64:a6:bb:
75:24:ec:e2:5c:01:ff:1b:60:d6:c7:78:dd:b7:13:
86:bd:a9:e0:e5:23:59:9c:e6:b9:f3:c5:d0:60:4f:
1d:ce:5f:26:7e:d0:ed:22:bf:01:9e:79:65:1c:66:
18:52:55:15:d5:46:b6:6d:7c:6e:10:95:8e:4b:49:
23:22:da:6a:b2:f2:dc:e5:cd:98:c0:b6:40:65:65:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:12:F8:CD:15:84:16:FE:A7:05:64:99:75:E0:E0:7C:F2:84:6F
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.183.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3b:10:72:a4:f8:f2:31:c4:60:3c:18:8a:b9:97:c5:34:b4:
cf:0b:f4:e3:bc:94:dd:c9:11:0b:b5:5f:b3:2f:77:69:59:6a:
4f:3e:c9:d9:fe:d3:1c:50:3f:08:ab:b7:22:79:b3:f1:c4:d8:
c5:02:71:74:4a:1c:2c:be:8d:22:f5:bf:9a:92:22:5c:ea:67:
23:ef:0d:fa:44:7a:cd:e7:44:46:f0:d5:54:fd:15:e1:29:12:
43:80:50:be:6f:fd:ed:bd:42:87:c4:ce:1a:84:0e:3e:ab:a4:
05:49:d0:e1:2e:f1:54:fc:9e:22:09:ba:af:09:07:3f:e4:a9:
54:9a:8c:5f:ba:98:0e:51:a5:7b:fb:ea:d4:5c:1a:80:f2:74:
73:a0:7c:54:52:ee:89:55:6f:6b:25:2c:43:cd:56:88:c7:bb:
d1:76:3a:ec:22:b6:a0:57:9f:06:4e:e4:cd:c2:d7:b9:0a:34:
d0:28:eb:f4:3d:9e:9f:de:6a:7d:2e:df:e7:27:f0:ce:62:fe:
ad:9f:5b:6e:67:ec:7b:ab:37:f9:61:49:df:46:19:51:ce:e3:
dc:e7:ef:32:2c:2e:76:df:4a:bd:40:4e:cb:15:97:31:84:a6:
cb:26:32:87:74:ab:65:99:59:15:07:ad:c2:6b:b9:ed:35:dd:
22:9a:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:38 2025 by rpki-client