Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
File: c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa (raw, json)
Hash identifier: gQw6tsiCSb/qeOrFqaKpBjZCcIqFNGMtzpnMT/7LhfQ=
Subject key identifier: 60:3D:B9:A0:54:C3:38:CB:40:C4:C6:FB:A5:D3:1D:07:7D:C1:68:2A
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5BB5828A50CF3AB0578B831A0BC774CB3488A3EE
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b5:82:8a:50:cf:3a:b0:57:8b:83:1a:0b:c7:74:cb:34:88:a3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=a57eed4bce8c0562b6f116f2f31a53220bd4ea944a69104b2d5aaf69e1bc3933, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:b9:be:e9:08:b7:36:7e:3b:51:90:85:b6:
0f:61:8b:9b:53:99:e9:51:47:8a:ae:e0:04:22:7f:
27:8f:30:5f:ab:e2:14:d0:57:7a:db:93:3f:a9:7f:
b0:ed:7c:5d:48:37:c6:5e:03:a1:ff:e9:07:f9:e5:
b6:66:46:08:ab:7b:d8:43:4c:8a:d7:2e:3f:26:cd:
0c:38:b7:89:6b:9c:a7:3e:fc:d5:6c:7b:f2:2a:9b:
cd:fc:37:8a:29:3e:7f:09:48:61:61:b1:6c:3a:19:
32:f8:ef:31:ae:ad:48:53:52:7f:a0:6b:ef:87:f6:
a5:74:43:07:13:96:c8:57:a3:f3:7f:f6:3e:3f:45:
4a:21:db:89:9d:1a:4b:a8:72:df:e2:75:38:aa:f4:
ee:53:1e:bd:96:24:5c:11:20:14:fd:12:5d:ef:67:
c9:3c:2c:1d:7c:0a:25:ed:90:dd:02:e3:b2:2c:cf:
ab:18:be:a0:26:69:60:e2:f9:69:5b:89:e2:05:7c:
98:ba:6a:e7:75:5c:ba:20:6d:c6:13:a2:ab:b1:e5:
f3:77:14:82:1f:e4:02:38:a4:7d:2d:e6:dd:26:57:
06:8b:18:e2:01:a6:b0:06:af:23:9c:f5:a5:cc:9b:
1e:17:c6:bc:be:6e:8a:30:e1:07:b8:3f:72:c1:9a:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:B9:A0:54:C3:38:CB:40:C4:C6:FB:A5:D3:1D:07:7D:C1:68:2A
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b1:93:89:2c:af:4f:ef:6f:c7:cf:e9:8b:51:9b:d0:fe:df:
2b:a9:63:92:e5:56:60:a0:4e:cb:e3:6c:c6:ef:c0:a4:23:50:
20:c1:7b:a7:79:06:1d:b3:44:2d:81:a7:d7:f3:67:28:c4:35:
ee:dc:dd:04:95:f6:0a:d2:7f:df:f4:2b:42:37:79:fa:b7:8c:
e7:e2:13:0d:9d:a2:8e:52:38:34:d0:81:9e:94:1f:2a:27:ac:
06:24:3f:87:3b:b5:e3:42:fa:b1:7d:02:e3:98:e3:08:a9:b0:
78:22:93:da:a9:28:1c:0e:8d:fd:9b:b9:ae:35:38:3d:06:72:
b7:12:92:c6:f7:fa:67:90:e9:46:eb:e5:3d:c9:f6:60:48:69:
e9:e0:e3:10:7f:fe:2b:21:b3:57:30:cd:30:cc:67:1b:92:4a:
b5:64:b9:ce:0c:ec:5e:54:fb:3e:64:92:55:e1:d9:78:23:ac:
27:bf:3f:28:d9:0e:a2:26:89:57:00:ac:f0:19:cf:ed:56:e1:
c7:eb:25:32:9b:aa:d8:30:cb:73:6c:5d:fa:58:3e:31:11:f2:
0e:fd:ec:16:7f:ad:93:b9:a6:d2:0f:23:e2:f3:03:28:b8:15:
a8:73:f2:58:76:a0:51:13:a5:e5:69:64:0d:47:49:a2:4b:b5:
9e:f7:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:55 2025 by rpki-client