Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8a554833-7334-4e02-8426-138572f3d41a.roa
File: 8a554833-7334-4e02-8426-138572f3d41a.roa (raw, json)
Hash identifier: ZJDD0oHUQEKLpdrXjeXGRpmY2JpEau0isxBxDTj3yhQ=
Subject key identifier: ED:8D:FE:76:EF:B7:CC:20:7B:5F:E3:3C:68:0D:EE:36:5D:B4:32:03
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2A814E3BBBA8267844D718C55EA8BD87711CEA03
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8a554833-7334-4e02-8426-138572f3d41a.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.249.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:81:4e:3b:bb:a8:26:78:44:d7:18:c5:5e:a8:bd:87:71:1c:ea:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=cd939842b3c2da7027b92488c7a6a94cead2eb685ff1edd585b8bf198d718ccc, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:41:65:5a:fb:74:42:fa:88:a9:8c:4a:c1:
ad:8f:08:12:a2:23:9f:99:1e:77:02:4f:99:39:52:
53:24:53:d3:16:ac:56:4d:42:7b:4e:02:b0:d1:13:
8a:8a:1b:ef:59:83:ae:be:1a:68:b8:0e:9b:f4:65:
93:28:27:9d:98:b8:13:e9:b5:ac:38:30:34:cc:b6:
35:c3:f8:54:6b:bb:89:9b:9c:e1:9a:08:98:c8:19:
04:c2:aa:51:3c:31:6a:af:5f:8b:45:1f:89:52:31:
2d:63:26:33:9b:1a:28:98:5f:0a:71:c8:0e:bd:42:
dd:86:19:0d:2c:dc:1a:b6:ea:b3:25:63:49:8b:f1:
c1:ce:99:ce:3a:da:5e:81:6b:1a:b9:ba:be:25:4b:
5a:12:55:44:ef:ad:8a:81:fb:a2:f2:b0:34:e6:b2:
1e:01:fe:65:9b:c5:fb:59:f8:0d:a4:9b:d8:06:a5:
1f:4f:36:53:d9:f8:a6:42:11:f8:6f:bf:42:cd:f9:
62:52:d1:e8:c5:b9:7a:4b:4d:87:80:20:8d:06:be:
b5:28:77:31:c1:ca:51:02:e7:9b:b4:d6:bc:4f:41:
00:ee:0a:1e:f6:cb:2b:fe:fb:cd:e6:d0:58:d4:84:
0c:16:c2:a5:de:a9:fe:36:8f:88:50:c8:a8:75:bb:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8D:FE:76:EF:B7:CC:20:7B:5F:E3:3C:68:0D:EE:36:5D:B4:32:03
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8a554833-7334-4e02-8426-138572f3d41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.217.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0a:2c:da:83:b8:26:45:c8:26:f7:c5:b9:9f:08:15:63:99:
4a:78:98:e1:29:0e:92:94:e1:db:e7:43:b8:9f:08:32:78:92:
e5:d7:62:96:1c:48:52:6d:36:b7:03:f8:3b:fe:58:e6:b3:27:
63:df:21:44:c1:3c:9e:c4:ee:68:de:ea:04:dd:f7:76:a9:78:
76:86:16:bb:f9:f1:c6:9e:a2:67:42:f5:e6:58:42:61:5b:65:
3f:59:1f:58:ff:fe:29:92:48:36:26:2d:b1:a1:9b:ab:ff:42:
9a:4d:d0:c5:d0:30:68:bc:c6:f3:0e:06:0c:3a:65:fa:87:74:
7c:f4:a1:8e:2d:b9:5a:0f:ec:f5:9e:b0:71:cc:00:dd:30:59:
c9:8e:ac:c6:7b:63:c4:39:43:fd:58:bb:8c:02:90:b8:4a:f5:
a5:2b:95:84:c1:bf:ae:75:0c:58:e8:25:9b:2d:81:5f:10:e8:
97:12:76:2e:ec:3b:b7:dd:76:b8:59:7e:51:a6:2d:ce:82:2a:
c1:b0:78:14:5f:d7:32:f2:87:a6:71:82:5b:3a:eb:da:30:d0:
42:de:34:1e:cf:21:a8:5f:6b:7e:e4:8d:93:1c:0d:2d:f3:fb:
7d:35:39:4b:d0:32:1c:52:ca:c3:70:48:77:be:74:0c:a5:bf:
76:4e:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:14 2025 by rpki-client