Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa
File: 35dd8080-5375-4755-bea9-982f40526ea4.roa (raw, json)
Hash identifier: c/kXXIx4mWfQzHOsab7qrxVyCxczXIrSA8Zi9O0veo4=
Subject key identifier: 1E:F1:F6:32:87:28:22:A9:54:92:CE:D3:65:0B:94:C8:E0:3D:B5:A4
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 403B0727966FFC408D7DFDCC61EF45A7B689A97C
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 7224
IP address blocks: 172.96.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3b:07:27:96:6f:fc:40:8d:7d:fd:cc:61:ef:45:a7:b6:89:a9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=3450cad696435b14d7888bb6e5f4d33c45e7cee1ebef189dc5799e3e9586a6e1, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:30:79:27:5d:fb:d7:19:a6:da:27:3e:40:
84:02:78:a6:48:99:1d:ea:d6:f8:92:44:fd:7d:d4:
95:fe:a3:42:5b:56:8f:21:a9:ba:3e:ee:13:4a:8f:
a0:13:6d:6c:61:84:63:1d:f1:cf:f5:a1:35:1d:3a:
20:cb:fe:f3:d8:d1:9b:0b:68:b1:69:e2:51:79:1d:
af:f2:51:9f:de:2e:eb:4a:58:54:37:d0:88:81:39:
e2:4a:e9:fd:f0:22:c4:b9:12:fe:99:d3:9c:07:95:
be:b6:5f:11:62:cd:e8:87:c3:9c:c8:26:cb:09:d1:
9e:8c:88:a2:0f:58:94:4e:1a:23:1b:74:39:44:e7:
eb:6d:bb:c6:c4:cf:88:4d:56:5c:4a:fc:33:b9:91:
18:6d:28:18:87:f2:b5:b6:1b:66:93:19:d0:41:47:
c6:e8:d7:b8:ae:3d:82:54:3c:4f:b2:1b:d2:b6:68:
43:a3:ba:e2:14:d9:5c:b1:f1:b1:80:5a:10:ee:c5:
58:27:78:a9:3b:db:60:98:67:78:e2:67:b2:64:27:
40:95:a8:71:11:0d:0e:48:0a:11:1f:83:d0:37:6f:
b0:cd:b9:ff:a6:0a:22:f7:ca:45:4e:a7:66:f8:d2:
a3:80:2c:fa:d0:e0:a3:0a:26:49:15:1a:1b:aa:81:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:F6:32:87:28:22:A9:54:92:CE:D3:65:0B:94:C8:E0:3D:B5:A4
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.96.96.0/20
Signature Algorithm: sha256WithRSAEncryption
08:c2:b5:49:31:47:41:fa:d9:b6:25:fd:c0:82:ac:d0:1a:a1:
91:ce:d4:4b:61:df:32:3d:0c:db:21:3e:3e:e6:c9:7a:07:20:
cc:63:1f:f0:cc:eb:02:2b:c9:54:b9:8f:16:8e:38:09:77:79:
d6:8a:10:fd:9b:c2:bc:07:13:8c:77:c0:1f:37:39:93:88:a2:
00:20:3b:b9:b7:49:4f:2d:28:57:2f:b1:e0:3e:05:4b:5f:ba:
58:71:b9:d6:3b:13:26:03:57:c3:e7:0a:eb:26:8f:26:d5:36:
80:a5:7e:c6:72:84:5b:1a:f5:ad:dc:a4:e2:ce:b0:5d:66:9b:
11:d5:1d:e8:a0:c8:42:c0:56:88:a1:5f:47:e4:85:50:18:53:
74:03:22:82:c4:89:2e:2b:b0:c3:c1:2b:1f:34:34:87:55:e3:
26:ba:57:3c:d1:99:b1:36:13:1b:0e:87:5f:53:c0:81:85:58:
89:11:1d:ed:5b:62:5c:be:eb:70:62:b4:11:47:d2:fb:8a:2d:
f6:ae:a4:fc:11:01:71:ff:29:c1:f2:63:4a:b2:18:68:a2:47:
e8:be:2b:b5:ea:1c:a2:69:14:07:ea:94:89:5a:b7:f0:93:6b:
5d:1d:fe:00:15:59:dd:d4:4a:6c:a6:91:10:97:af:3b:a0:a4:
9d:a3:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:00 2025 by rpki-client