Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa
File: c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa (raw, json)
Hash identifier: 9xwW3Fx0PqMT64RshAoIOLu2NeUrDGMy3PlUPSldtUE=
Subject key identifier: 5A:68:3C:D9:56:92:A7:97:72:86:26:A3:EE:F6:DC:45:21:1D:5B:E9
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1B33E9E70790FE22E096CFC549D786DEFFB4E028
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:33:e9:e7:07:90:fe:22:e0:96:cf:c5:49:d7:86:de:ff:b4:e0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=0cbe406391b1140d0b08211016585fbf26404dd0ae0b292e81de457cf0123af6, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:94:5a:c9:9c:43:f0:ab:d4:ab:71:21:74:
9c:12:e4:20:14:cf:d9:c0:73:0d:dd:6d:d2:c8:cc:
36:77:4c:5b:ed:13:96:1d:ef:ca:24:f7:c7:04:48:
5d:e6:de:bc:e2:db:b5:27:57:e2:81:99:ff:ab:23:
33:26:86:54:1f:4e:6f:14:8b:9a:3e:79:19:0d:07:
5c:a2:21:44:95:56:cc:28:f1:cf:ee:4f:92:a8:05:
8c:4d:3b:63:7d:1a:50:6b:51:5e:97:19:55:48:c8:
0a:89:24:89:5e:6e:e5:e7:e9:8d:56:99:22:a5:fa:
76:69:0e:e8:f2:95:0a:78:0e:6d:e3:91:7d:1a:fd:
2f:05:5e:17:a9:81:d6:f4:b3:a5:c2:4d:5a:91:31:
67:b2:c1:22:b0:08:16:2a:0f:7a:e0:fa:ff:bc:9f:
95:6a:b1:3f:2a:ac:f2:31:24:84:1c:3a:08:28:e8:
99:a2:e1:0c:21:fb:d4:4b:00:62:17:a5:1e:5c:94:
9f:ad:99:87:69:11:02:ef:f5:0c:86:54:bd:4f:9a:
9e:68:12:d2:3a:f8:2d:fa:e8:70:8e:4d:c3:1c:2f:
86:d1:30:93:25:0f:49:08:c5:c3:9b:c8:1c:19:b0:
63:e7:d5:e6:8d:f9:dc:2c:18:c5:93:7b:d0:5a:70:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:3C:D9:56:92:A7:97:72:86:26:A3:EE:F6:DC:45:21:1D:5B:E9
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.216.0/24
Signature Algorithm: sha256WithRSAEncryption
76:49:42:d6:36:25:5d:6d:54:c8:95:fc:8f:db:eb:1e:e2:66:
91:1e:fc:f3:00:57:8d:35:44:63:ba:be:d0:e2:28:6f:16:3b:
aa:42:9d:2b:af:f0:ef:5f:97:58:dd:0a:b0:af:87:2f:90:5f:
b9:9d:1f:b9:43:28:e5:97:8d:e1:bb:ef:58:a0:8a:cd:9e:ad:
3a:69:85:ef:98:c6:37:c9:c2:2b:cf:1f:f5:17:b5:e0:78:3a:
33:2a:f0:8a:7a:dd:c0:59:55:9f:fa:93:a8:bb:e7:ce:a4:3c:
f3:3b:e9:e1:d3:ff:48:61:e7:d4:47:0c:2b:e8:df:1a:dd:2e:
b8:54:46:1f:5c:81:e9:17:a3:d5:16:2a:fc:9b:83:2c:e7:41:
0d:5d:3c:26:f2:06:47:3e:07:6f:9d:c6:34:84:ab:f1:91:12:
8e:ba:0e:a7:f0:d6:eb:68:b6:69:40:3d:00:ca:69:10:14:57:
01:b1:d6:40:cb:c8:6d:d3:4c:47:ce:a2:fb:15:43:b3:b3:bc:
6f:f4:08:fd:36:65:65:95:f2:c5:a6:eb:c0:28:98:c1:6b:30:
1a:bf:ee:02:ba:09:b5:37:62:ee:ab:c7:cb:0b:b9:33:fb:06:
e8:6c:e2:0d:9b:5d:19:29:e9:57:0b:b5:88:a5:0f:fe:07:94:
11:b4:50:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:07 2025 by rpki-client