Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa
File: 951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa (raw, json)
Hash identifier: BcavZftZfjpQp/YLMNLQNJFJ8foWL5jtfsuODV+s8yc=
Subject key identifier: AA:B3:C9:1B:AB:78:41:14:F9:AA:C5:F2:6F:1B:9B:0F:1F:32:82:66
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 352C1BC7108E3F208F3C94CC70FADDA7A4250C60
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2c:1b:c7:10:8e:3f:20:8f:3c:94:cc:70:fa:dd:a7:a4:25:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=2d1d9a61566efbad4e3eb9a338ee44f888e69ac947f239add07549fcf588b8db, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:6e:91:58:ef:7d:35:43:27:02:f7:89:c9:
45:84:a3:2b:30:17:a7:57:43:ba:f6:b9:a5:0c:dd:
7a:2f:8d:1a:7b:48:ac:52:5f:20:65:d2:ce:6f:5b:
9e:85:eb:e2:f8:1b:f6:47:ef:94:4c:51:76:33:cd:
bd:b0:60:09:b2:d5:97:ce:6a:f2:4c:2b:fa:d3:b6:
a0:a2:24:f4:68:57:45:8d:9a:01:3a:fa:f6:bd:9d:
4d:03:97:78:7e:21:64:bd:e8:70:bd:ca:f7:ab:88:
89:ff:aa:6f:91:6f:79:19:45:9f:2d:1d:b2:33:45:
8e:f7:ef:6d:f6:3a:27:8d:0a:bd:60:51:e1:57:64:
31:30:f7:8b:70:b2:02:13:90:38:86:4b:59:2b:d5:
be:78:6b:a6:28:c5:3e:6d:f8:44:fb:a4:58:d8:d4:
b3:16:e0:74:8f:59:22:79:b4:dd:04:a3:50:cf:ad:
4f:c8:a0:1e:06:ca:cc:e2:91:39:6a:f8:2f:83:62:
60:83:76:73:f8:3e:24:ce:05:04:1c:bf:70:22:b5:
c8:2d:2a:0b:b1:6a:7f:81:b3:2b:42:7e:3b:45:ba:
b0:6c:0e:2b:15:2b:4a:d8:f2:50:d6:01:59:a5:67:
1e:62:78:95:69:3a:b4:94:38:86:41:b0:0c:20:2e:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B3:C9:1B:AB:78:41:14:F9:AA:C5:F2:6F:1B:9B:0F:1F:32:82:66
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.218.0/23
Signature Algorithm: sha256WithRSAEncryption
61:52:38:8f:8d:6e:36:a6:16:ba:e2:ab:e0:1b:55:a3:b4:9e:
f9:64:b1:1f:c1:6a:35:0e:3b:42:54:f7:9c:c7:ba:7f:1b:ad:
16:c7:4f:09:fe:3f:54:de:cb:81:f1:0a:c3:70:7f:9f:1c:5c:
8b:32:be:ef:f8:6b:76:33:26:83:59:c1:8a:18:65:33:8c:ee:
ef:4a:fa:81:f7:d3:1f:9f:fa:32:e6:59:aa:8d:c6:4b:c7:bd:
a5:12:bf:3a:1d:6b:22:a0:88:32:89:cc:09:f6:a9:8e:63:24:
eb:13:54:8d:02:fa:37:fd:e1:25:23:ca:7f:61:77:21:49:e1:
e4:06:bf:fb:6a:00:f9:0c:be:9f:e3:e5:ea:4a:4e:c1:77:e9:
0f:4d:1f:d3:16:2f:78:27:8e:20:f2:68:c6:59:a0:b7:e5:ac:
50:80:f4:47:22:70:0c:7f:df:3c:d3:2e:60:cd:ce:47:b0:c8:
5a:88:72:7c:76:0a:0e:42:7c:44:70:34:59:02:c8:fa:60:cc:
fe:79:1d:af:2b:68:7f:16:e5:b4:89:d0:90:d0:37:bb:ea:ca:
99:24:12:46:91:e6:03:5c:ed:48:f3:16:a4:f7:fa:9b:94:64:
18:64:c9:77:65:b1:ee:b9:4d:ec:f0:ba:52:9a:56:fa:e7:e8:
c8:02:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:01 2025 by rpki-client