Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa
File: 36d19c61-2356-453b-bdde-185259d9b804.roa (raw, json)
Hash identifier: Af+P516c/pBUAhk4OVy8nYj+NDhcevaH4VTsbZtg3KM=
Subject key identifier: 19:23:7A:A0:B4:CF:43:7F:55:3E:93:27:92:A5:28:C8:0A:E0:82:F8
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 69FA4E34D7B13651A583F0D6D95075C4666D2F0D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa
Signing time: Tue 04 Mar 2025 22:30:18 +0000
ROA not before: Tue 04 Mar 2025 22:30:18 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:fa:4e:34:d7:b1:36:51:a5:83:f0:d6:d9:50:75:c4:66:6d:2f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 4 22:30:18 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:bd:45:78:83:95:e2:a2:b8:31:0a:89:76:
b0:5f:45:9a:59:cc:40:ac:96:54:5e:f9:7a:9a:5a:
89:74:71:8c:d4:61:ec:ce:0b:4c:1b:11:30:35:ac:
b9:b8:44:6a:70:e9:7c:2b:be:b3:7c:1e:79:20:d7:
72:b1:31:42:33:05:55:e1:15:de:bb:41:49:51:9f:
0b:e0:7f:5f:bc:2a:b3:af:a0:04:b3:97:35:eb:d8:
93:90:54:cd:75:02:e7:d4:18:3b:29:b9:75:dd:b0:
75:04:47:bc:f9:6f:7f:8a:a4:d8:52:79:8a:a9:e3:
74:2f:7c:4a:84:84:a6:d8:39:a8:eb:f6:ae:60:e9:
14:8b:0a:c7:13:8d:fe:f1:76:39:37:dd:15:eb:87:
3b:be:8d:18:25:3b:84:26:ad:bb:2c:8a:39:4a:3f:
0e:a7:f7:46:74:b9:e6:c3:d8:53:9d:c7:04:fc:2c:
a1:49:e3:69:76:a6:51:0c:fa:ae:03:c6:25:12:57:
11:14:61:e2:90:f0:47:6b:f2:6a:9a:b0:34:b2:21:
49:1e:66:18:f8:ce:25:d9:ae:20:7d:65:8b:23:1d:
f2:2b:d2:77:b5:62:88:77:fe:ae:f5:bb:2e:89:a6:
2f:ed:16:d3:2d:d0:1e:9a:fe:8d:3f:8f:b6:4c:f1:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:7A:A0:B4:CF:43:7F:55:3E:93:27:92:A5:28:C8:0A:E0:82:F8
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.5.0/24
Signature Algorithm: sha256WithRSAEncryption
26:91:1d:b6:4a:05:44:f0:56:fb:eb:49:59:c2:f3:1d:91:23:
f5:01:69:89:6a:72:6d:a0:ef:6b:22:3c:d6:2d:f5:11:aa:15:
68:24:21:bf:17:26:9f:de:84:27:36:39:31:c2:0f:13:d8:55:
39:e3:f2:87:06:b5:67:21:0f:67:72:ee:35:6f:bd:eb:00:12:
03:0e:7f:7e:ce:6e:38:66:c9:25:fa:35:b6:58:46:e5:b2:d5:
9d:d2:8f:53:a1:a1:4e:93:9f:7a:fe:1a:e7:e8:c0:33:e4:b5:
da:63:bf:2d:9e:39:a9:3f:cb:74:94:58:0a:8a:4e:82:41:5d:
a9:0e:28:a9:41:8a:65:c3:86:f4:14:97:83:9f:75:42:b3:6e:
f8:02:27:22:42:f8:1e:f5:b0:8b:48:f3:5e:7d:cd:c6:c9:cc:
8e:f7:7a:12:6a:c7:0c:c1:df:0a:3a:ff:1b:ed:91:a4:f5:62:
ed:36:57:56:9d:91:5b:f9:21:f1:2d:61:fa:a6:3c:e5:3c:ef:
05:b5:a7:28:62:8b:b3:0c:30:6f:ad:30:16:c4:13:e6:92:a8:
0e:67:4e:5b:15:e9:f2:67:a5:67:45:61:cd:8c:8e:94:70:2d:
fe:9e:d1:32:ef:c1:80:34:7c:f8:50:b3:d8:cb:43:14:19:d6:
0f:48:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:02 2025 by rpki-client