Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa
File: fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa (raw, json)
Hash identifier: iguJdtLFdKFxTdBjf5+OuR4taHzUTfBpWAxMncW1HGs=
Subject key identifier: 63:52:C4:FE:FE:AC:0F:5B:06:A5:A9:F7:C1:DA:66:94:C0:24:ED:EC
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2EEEC05872FF5E51F4143BC35367285F13FBC05F
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ee:c0:58:72:ff:5e:51:f4:14:3b:c3:53:67:28:5f:13:fb:c0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=8ec3dd484ae7dab3ec709ac379ba355a8988ec5d8539f76aa105dd3cf40e5bfc, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:07:25:ea:d2:41:54:e6:de:6a:83:69:ee:
51:81:19:43:8a:9a:9d:63:de:3e:22:d9:5f:26:8c:
e6:ed:3e:4e:8b:a5:cd:f4:97:6c:1a:83:7f:de:b3:
96:f1:33:22:16:fc:ae:dc:e6:98:db:ef:9b:b9:38:
19:c4:49:1e:fa:13:d3:a4:6c:50:08:6f:6a:dd:c9:
f6:87:d1:d8:ac:eb:bc:df:fa:b5:c9:8e:eb:5c:ed:
22:38:d4:37:aa:c9:77:45:0e:cb:5f:2b:af:f9:55:
48:52:e8:2a:12:54:7d:18:a5:d5:b7:ad:8a:31:d1:
ec:b8:8d:da:22:52:fc:a9:f5:ff:c8:bd:d0:bd:95:
34:f8:38:ea:a1:f6:97:dc:3e:fb:71:33:2b:02:48:
b5:e2:9e:41:80:d0:c1:1e:97:31:e1:cc:56:91:8b:
cb:20:1e:53:84:6c:23:e1:c8:1e:08:58:dc:9a:09:
ff:b7:5b:74:3d:e4:f3:06:ee:c9:e3:b6:32:ae:f1:
f8:30:70:1c:02:87:b6:2b:60:80:be:ce:52:c2:19:
05:17:81:73:0f:ee:d4:21:9d:26:1b:e3:e6:3e:e9:
5c:cb:3d:1a:e7:3f:43:53:7f:f9:d9:14:96:b9:b5:
69:b0:45:10:f3:f2:4c:07:04:62:f0:9e:a4:e0:b3:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:C4:FE:FE:AC:0F:5B:06:A5:A9:F7:C1:DA:66:94:C0:24:ED:EC
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6d:47:cc:3f:11:02:a5:66:20:ef:14:f6:55:6a:76:d3:cf:
e4:21:1c:61:dd:00:46:f8:5a:d3:78:99:b9:80:c0:bd:bd:6a:
df:44:37:33:75:08:92:1d:ee:d2:3d:cd:e5:10:05:45:86:80:
e2:63:96:fa:75:35:09:84:46:c1:af:74:25:90:a8:e1:60:b2:
59:cd:54:b2:53:24:bd:c0:01:e3:25:5c:a5:cd:f1:0f:d8:df:
42:1e:4d:e1:4c:ce:1f:27:4d:d1:00:69:12:f0:ea:65:e2:ea:
1b:7b:58:cb:9e:f2:8b:6b:62:0a:54:71:fa:2a:a2:a7:4a:a0:
89:ad:fd:4c:d7:18:4a:d8:a4:14:43:80:83:46:78:b1:7e:50:
d7:ad:03:40:9f:5f:8c:f7:e9:61:d3:2d:36:54:73:97:32:d2:
84:e8:35:e7:4e:50:cf:7d:bc:7f:97:ce:04:b3:30:60:0e:2f:
e0:1a:43:0f:6a:5a:bf:34:1e:6a:dd:21:87:24:dd:08:59:55:
ed:c3:ba:9a:76:74:87:70:96:1c:6a:b6:61:9b:48:30:d3:d9:
77:08:65:7d:56:4e:10:16:41:75:19:78:4e:90:5e:93:0a:5b:
e1:6b:7a:34:39:21:05:86:be:fb:4d:7b:64:0c:76:3b:86:51:
a3:67:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:45 2025 by rpki-client