Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa
File: be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa (raw, json)
Hash identifier: dzjcLfQ5jteW0RZzaF652lzBPooshEnnioMdpazgsMk=
Subject key identifier: EF:56:42:23:7D:88:04:5E:7E:8B:31:90:FB:8A:30:14:C9:C1:65:86
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 0D93475E33E5BA456366F605C3091196BFDE8B6A
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:93:47:5e:33:e5:ba:45:63:66:f6:05:c3:09:11:96:bf:de:8b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=84939579fa3070cdc439be59cc9a95a733a13acd4532f7ceeedee6f3f1b62a31, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:5a:a5:dc:bb:8c:8f:9f:c7:5c:f4:30:df:
18:f6:fb:25:f0:bf:c4:cf:7b:6e:ba:72:33:3e:3f:
c8:fb:ff:7f:86:c9:84:32:60:b9:59:f4:2a:35:06:
0d:2d:a0:e1:a9:25:0a:81:50:8f:94:5a:55:df:b7:
2e:d0:97:11:84:e7:24:a6:fb:c6:63:91:5a:04:ce:
73:83:2e:8e:06:3d:68:0d:e7:6c:97:e0:19:5e:7e:
c0:7f:56:10:6c:e4:42:c9:d2:62:a0:b6:04:9d:9e:
5c:8e:de:0f:42:42:7d:23:82:10:2e:b7:a8:ef:59:
f3:59:fd:1f:e1:69:08:0d:82:2e:23:93:8f:75:02:
df:34:7c:0d:0d:ee:7b:0f:b6:58:86:92:80:7d:f3:
d4:ac:a8:53:0d:f8:80:91:1a:a4:5a:e0:5b:17:5a:
83:c8:5b:c6:6b:f2:c8:91:37:9b:a7:ea:fc:7e:2d:
b8:0d:ca:56:09:bd:d4:01:cf:db:82:20:93:bf:0a:
36:09:ff:40:51:2a:d4:2d:a9:82:88:bb:ef:e2:df:
d6:cc:87:c7:98:65:0b:4f:3e:c8:ca:27:2e:7b:c2:
71:7b:92:20:31:05:6f:48:80:dc:78:d9:5c:39:1a:
1a:f9:c6:f8:36:a6:72:c5:ff:d7:95:07:df:d4:95:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:42:23:7D:88:04:5E:7E:8B:31:90:FB:8A:30:14:C9:C1:65:86
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.210.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:29:e7:3b:88:e6:e9:b6:e5:a4:b0:d6:61:27:4d:a6:62:79:
70:7b:cd:d2:46:f1:86:59:b9:46:a7:86:a6:06:3e:b0:30:60:
56:d4:20:6a:f7:84:51:97:89:50:7e:03:1f:27:53:09:5c:b3:
b2:d6:60:2a:20:1c:85:d2:70:6a:00:76:de:e4:af:df:fb:a4:
ab:67:42:72:c7:1f:d7:52:75:84:d5:a8:f0:2e:48:93:34:e1:
10:93:89:4e:32:53:66:21:e3:0b:c5:b9:57:e7:b1:72:75:54:
b3:03:4c:1f:63:74:08:b0:d0:9f:d9:fd:be:6d:5b:08:82:63:
3d:4d:7a:c4:44:6d:cc:60:3e:72:1a:48:a7:4f:7d:e0:49:41:
fc:d9:ad:1c:5a:73:fb:25:3c:18:ae:32:ce:47:69:c7:55:21:
1f:89:12:d8:4e:5f:76:bd:6a:8a:50:9d:1c:0d:ff:bc:27:ee:
cd:85:0a:ae:20:7e:ce:30:a8:da:10:69:92:ea:95:47:6d:ed:
1e:54:c1:f2:8e:05:07:ab:2c:34:b3:83:fb:4b:5b:b3:66:72:
af:72:64:86:d4:0a:b3:ac:ab:e1:26:83:06:59:78:09:7d:c3:
70:97:bc:5d:92:0c:06:9d:c3:3f:21:19:85:6e:cb:90:1f:0a:
97:3f:aa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:26 2025 by rpki-client