Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa
File: dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa (raw, json)
Hash identifier: 3bQpzy5jMluoD0fEOVRebHXhHIbbFop1ddrbMUQxg/c=
Subject key identifier: D0:8B:72:C6:FF:61:4A:55:81:FD:7F:F2:37:D5:F4:89:86:61:87:A6
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5E5737C3730573655EA7319410369AE26F16B04A
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:57:37:c3:73:05:73:65:5e:a7:31:94:10:36:9a:e2:6f:16:b0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=5fa48b9f936335dd389441b4183702c93db528d86af5bf8a14bded538ce92a8d, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:2e:02:3e:bd:e6:9f:a6:6e:51:e6:05:1f:
90:31:19:9b:76:cf:e4:18:fe:67:02:50:54:15:03:
7c:62:a4:26:25:9e:bf:7c:ef:45:62:b6:a0:fd:07:
f8:c5:7a:0e:b2:58:ab:d7:20:bb:22:ac:b7:58:b9:
57:c7:30:39:76:14:65:7c:ba:ff:5a:69:06:1f:59:
9c:a5:68:98:88:dd:79:76:e3:f9:2f:d3:f6:a5:ea:
c3:92:17:dd:6e:45:11:24:8d:9f:5d:4b:e4:94:cc:
35:ba:72:17:f4:b7:22:d7:05:ac:26:ae:2e:c4:0f:
66:77:5e:28:63:f9:53:fb:42:4e:8e:88:99:73:01:
19:e2:8a:7e:55:ce:9c:53:b9:f6:96:bd:34:b6:30:
0e:e3:21:a0:0d:a4:7d:d4:f6:38:0f:ad:89:d8:cf:
b9:53:cd:31:29:66:99:51:9b:45:0c:99:6e:99:91:
4f:a7:25:bd:05:cf:e4:82:7b:e1:ab:99:ce:4e:44:
88:0e:c7:ca:2c:04:93:c9:55:f5:65:ae:0a:7c:67:
8e:62:c9:f3:79:70:db:e7:f3:da:5f:da:7d:8a:f6:
ce:44:9a:3c:30:95:cc:f6:64:25:90:3c:3f:23:69:
55:7c:b9:f9:ab:74:23:a0:fb:34:41:6c:05:0e:2a:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8B:72:C6:FF:61:4A:55:81:FD:7F:F2:37:D5:F4:89:86:61:87:A6
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.242.0/23
Signature Algorithm: sha256WithRSAEncryption
72:53:bf:a6:99:c1:f8:f5:bf:cf:54:f3:bc:b0:d0:5c:db:f2:
12:cf:52:55:b0:84:15:a9:b0:e9:e4:f0:ad:85:db:08:df:0f:
80:87:80:75:1c:70:89:b5:15:82:92:fc:c7:f2:d2:37:3d:4d:
cb:19:d3:73:d2:95:8d:63:82:c5:68:91:b3:0e:d9:af:91:e0:
38:eb:76:f6:a8:b2:80:ad:26:45:a9:8f:b9:4e:e0:88:23:84:
0c:2e:c8:d7:12:e0:2d:04:b3:61:5c:0c:f5:92:7d:4a:c9:80:
cf:77:08:1b:c0:04:99:ac:dc:5b:a0:66:37:a0:1e:44:17:c7:
04:1d:f2:fd:5b:2c:72:3c:ac:04:d9:b6:82:a8:54:4a:27:13:
5f:cf:64:c4:ff:be:b6:ed:ec:81:a7:c6:c8:39:05:00:72:4b:
15:5b:64:a3:7b:bb:e9:5c:98:73:ce:2b:7a:74:7a:74:ca:d2:
ab:9f:56:9d:6c:ba:e1:1a:0c:63:b2:e8:52:6d:ac:bd:94:42:
9f:db:c8:cb:43:c7:5d:e2:15:92:58:59:6a:cd:da:3c:84:5e:
e2:a7:60:d3:f0:74:a6:9f:ae:d3:3c:e7:f7:9f:c3:e4:7f:b4:
52:21:94:5f:8a:b2:d7:03:9e:86:76:58:a1:b3:a9:d0:f5:63:
63:c6:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:22 2025 by rpki-client