Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa
File: b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa (raw, json)
Hash identifier: Sq0Qoz2g6z3GQNkVIUvC72IU3unMu54Me37F5tVgpHw=
Subject key identifier: 39:A2:76:11:D3:BA:EC:58:FA:41:F3:71:93:70:94:2E:AC:07:EF:71
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2DB321265FF0A75EECBF71DCE83BA7791924D819
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.251.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b3:21:26:5f:f0:a7:5e:ec:bf:71:dc:e8:3b:a7:79:19:24:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=8012eabd2b19d5297ea1f0d90c96dbf31c17b8f427633dff46ce51ac1c0d9790, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:44:ca:2b:84:05:78:a5:1f:49:7f:45:2c:
5e:dc:bf:7c:72:ed:07:6d:3b:d0:94:ed:4c:f4:51:
2d:6a:b9:01:23:f6:fc:49:76:c4:2f:19:d1:4d:ab:
67:eb:d2:81:ae:6f:2e:0e:29:dc:fa:74:f8:83:a6:
1f:54:46:9b:2b:28:2a:72:fd:fc:7a:27:10:8f:ea:
64:3a:1a:08:f3:f8:b4:5e:1c:ac:72:7e:8b:34:81:
9b:81:89:99:d8:d6:e1:97:f4:ff:b6:6f:4e:04:bc:
c6:80:2e:94:a4:df:5f:dc:f3:6e:73:2f:5d:16:9a:
54:b0:12:1d:e8:0c:b4:e4:ee:fa:05:a9:b9:3e:69:
1f:c2:18:76:ec:75:66:ce:c0:65:27:77:af:d2:24:
04:a5:dd:42:c1:01:32:e1:b5:3c:51:35:9c:34:12:
75:99:c9:da:72:49:8c:9f:91:55:36:e4:06:11:2a:
27:b3:d0:28:f5:40:0c:6c:54:58:1b:3b:67:e4:9d:
9e:c3:27:9a:41:74:ab:8b:95:7d:aa:36:fd:a8:91:
f4:82:ce:82:eb:46:ed:ce:a1:aa:22:48:84:c0:e5:
73:ea:cc:e1:b4:4f:71:25:36:e7:5f:70:32:e1:9a:
74:38:7d:92:b6:c5:e0:95:f7:44:07:e9:89:ac:48:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A2:76:11:D3:BA:EC:58:FA:41:F3:71:93:70:94:2E:AC:07:EF:71
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.252.0/22
Signature Algorithm: sha256WithRSAEncryption
31:65:2f:d3:da:52:cf:1d:d5:b1:5e:19:d7:3b:cc:ae:bb:7a:
f9:e8:61:23:06:84:1d:19:06:fa:85:46:3d:4b:e5:7f:26:d2:
71:43:c8:9b:0a:dd:c7:1a:3f:ec:9b:91:3c:b6:96:5d:2d:5c:
96:be:22:ec:92:c7:42:db:6e:4a:d0:e9:f6:00:76:de:af:f0:
28:5d:58:0b:ee:29:69:20:bd:16:b5:2f:cd:0b:0e:f2:4a:c1:
5c:32:50:d7:4c:a1:a3:43:98:47:f6:44:a3:64:8b:8b:ae:7c:
d4:4d:05:46:39:69:4a:05:a7:a9:a0:5e:81:6f:70:58:d8:66:
69:d1:fc:cb:84:07:3b:91:fa:b9:b1:e3:de:90:ef:e9:f0:6e:
02:58:d8:05:88:d4:24:26:89:8a:18:a3:22:a7:00:d0:63:72:
94:3d:1c:9c:ed:f7:39:ed:fb:69:13:2a:21:65:9c:f1:d5:92:
b2:d3:75:96:17:31:04:13:7a:cb:0c:99:c7:00:5e:33:75:9e:
97:b5:c7:fc:fc:ed:55:29:3d:c3:62:e6:50:11:1a:c4:93:36:
76:97:7d:e6:e9:a9:e5:9d:16:ea:9a:5f:44:e9:97:2c:4b:91:
e8:24:e4:bf:64:c7:c4:41:c2:f0:9f:68:c7:a5:0c:f3:62:86:
f9:9d:f6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:26 2025 by rpki-client