Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa
File: addfda24-421e-4b45-80e1-dd5a255777c5.roa (raw, json)
Hash identifier: RAvdXySXv/bDh5FRSTua5/dKL5r8loHRkAwkOM2I4Mo=
Subject key identifier: 71:68:22:FB:0B:91:85:24:DC:7D:28:C3:18:8F:C8:38:AA:84:D3:B5
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5B0BFD15F0A9261EE1E4A3DBDD24247635345CDD
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0b:fd:15:f0:a9:26:1e:e1:e4:a3:db:dd:24:24:76:35:34:5c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=a7feea829d2b787005ed9a4e5954dfa5e68f0a1f1c13d3cb7fb9324e7eb0ceef, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:82:f3:76:9d:99:74:36:4c:09:8a:98:a1:
98:99:84:b5:11:d8:b9:75:54:61:b1:8d:b1:1f:ea:
d8:fb:bd:63:d4:11:25:da:73:68:9c:c2:19:03:28:
c4:fb:88:d4:83:be:f5:6a:46:bc:e2:63:bc:58:14:
75:fa:1e:a5:4e:50:48:54:37:72:e5:66:47:af:94:
aa:cc:83:f9:d5:42:b7:9d:6a:82:e3:1c:74:aa:d7:
06:50:e3:7e:db:16:98:7f:1b:18:7f:eb:b6:a4:d8:
54:61:ea:0d:fb:01:66:5a:de:62:48:c2:d2:00:41:
cc:27:29:7d:b3:d2:1e:3f:62:db:b2:29:52:ad:da:
03:5b:0d:f4:73:6e:0f:66:27:12:10:c9:a9:04:0b:
e9:80:20:af:34:f9:63:80:63:7c:31:1c:60:9f:e9:
71:63:92:e8:ea:28:ea:f9:69:98:93:ca:ed:c4:ca:
44:96:01:fe:e7:45:7f:2d:27:63:30:a7:7e:31:21:
90:bc:0f:9b:4b:8b:8b:c7:a2:1a:e9:4a:2c:e9:41:
1f:96:0c:3a:de:06:38:ea:0b:58:a4:07:b6:7d:76:
0d:c8:22:c4:32:8f:98:ec:0f:fe:1e:20:20:ac:25:
fd:60:9e:3d:2b:e6:e6:99:50:79:66:1d:dd:6f:e6:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:22:FB:0B:91:85:24:DC:7D:28:C3:18:8F:C8:38:AA:84:D3:B5
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.228.0/22
Signature Algorithm: sha256WithRSAEncryption
62:77:22:14:0e:7c:13:31:7d:7e:a0:ca:8e:6d:00:b3:e6:97:
66:d8:bc:a8:8a:56:dd:4a:47:ff:a4:61:35:12:fd:88:64:62:
52:30:43:6f:78:d2:20:98:aa:2c:d1:3f:40:08:17:28:64:e2:
b3:37:5c:34:c3:91:98:b6:3b:3a:f2:c7:21:47:51:a2:de:34:
a7:06:bf:1f:a0:ea:a9:e4:98:ca:54:23:53:d8:3e:35:fa:d8:
b1:18:f2:bc:dd:95:63:4f:8b:e0:7f:8e:1a:96:8e:ba:7e:b7:
94:00:22:ba:6e:9b:c5:9e:cd:d1:84:40:d2:1d:3a:cf:09:64:
8b:6f:d3:51:64:10:13:d9:08:c0:71:b2:55:66:3d:08:da:4a:
71:6a:1e:ec:17:48:96:74:88:55:47:6a:c4:4f:0d:9e:16:5f:
7a:21:6d:9e:47:82:6f:17:87:3b:aa:c9:e4:63:81:78:a8:3a:
93:75:c8:54:52:9a:a0:17:5f:97:12:44:1e:2b:54:7f:22:40:
0d:c1:1b:c4:56:5f:ca:2b:0c:7f:69:ea:7e:68:48:11:62:87:
4f:84:da:5c:93:6c:59:a0:63:11:d7:55:b9:de:2e:61:75:02:
14:4c:01:6d:c4:5e:ac:7c:ee:af:92:6b:19:a2:5e:4a:70:4f:
d6:4a:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:34 2025 by rpki-client