Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/26fc08da-85a4-4d3c-8d66-1c6767e44c24.roa
File: 26fc08da-85a4-4d3c-8d66-1c6767e44c24.roa (raw, json)
Hash identifier: qZGq+pCSraXbUJMIQwn7xFxS15XBEmQxLBXecrKKDBo=
Subject key identifier: 20:22:1D:F4:80:3E:BA:6E:CB:D4:FE:FD:27:76:82:AA:8F:A4:C9:7E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6BCE13AB8A98FE4BD8F0A1DE47E47D97FBA53AD1
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/26fc08da-85a4-4d3c-8d66-1c6767e44c24.roa
Signing time: Fri 21 Mar 2025 00:50:32 +0000
ROA not before: Fri 21 Mar 2025 00:50:32 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ce:13:ab:8a:98:fe:4b:d8:f0:a1:de:47:e4:7d:97:fb:a5:3a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 21 00:50:32 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:e2:07:e0:ed:be:f2:d6:95:a9:5f:83:17:
fa:ee:c6:d5:d3:e5:fa:b6:e9:70:58:f8:83:68:fe:
90:e8:3b:dc:72:32:f5:f0:90:62:f2:51:35:9b:5f:
bd:c1:d1:3d:b3:64:7b:9b:bb:3b:b2:15:34:19:bf:
6f:83:e1:77:38:f9:10:e4:5f:88:09:d8:72:9e:0a:
1e:5b:f3:2f:ed:79:28:e8:85:af:a3:11:6b:fe:1d:
1c:1c:e1:4d:a9:65:89:58:9c:35:ab:c5:77:61:66:
8b:e3:4f:53:15:b3:e7:38:70:1b:8e:2f:2d:00:b4:
a2:2a:b5:e2:e6:ab:db:58:03:ba:59:d7:ec:18:d4:
cd:03:5b:a9:6e:2b:4d:35:a0:aa:d0:5f:f3:79:4a:
2a:98:f8:c8:18:9a:21:a4:65:e0:30:f4:a6:39:f5:
ac:9c:23:a8:80:a6:47:b3:dd:3f:88:b9:73:65:0a:
b6:cb:6b:4a:0a:06:7d:be:64:c0:6c:61:e7:88:6d:
14:62:fe:49:8e:a4:ba:b6:74:14:38:8d:cc:da:bf:
e7:05:26:17:a5:bc:e3:b7:9e:27:95:97:b5:ad:c2:
4a:c7:c3:1c:c9:39:f2:0a:ff:fd:0c:27:b5:9b:2a:
a0:dd:38:8a:65:06:47:84:50:35:60:d8:13:f4:2d:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:22:1D:F4:80:3E:BA:6E:CB:D4:FE:FD:27:76:82:AA:8F:A4:C9:7E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/26fc08da-85a4-4d3c-8d66-1c6767e44c24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:00:92:26:31:a0:72:d8:af:e0:8a:c5:86:53:d6:35:45:10:
50:5a:dc:01:f3:d6:29:48:6a:ba:ca:fd:91:60:45:72:e4:7b:
c4:30:d5:0c:27:65:ad:f9:00:8d:2e:2c:4a:e4:9a:c9:34:37:
00:5e:e5:e1:74:7e:42:a9:b7:2e:0d:82:cb:00:65:ef:b7:01:
7e:00:14:66:3c:8f:a5:e5:77:7a:2d:de:fa:9a:b2:a1:e5:0d:
17:98:12:28:74:da:f9:1f:22:df:46:16:a5:7e:c2:a4:8e:2d:
67:7b:e3:2d:a9:e9:d9:c6:6d:07:b9:d8:30:ab:bf:23:2d:7d:
f2:87:01:fc:f5:0f:a5:10:1f:91:00:e9:97:54:2c:1a:15:66:
3a:59:36:9b:a1:e4:ab:03:00:bf:05:72:6b:98:3e:0c:3b:99:
36:b1:74:09:2b:61:6c:f9:e1:79:25:8d:52:78:a3:02:80:03:
ea:1a:3b:f9:4e:fe:b8:3b:58:b2:dc:1f:5d:4c:35:02:ee:af:
13:f1:76:94:3d:6c:b3:df:89:67:ad:e2:5f:0a:f1:1e:66:77:
be:58:d1:fc:5a:9e:30:b4:a5:3f:ea:a3:5d:e9:38:79:22:79:
6a:03:6d:70:49:9f:b6:d7:ff:78:2e:95:11:48:94:85:84:c3:
49:cc:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:05 2025 by rpki-client