Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa
File: c9752aac-8490-485f-92b7-6a6ba02b76d5.roa (raw, json)
Hash identifier: RDfxoU18xDUsS+bJSu8KhZPiUJFwfUAyUHpp4ugWWhg=
Subject key identifier: 1F:97:59:0B:3F:ED:3E:0B:C9:9F:46:69:AC:1A:2B:10:7A:D5:37:69
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 467216811C8F0A62A604066A2FBAC5CC35F51587
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 199.127.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:72:16:81:1c:8f:0a:62:a6:04:06:6a:2f:ba:c5:cc:35:f5:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=315fc8672bbb2f7911e383507418bd3f7e96589d2a4bf59a45c2978879f87f0b, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:1b:9b:5b:0c:68:1c:b7:3a:16:05:e8:1f:
ef:75:6e:50:f9:22:2e:33:57:80:18:ea:68:f2:78:
88:c7:b4:ed:69:64:ed:cb:74:c4:0e:c6:b8:08:5a:
8e:8f:a9:25:0b:e8:a6:3a:1e:23:9d:b3:d2:6e:1b:
db:5f:f8:b2:b4:3c:9e:43:e9:56:10:7b:13:28:89:
3f:df:7e:da:02:32:88:8f:11:b4:5d:f5:b8:cf:69:
b1:a2:50:d3:b5:b9:c9:aa:63:9c:a9:b3:ce:7a:6b:
df:02:cb:5f:83:2b:b6:05:3e:42:d0:55:7d:96:67:
5e:de:62:df:b2:f9:a5:97:9d:b8:a2:58:1b:c4:99:
27:f0:89:a0:72:72:ba:01:22:48:51:49:6d:dd:0d:
ea:7f:e3:d7:cf:42:ec:63:f1:87:49:67:69:91:61:
b6:5c:ba:ca:62:64:e2:75:70:6e:0b:25:57:ba:8b:
d3:9f:74:0d:36:e8:d9:45:c3:90:e6:6c:2f:08:8c:
4d:4a:94:0f:e6:3c:64:19:af:e8:92:c1:a5:95:03:
ba:f9:60:33:89:0c:a0:c0:90:c3:05:c9:a3:06:8f:
14:d1:6a:a4:1e:f4:08:cc:32:cf:a8:d1:83:fe:cf:
91:71:a3:03:79:67:5e:44:22:cd:57:69:d3:50:9e:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:59:0B:3F:ED:3E:0B:C9:9F:46:69:AC:1A:2B:10:7A:D5:37:69
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.127.232.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ba:09:39:4a:9c:15:d7:26:94:ce:64:88:75:61:5f:70:15:
e1:82:70:ba:70:4c:c2:db:da:4b:0e:f1:54:17:2c:0c:23:64:
fc:44:22:51:56:ba:ce:01:de:cf:f4:0a:43:f5:bc:05:3c:f3:
a6:f7:96:73:b7:70:13:7b:80:cd:6a:31:96:15:9d:2c:e9:ec:
d6:a8:14:05:36:a9:a1:39:c7:4b:e1:31:9b:a0:0b:e9:17:ac:
ee:41:66:9a:c3:5e:e4:af:d3:9d:a2:e8:df:b2:64:bd:20:3c:
14:f7:4c:4b:7a:87:73:df:eb:ac:0e:ac:b0:74:05:05:12:41:
6d:e2:cd:42:43:c4:a0:5f:83:71:ca:bd:85:16:2a:b1:97:9b:
f2:b2:53:9e:d6:4c:ba:7d:ff:af:99:d2:a1:b0:7e:36:c1:bd:
37:05:10:ed:97:a9:8e:69:d0:c9:37:1d:47:a6:1e:de:7a:7b:
d7:e4:3c:05:56:cc:dc:d0:67:ee:84:1c:35:0b:8f:8a:9b:99:
ec:8e:40:28:42:e7:eb:df:80:fd:b7:65:e4:55:53:98:ce:00:
dc:6e:5e:85:ed:fa:29:55:e4:c3:d0:6a:a1:87:8f:a9:7f:31:
ec:18:d0:cf:40:67:51:0c:90:12:cf:a8:04:69:93:d4:c2:a5:
63:9c:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:47 2025 by rpki-client