Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa
File: 7c541838-12b7-470a-b044-f31d3ab72ede.roa (raw, json)
Hash identifier: Pcp7K/OlyuGB6iq3/tU+x7kKvHqkVx1kW05kUnh1FF0=
Subject key identifier: CA:DF:78:98:44:A3:CB:FE:20:CE:EA:1B:DD:64:89:83:DE:37:9E:75
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 42D6463059CB6BB57D65CC2D39E9BB36A0391580
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d6:46:30:59:cb:6b:b5:7d:65:cc:2d:39:e9:bb:36:a0:39:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=a6760b3a3f861586b8008fcc6432ed3034ea5d431d047fe11d2327c401add4cc, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:c7:b3:ad:4b:44:a0:f9:e4:13:31:4d:27:
a3:d3:2f:5b:33:99:4e:ab:50:07:6b:a3:b9:17:4e:
95:36:64:ae:e7:aa:02:cb:c9:70:1c:c4:f4:cd:3d:
33:80:17:3b:82:ea:2c:39:cc:ea:00:0c:88:88:7a:
1e:b1:db:fb:86:7c:08:fe:d0:ad:ba:47:ae:01:c4:
d6:12:16:bf:7b:85:7d:31:88:9a:a3:fc:fd:de:82:
31:98:e2:cd:e4:46:c3:9b:73:95:67:b8:ca:8f:ca:
1f:55:2a:fd:68:31:fb:86:22:b8:17:2d:fc:6f:4e:
e5:8d:ff:f3:e3:28:e1:c5:0d:ba:2b:61:72:6c:c3:
f3:53:2d:d4:5e:f7:4d:67:8c:ff:4c:41:ad:3c:d7:
37:32:13:1d:45:49:68:8e:d0:77:11:ad:4d:a8:80:
83:ed:09:b5:6e:3e:2e:91:fe:cd:90:65:83:83:37:
50:a8:00:cf:70:be:87:d6:97:ed:66:74:fe:c9:67:
a2:56:fa:d1:b1:fc:b9:96:50:0e:06:f1:0b:5e:66:
b3:ae:54:49:e7:4f:4b:e6:cc:48:9d:40:94:9c:56:
ef:18:78:89:9f:4f:dc:58:40:d3:80:33:bb:8e:d7:
e8:67:22:bc:fb:d4:3e:ac:91:0e:0a:b2:9c:bd:dd:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:78:98:44:A3:CB:FE:20:CE:EA:1B:DD:64:89:83:DE:37:9E:75
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.208.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:2b:81:13:28:c8:ee:73:57:0b:85:d0:a5:4b:6b:70:b3:47:
51:42:51:bc:ff:d4:39:8d:55:a9:c2:1f:b2:3e:13:20:58:4d:
d3:9b:f0:5d:0e:e8:fd:8b:bf:01:21:aa:60:27:da:60:6f:27:
66:f9:e9:0e:97:01:6c:77:2b:e6:df:65:55:f3:01:0d:63:6d:
30:4f:b8:9b:73:5a:42:18:32:e2:de:ac:4d:a3:87:c7:9b:90:
e8:56:3e:c5:61:9a:71:b4:35:69:40:ba:f9:a4:9d:55:0b:ab:
65:69:c5:25:cf:c1:b5:00:f5:c4:71:e6:be:90:2b:6e:8a:03:
5f:19:30:40:c5:d2:2c:7a:31:1a:78:9a:3b:f2:63:e6:96:5a:
1f:4a:9a:7b:10:80:1c:3d:f3:f5:2f:07:60:d5:12:85:a2:3a:
25:19:df:09:b7:25:e1:6e:bc:30:5c:5c:7f:40:c6:71:d6:07:
19:70:0e:cc:19:90:78:e7:ca:5f:0e:ae:aa:e4:bc:aa:49:d3:
76:0f:b9:fd:bd:b9:b0:23:bc:7f:53:0b:7c:b3:d1:c2:ca:8f:
09:3a:c8:64:bf:ba:03:e8:2c:22:cf:b9:03:d7:70:1c:c5:11:
d8:a7:fc:d1:51:a8:24:d1:8c:b8:16:f5:67:3c:10:e6:8e:6f:
9f:1f:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:22 2025 by rpki-client