Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa
File: ef566134-dc37-415a-a1e3-05f23305a92b.roa (raw, json)
Hash identifier: sfnmtMoJCWabRPRxcjEDk3AIWcMoXekJpQN+41zqAc0=
Subject key identifier: F1:B0:D8:65:E7:AB:94:7C:E3:7A:5A:40:62:62:24:A9:5D:66:12:74
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 24AF730023B7AF5C0CD78F52A950BCCC51253342
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 7224
IP address blocks: 172.96.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:af:73:00:23:b7:af:5c:0c:d7:8f:52:a9:50:bc:cc:51:25:33:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=fbfa845905a1ef22dd56c8f7dc8a84766f03b4088fb5aa63d0fcb2bfa4c59a08, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:8d:34:ee:a3:8f:b4:a3:7c:bf:4e:b1:0e:
ef:4e:32:c2:e4:a2:66:80:43:b4:94:b6:88:b7:fb:
8a:8e:78:8e:fa:0b:a2:52:7a:74:ed:75:dd:04:77:
e0:33:8a:a2:6f:20:95:1f:16:4d:c1:1d:1a:81:7c:
06:a6:74:d6:30:59:b7:e9:08:c5:83:fc:2f:d8:c9:
ad:fb:4b:b3:ed:26:a4:dd:81:cd:11:6c:c9:38:bb:
69:26:1a:ea:e6:d0:ee:c3:a0:e1:3e:d3:e3:71:93:
fa:11:b9:88:10:8e:1a:d5:f1:9d:15:45:89:6e:bb:
b3:e5:fe:9a:cb:84:5d:b9:ec:8a:5e:51:89:3d:14:
6f:58:bc:0b:36:36:ff:44:9a:e0:cf:d7:58:75:d2:
bf:b5:fa:d6:bf:59:03:89:d9:82:0b:41:c7:a9:f9:
d4:04:f5:ae:a2:91:e3:90:24:83:63:2c:85:12:47:
b3:b4:41:d6:0e:d0:19:98:a8:fb:e7:99:0c:00:cc:
06:5e:78:cf:0c:29:d6:89:29:44:75:cd:d8:fa:ed:
e9:86:aa:63:2e:ae:d2:a7:23:1c:16:ec:5d:c1:38:
b3:48:70:45:3a:89:af:ac:2d:e2:2a:81:65:a2:ef:
8f:75:da:c8:f6:23:e3:c2:d7:7c:3c:88:fb:41:58:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B0:D8:65:E7:AB:94:7C:E3:7A:5A:40:62:62:24:A9:5D:66:12:74
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.96.104.0/21
Signature Algorithm: sha256WithRSAEncryption
26:12:d5:32:d7:2e:0c:35:fc:86:44:31:f8:b8:ad:40:5e:9a:
d6:65:8e:5b:e3:ca:fc:0a:aa:52:26:71:38:ee:98:e7:36:b5:
47:5e:8e:bd:be:ce:4b:32:66:cf:cf:34:3d:ca:c9:70:e2:2b:
54:c6:26:f9:1b:d1:b3:b2:d4:02:61:f8:60:78:4e:3d:ec:f6:
e7:e7:06:e3:67:e7:5d:f1:b6:01:bb:44:d6:c5:1d:76:c1:5e:
35:0f:33:d8:d7:d1:6c:cc:12:62:9c:c3:67:79:11:88:03:3f:
fe:2b:3a:4d:cc:e3:b1:c5:08:9d:3f:d2:d2:f3:be:62:ba:01:
3c:17:3f:a7:7d:de:56:19:63:70:70:c5:50:d7:33:59:0e:e7:
f6:20:7a:90:6f:33:4d:db:81:01:7e:bd:ff:53:0d:22:4f:98:
58:78:2f:6a:80:2d:30:b2:74:28:0a:d5:ca:f6:31:c0:8a:eb:
e7:88:43:0d:99:73:a7:e8:4c:81:d2:28:dd:80:7f:b1:67:0b:
bd:06:dc:5e:5a:be:5c:35:96:d2:c2:ed:9b:6b:d4:83:cf:71:
bf:22:1b:c0:9b:d4:35:02:ee:9d:54:28:f2:b3:4d:52:ba:24:
66:b8:34:fb:6d:ac:16:41:49:72:52:a6:6a:2e:69:57:d2:02:
5c:66:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:14:45 2025 by rpki-client