Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa
File: b63fd343-5e29-48fc-84c9-2d11751d74e8.roa (raw, json)
Hash identifier: S5sD+JwbcsGIj7wN7KXMZXU1amVVpruY3BvtfFWZZMQ=
Subject key identifier: E0:A2:FF:7E:D0:F8:C1:AC:8E:F5:8F:F8:96:40:04:B7:B3:23:5E:A6
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 25C9200FB93E0A5BD4CF9073389AA59FE2EF0BD8
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c9:20:0f:b9:3e:0a:5b:d4:cf:90:73:38:9a:a5:9f:e2:ef:0b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=3e2c75f278cc6370dece6027eade16d7ae9e7d84c7a459a9cc4a1d4800edb824, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:85:fa:ff:82:e6:6b:d2:8d:32:5c:ce:a3:
6d:3b:8c:ef:6e:5a:e7:9f:70:4d:2b:9f:e7:f0:0e:
d6:03:e5:41:8f:16:ce:93:05:56:d4:74:be:49:8d:
70:ba:9a:03:b3:32:b9:2b:c4:b9:50:75:48:4a:37:
4d:5f:0c:ae:22:2a:94:ad:dd:0e:73:ba:0d:e3:45:
2f:5f:2a:4b:2f:d0:9d:58:42:95:d3:d5:2c:eb:0f:
3f:e2:cd:9b:bb:1d:61:a0:16:2e:5a:52:09:5b:7c:
e1:cc:69:2f:0f:72:9b:2f:a0:01:30:50:af:23:5d:
0b:60:6c:5c:8d:22:06:79:e7:bd:be:8d:68:82:df:
cd:30:d5:16:ca:29:59:14:d1:89:26:e5:fa:7b:84:
e6:39:50:f2:75:ce:f7:9e:e1:d4:dc:22:12:ac:a3:
21:2e:43:98:80:00:70:fe:39:e4:c5:23:7a:a0:0f:
e1:a4:81:10:06:22:5c:d0:63:39:e6:4c:40:01:09:
56:8f:cd:73:93:f3:37:90:15:99:38:60:95:9b:c7:
2e:e3:06:5b:20:ce:03:d4:a9:05:ee:7a:ab:82:4b:
86:07:5d:23:e2:7e:ec:32:37:71:26:d2:c8:12:7f:
fb:43:eb:d1:1f:c6:db:6c:5a:bc:b7:ea:33:33:d7:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A2:FF:7E:D0:F8:C1:AC:8E:F5:8F:F8:96:40:04:B7:B3:23:5E:A6
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.238.0/23
Signature Algorithm: sha256WithRSAEncryption
87:8b:70:0e:4c:a3:52:9c:a4:cc:c0:79:37:70:5f:da:a9:44:
80:b9:0a:aa:34:9d:4f:d7:c2:5d:8a:a8:7b:21:3a:41:51:d8:
28:46:73:91:36:1e:5b:4a:a6:23:63:75:7d:4e:5f:b2:58:f0:
a9:4b:0f:59:6f:a2:91:4a:47:d1:bf:f5:e0:81:cc:7f:fe:58:
7a:bc:6a:c9:92:fd:57:e7:ae:22:57:a5:3e:1c:95:ef:68:fc:
3a:50:4b:1c:07:2e:02:49:c2:9e:83:e3:26:cc:fc:09:44:da:
9f:2a:e4:a9:f5:84:04:80:56:ce:bd:0b:ca:ef:6c:f6:9d:e9:
2d:47:30:a6:f5:03:77:f1:ac:36:5c:fc:8a:ef:7e:09:5b:75:
43:82:a0:ea:8d:e5:97:aa:bf:f4:49:94:86:62:9c:78:d6:dc:
7e:eb:20:32:cc:58:dd:dc:ab:28:a6:ec:70:30:6a:de:78:6a:
5b:0e:aa:a1:03:1f:e9:18:0e:7d:65:24:f6:ba:3a:1c:22:e7:
f2:54:76:25:ca:ae:1b:9b:6d:23:0e:aa:1b:1b:85:76:a8:af:
e3:b4:73:81:55:25:95:9d:1f:a3:98:14:6b:84:e5:6c:2a:99:
2a:67:dc:4c:45:79:58:fc:a6:db:e7:dd:04:f2:45:4b:ff:d0:
be:6a:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:52 2025 by rpki-client