Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5dab641b-24fb-48f2-8b71-57a07d630894.roa
File: 5dab641b-24fb-48f2-8b71-57a07d630894.roa (raw, json)
Hash identifier: BcyQWh2JnSVvKPKdE6ZQwMc7u4Fq8mFzyuYUfaopTQs=
Subject key identifier: 48:16:10:2C:2E:F6:6E:52:70:AB:B1:CF:78:81:8C:4D:F6:9F:31:F4
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 13FCAD5723559B80C354B4BBF0F3659A011898E3
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5dab641b-24fb-48f2-8b71-57a07d630894.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:fc:ad:57:23:55:9b:80:c3:54:b4:bb:f0:f3:65:9a:01:18:98:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=d7cb1c3adad8ab0db230f4689b6b4207abe68f4bf580074a0ab470da08f8d5e6, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:b1:04:ae:36:5f:a2:0d:6e:c2:c4:ef:57:
36:15:ce:ce:dc:fd:d8:ae:b1:f4:ab:4f:07:e7:3d:
33:26:df:b2:9c:8e:39:0b:62:5e:1d:7e:b3:fd:f7:
a9:91:26:1b:7b:bc:c0:40:f0:91:07:e9:5f:29:ab:
7b:8d:e0:69:bc:ed:45:1a:99:3e:02:6d:74:a7:84:
51:33:66:7f:2d:8d:87:59:45:dc:d6:6d:b7:3b:ca:
6c:32:d7:51:46:ae:79:fa:e1:a1:d6:7b:65:9d:3e:
63:74:93:b2:92:80:3c:7f:54:c3:1b:0c:49:60:88:
ac:0c:76:31:6c:7e:21:2a:15:37:40:26:dc:c4:72:
ad:77:01:3e:fd:2c:d9:38:ff:dd:b9:58:8c:d8:e6:
cb:9f:4a:f0:dc:d8:6e:6f:91:90:80:84:f0:48:b6:
af:38:64:a3:bd:34:15:05:eb:2f:3a:2d:41:40:b5:
f8:9a:21:57:c7:5f:e9:93:22:c7:7e:d1:e5:73:b9:
a6:db:fc:04:09:2d:f8:eb:d9:9f:0f:79:7c:4f:d7:
1f:54:b3:b9:8d:bc:1c:25:d2:1f:60:f6:a9:25:24:
63:53:e5:1e:35:97:45:46:ee:d4:3a:e3:0a:96:1c:
9b:d3:a8:5d:8d:9d:0c:21:25:4a:16:cf:5a:c8:b3:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:10:2C:2E:F6:6E:52:70:AB:B1:CF:78:81:8C:4D:F6:9F:31:F4
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5dab641b-24fb-48f2-8b71-57a07d630894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.252.0/22
Signature Algorithm: sha256WithRSAEncryption
40:7a:9a:73:49:af:61:c9:3c:04:2c:68:d8:96:0b:e9:42:3d:
2f:b9:0d:2e:44:6c:dc:16:7a:c6:df:79:a4:4a:16:1f:e5:e0:
7a:b1:d6:ad:db:ff:d4:54:aa:08:34:d4:8a:f8:48:fd:73:d0:
5f:a2:00:36:f5:e8:25:38:65:8c:af:3c:47:61:31:c7:f2:51:
53:6e:4e:77:35:1f:57:e4:52:00:39:c7:ac:c8:d3:f8:fd:7f:
6c:4c:61:cd:c3:bc:91:4c:63:42:ef:d5:5b:2d:29:18:d8:f2:
dd:53:aa:af:09:d6:3a:01:a5:90:4c:85:e7:f8:50:4c:65:f2:
fd:ad:ac:0f:b0:61:8c:87:58:89:ba:77:6b:e1:5e:8a:fb:19:
cc:9c:a2:e5:9d:33:ac:b0:85:1a:dd:a7:b7:60:b3:ce:72:70:
5b:58:92:6b:4a:05:73:98:1f:b2:97:e7:25:d7:06:4a:99:b2:
03:94:83:02:1f:3a:65:f9:aa:92:1b:de:28:a1:fa:63:90:3c:
5a:a6:1a:72:a9:91:f5:e3:5a:af:55:72:01:a5:2c:61:97:0c:
4c:76:21:19:59:29:d4:85:85:d0:4d:b1:2b:fc:6c:3b:4f:fd:
23:20:a5:c1:a4:e7:fa:3a:92:22:d4:61:f5:c4:3e:87:cd:36:
fe:e2:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:07 2025 by rpki-client