Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa
File: f67538ee-cd29-4883-9251-086023a50dc3.roa (raw, json)
Hash identifier: b0q8u7p2dwYajg0GI3pa6TrFeTjMRiaoNFAwC4Ib3P8=
Subject key identifier: CC:EA:0F:2B:66:12:B3:5A:CB:0C:8E:6B:D6:9B:0C:70:5F:16:38:C8
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 248D8D43656635BED498C34EA5DDC730B8808C5B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8d:8d:43:65:66:35:be:d4:98:c3:4e:a5:dd:c7:30:b8:80:8c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=dc14c8950299b1e1c8f70c2937b0b3e184724a5e134a6bf5dd5891ee3c44d450, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:c5:0a:87:36:e3:bd:69:da:9b:b6:8e:93:
15:f6:30:60:11:12:18:7d:8e:d5:cf:c3:c1:e2:5b:
1b:0d:2d:d4:f1:dd:ee:f0:c3:6e:47:57:7b:49:f9:
16:9b:35:ab:0d:f4:c6:b3:50:95:52:13:3f:a2:14:
68:a7:ac:0c:09:f0:67:05:78:82:fa:f0:de:ff:40:
54:fd:e5:9c:69:8f:fe:f9:cb:88:a4:8d:46:4c:1f:
2c:ee:93:c9:17:ec:3d:58:fc:86:01:05:5b:ec:36:
bf:68:13:b6:34:9e:a6:2c:42:fb:af:73:e2:b3:be:
6e:62:11:e7:0a:fc:79:8b:ca:43:3d:b2:a3:74:a1:
a9:77:55:70:29:52:8b:8d:46:6c:a9:f9:04:16:95:
e7:59:49:33:f5:ce:46:f7:80:53:99:25:d6:38:01:
c1:19:ee:00:4b:0b:f2:b0:7b:80:31:8f:69:55:63:
73:96:04:74:b8:0d:16:32:83:81:ae:3a:dd:aa:8a:
bb:54:ef:0f:b0:d3:6b:6f:27:fb:7e:05:7b:1c:81:
c0:29:ec:66:85:77:5e:27:3a:4b:ca:c2:31:f2:78:
fb:0a:87:63:0b:16:cc:4c:c7:73:85:1f:24:74:72:
1f:ab:f3:e8:b6:e7:19:b8:83:bb:18:10:6f:e5:69:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EA:0F:2B:66:12:B3:5A:CB:0C:8E:6B:D6:9B:0C:70:5F:16:38:C8
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:18:d8:03:d9:01:e9:56:5c:1c:57:49:26:8d:dc:2f:8e:8a:
7c:5b:62:47:82:42:04:65:97:8d:46:58:8a:1e:8b:03:c9:ba:
30:e7:f9:d8:2b:45:38:22:ce:52:30:5d:9e:d5:7c:e3:61:25:
a0:5e:96:a8:88:2e:30:65:e5:3c:47:91:f3:ee:10:3c:85:2d:
79:c7:25:31:65:a4:9c:39:c1:f0:0e:d0:6e:23:50:fc:dd:72:
a6:d0:c7:1b:e9:f3:86:1e:4f:17:95:a3:6b:a3:b9:4c:03:39:
c8:bc:c9:e7:e3:ef:43:4c:47:3f:69:50:e2:b4:8c:af:72:8d:
75:e5:67:ea:e3:fd:3b:3e:5f:89:d6:f5:31:07:58:ff:a0:f6:
09:8a:89:8b:e7:a3:02:01:05:b8:8e:07:00:ec:a5:3e:b9:6e:
65:8a:fa:b0:df:2e:2c:64:07:a1:97:cf:16:41:d3:f1:8c:f9:
08:f0:4d:6e:a6:a0:74:ec:8a:9e:0d:fd:85:48:e6:fc:d8:9b:
12:21:42:29:01:bf:4a:a7:9e:c2:04:9a:fd:74:f5:65:82:00:
16:44:e0:21:b6:f3:fd:54:1c:7b:b5:80:27:92:99:57:89:4d:
d5:d2:79:01:7a:9b:0b:a8:6e:79:9f:7b:cd:0f:d6:ac:9e:69:
4c:13:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:45 2025 by rpki-client