Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa
File: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (raw, json)
Hash identifier: 91CWrb9aGm5iqDNLNC6RexiutM4MXM5XCERLKQ9waI8=
Subject key identifier: C9:F8:89:CB:94:FE:F3:51:E5:7E:B2:CD:37:BD:02:1B:44:30:8C:EA
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 1A177965DB5C353CD050E8135FBCFECD2200DFAB
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 62785
IP address blocks: 172.96.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:17:79:65:db:5c:35:3c:d0:50:e8:13:5f:bc:fe:cd:22:00:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=783684127d4ae603b97430c1054ccf29154ce4dd830e6c6c63fb2e4e25a67778, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:fa:c4:38:50:12:64:d0:17:61:68:18:c9:
61:a9:28:35:af:35:82:a3:23:ec:ec:20:cf:88:23:
ce:c9:3e:de:ac:59:5b:c3:22:48:12:c4:ea:7a:97:
09:ec:05:9c:1d:db:66:e1:4f:a8:44:33:5a:a7:83:
5d:1e:c1:10:b2:6a:1d:9e:ae:32:bc:3c:a4:3e:a2:
4e:23:75:e8:39:6d:4a:ff:8b:6d:4e:b5:b8:2d:e9:
1a:85:5e:8e:b6:54:4a:ee:a3:6d:49:a8:c0:b5:c7:
99:fa:06:69:41:a7:97:9d:39:30:d6:ff:30:54:79:
4d:5c:9a:16:89:81:2d:7c:61:e1:c8:68:8c:10:0e:
30:00:fc:0d:d0:4e:77:62:c9:e3:35:c1:1e:72:b4:
ce:25:a3:21:69:40:e3:ae:ec:df:56:b3:67:c0:74:
41:df:38:a8:26:12:29:de:d6:ff:0b:04:ec:84:c0:
b0:df:7c:e1:db:cd:42:06:1f:b4:5d:8b:0b:e4:a5:
c9:ae:a4:0d:4e:1e:7b:17:f2:f9:73:4c:75:4c:14:
01:1e:bc:1b:74:4f:4b:38:d8:96:d2:d3:c2:b7:c9:
06:73:ac:39:35:e7:a2:22:c7:71:5a:71:14:62:c4:
69:bc:a4:fd:9e:c2:c4:27:0a:bf:9d:ac:31:25:5a:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:89:CB:94:FE:F3:51:E5:7E:B2:CD:37:BD:02:1B:44:30:8C:EA
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.96.96.0/20
Signature Algorithm: sha256WithRSAEncryption
00:89:67:8d:ca:b7:9e:b1:e7:a4:9e:d1:38:f7:0c:2a:16:31:
2c:09:13:67:05:6d:b1:19:ce:a0:4a:f3:ea:13:0a:d1:68:88:
9d:46:c6:d2:99:62:7e:23:e1:5e:fe:31:59:de:a0:da:c8:4e:
66:18:e6:5e:28:8d:77:29:ad:65:a0:78:ae:30:eb:54:9f:60:
f4:1d:b7:d6:f9:f8:b2:29:e0:66:48:c1:cd:eb:74:07:f3:e6:
3c:57:28:74:89:d8:4e:a4:8d:53:d2:65:1c:13:c4:72:51:3e:
d8:ed:dc:cb:35:a7:a2:ae:97:3c:3a:e7:af:b9:b9:06:91:b8:
92:d7:22:8b:c8:e7:0d:e6:59:ba:38:1d:a4:fd:4d:18:ba:17:
a6:eb:bb:e2:fd:66:da:50:8b:02:af:b7:bf:1b:ad:52:9b:27:
59:b5:f1:fd:ad:fc:51:e0:54:a4:65:20:78:08:3e:c9:a7:10:
26:1d:38:83:6a:1e:2d:5a:5a:41:6d:81:2f:72:00:2f:3b:b8:
b0:bb:48:21:7f:a1:d9:29:6b:0f:bc:f2:ee:67:9a:fc:38:0f:
bf:6b:86:44:e3:13:fc:c3:d5:21:43:dd:15:f3:8e:0c:db:02:
1a:ff:75:a5:51:d6:4f:78:9d:ae:33:2c:92:45:9d:64:b8:b3:
14:4c:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:04:30 2025 by rpki-client