Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa
File: 69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa (raw, json)
Hash identifier: Dy2yDVEQxnKcOWKFO26SfH91Yr1G5cHA1QVBVIopwmo=
Subject key identifier: AD:C1:FA:90:F8:07:99:3A:09:1F:D8:9C:E6:35:67:3B:28:46:1E:31
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 334AEDA241FA1F18850E0C5B834B90B7AFB39ACF
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4a:ed:a2:41:fa:1f:18:85:0e:0c:5b:83:4b:90:b7:af:b3:9a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=3b7729e68bf6ce6830ff206cb86624bf7dd5baf6a4e9e737f16d2170d2769f39, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:8f:20:18:4a:91:dc:87:15:bc:ad:d9:d3:
0e:42:8a:cf:df:7f:27:03:ae:4e:41:c1:85:6f:96:
47:50:ad:05:92:45:e2:f5:9a:ca:2c:43:72:27:61:
7e:34:db:9c:5c:46:22:68:f5:37:eb:58:20:55:22:
0b:8f:46:48:82:e1:62:cc:07:3e:14:da:b7:1b:60:
29:bb:2b:7f:31:c8:ba:bc:17:da:3f:b9:1d:71:be:
8b:d0:67:39:ff:44:39:67:76:df:0d:9f:03:25:51:
ec:61:80:f8:5c:bd:92:d2:b6:ac:6c:fd:e5:ee:7a:
d9:9b:b8:57:be:ab:47:54:a2:38:53:42:2c:2e:78:
5e:c9:bc:dc:fb:c0:c7:01:fa:02:2e:8a:d3:09:f8:
77:e4:6b:a6:99:1d:cb:35:51:92:d2:f2:b3:23:ba:
1d:97:1f:62:30:29:1a:f8:2d:50:80:80:d9:2a:b2:
d4:76:98:ee:2f:87:33:55:3e:07:d5:9a:82:b2:43:
f8:b2:fe:9e:8a:89:29:0e:0d:55:aa:1a:f9:39:71:
40:80:82:e0:6c:4b:b9:2e:0c:1a:6d:a4:3a:d4:91:
31:90:4f:ac:12:0f:6a:18:4c:14:54:5e:d2:42:78:
b5:69:39:22:e1:14:f5:40:5c:4a:4f:9f:ef:1a:c2:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C1:FA:90:F8:07:99:3A:09:1F:D8:9C:E6:35:67:3B:28:46:1E:31
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.176.0/24
Signature Algorithm: sha256WithRSAEncryption
34:35:69:4d:22:78:a3:f5:8e:cf:d8:8d:5e:b6:ca:84:d0:e9:
2e:a3:6c:03:d5:fe:c4:88:ce:46:73:e2:bc:b4:8e:a3:25:a5:
a3:68:12:73:b1:77:db:ae:fa:b3:f9:af:08:17:56:6a:95:d4:
bf:0a:ff:97:ea:2e:6e:25:d5:c4:d3:f4:3b:ca:82:85:a0:bf:
83:fb:97:4f:31:0d:22:95:07:90:69:f6:8a:2e:c7:63:f7:14:
91:3a:3e:b7:d9:e5:3d:95:bb:ad:64:93:df:6c:1f:42:b9:be:
c8:1b:4f:78:99:ee:31:55:fa:79:c2:b3:21:61:27:64:ec:4d:
c1:6e:00:e7:8c:41:59:a8:3e:d5:5e:b6:5d:34:5e:c6:a5:61:
be:77:f6:91:33:cf:1a:5b:21:18:8d:22:fa:b4:8a:2e:da:3c:
f1:66:0c:e1:4e:15:27:1c:84:fe:70:4d:2d:2e:e6:1c:19:7e:
03:06:21:8b:71:1d:c6:1f:00:13:ad:4a:f8:2f:9e:55:27:a5:
92:5c:41:ca:ad:49:7c:62:09:8e:61:06:d9:25:da:45:7b:1c:
e1:e9:71:51:74:25:2c:a6:e3:de:ca:b8:a7:95:05:08:3e:91:
36:9f:41:66:8d:e7:51:b2:39:af:e5:d7:eb:f6:77:59:56:14:
70:1b:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:02:29 2025 by rpki-client