Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa
File: 5e3c0e08-edb8-4079-81e3-f4c857efb338.roa (raw, json)
Hash identifier: Ocacq+K6KQCXQHN7MZxWMOn6hqYFKerA6nM60xfHN2M=
Subject key identifier: EC:6C:C3:AE:28:A8:31:2D:91:C4:68:55:30:10:D0:7C:F3:20:AF:52
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3F9112A92BAFEB0EB586D30D7BFA1B5D2C43CBA1
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:91:12:a9:2b:af:eb:0e:b5:86:d3:0d:7b:fa:1b:5d:2c:43:cb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=97cb8f935f6e7982a73077f115312d822fa8d86ff8bcadd1ad50232e1bbddf77, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:82:75:3b:0f:59:47:86:1b:9f:9f:b4:ad:
0e:05:2f:03:ea:9c:71:90:cd:18:2b:da:88:5f:e0:
9d:ce:71:d5:f7:41:3d:ac:53:f6:1d:f8:f7:f4:ce:
10:0a:be:13:ff:43:db:98:bf:9a:6a:62:76:68:4d:
32:5e:57:b5:9d:34:7f:40:9b:89:de:80:61:16:43:
88:00:26:2f:c5:d6:86:8a:63:47:8a:4e:18:a9:ba:
87:12:5b:3f:f7:25:d0:42:fe:45:f5:54:0d:ae:22:
9c:f0:2a:64:03:22:1a:c4:85:6a:8a:9b:15:c5:5b:
0f:9b:de:39:62:c4:ec:30:be:c6:71:dd:0c:ed:45:
77:6e:dd:4b:be:35:65:24:00:ac:06:68:6d:c0:3a:
b1:b3:58:60:35:04:f9:8c:d6:5a:c2:fd:91:80:aa:
20:33:ef:ea:37:05:8e:26:4e:4d:d8:49:17:ff:35:
a1:41:22:4d:66:4a:5b:57:58:48:ab:cd:23:de:8b:
53:d7:ee:c8:fd:31:c8:ab:7f:1d:b3:4d:6a:13:b1:
f8:54:c0:41:49:60:d8:09:df:e4:21:e2:25:99:3d:
e9:d2:11:ed:e8:04:88:f6:73:82:6d:15:93:30:dd:
61:8b:ce:2b:f7:f4:ba:4c:4e:0b:d3:0d:0a:29:51:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:C3:AE:28:A8:31:2D:91:C4:68:55:30:10:D0:7C:F3:20:AF:52
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.221.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2a:2f:56:d2:a1:19:bd:da:e7:c4:62:52:c3:45:44:91:66:
f1:de:f8:1c:9c:9a:33:c0:9e:61:68:39:a9:02:5e:70:42:b2:
1a:97:7d:4f:9a:9a:16:ce:2c:76:ae:e7:02:23:5b:69:f1:67:
ab:2b:97:e2:47:be:db:ce:7b:5c:f0:84:98:b4:d5:05:c8:05:
df:43:0d:c2:a6:99:92:64:aa:cf:e1:01:eb:5b:8e:87:6d:64:
e8:e9:be:56:28:4a:f5:7a:41:77:2c:e2:69:ad:5c:34:68:10:
45:c2:78:4d:41:01:3c:49:86:1f:7b:41:9b:7b:84:a4:98:de:
d9:d2:cf:db:e6:ce:0d:96:bc:68:9c:ca:72:aa:5c:f2:dd:b8:
03:b3:55:4d:8b:ce:6f:ba:e7:66:df:d5:ca:97:b8:65:ec:ab:
e5:f9:5e:98:84:a7:d0:2d:d5:7c:1d:2e:21:d1:20:8f:49:56:
22:13:4c:fb:b8:98:da:c7:0e:bd:be:bd:1b:47:fe:ea:76:9c:
18:a6:97:64:99:68:f0:d3:96:06:e2:93:0e:48:d7:6f:34:37:
eb:e6:9e:c9:a4:41:8c:d8:74:ba:cc:9d:f0:1b:ee:99:c0:e1:
f6:12:2f:a9:18:40:f3:10:e3:7f:f3:fb:eb:e4:0c:c7:35:a9:
b4:76:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:33 2025 by rpki-client