Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ce61141-236e-4f9e-b965-53beb0966112.roa
File: 7ce61141-236e-4f9e-b965-53beb0966112.roa (raw, json)
Hash identifier: gTlyaZRybe0J89pkArMViEgwLFgE5nM+RhVk6mJhOwY=
Subject key identifier: D7:23:54:A3:59:F0:E3:6C:E7:CD:03:07:7C:25:24:FC:19:1A:0B:B3
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 77DAC084C5A3B46E39B3DF6723504D12D5C30434
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ce61141-236e-4f9e-b965-53beb0966112.roa
Signing time: Tue 04 Mar 2025 22:30:16 +0000
ROA not before: Tue 04 Mar 2025 22:30:16 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:da:c0:84:c5:a3:b4:6e:39:b3:df:67:23:50:4d:12:d5:c3:04:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 4 22:30:16 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:15:33:61:81:de:f5:2a:42:9e:12:cc:c8:
9b:a0:83:87:03:c1:f0:c1:bb:ff:e8:ca:d9:fd:c5:
1c:c1:b4:7b:c3:61:c1:2e:50:cd:fe:56:bf:ee:6d:
fc:9c:59:8e:82:71:b4:11:51:a3:04:44:f5:f4:6a:
13:f2:ce:e6:84:f2:48:ca:d0:2f:ab:ff:e6:95:c6:
04:9e:57:44:6d:3f:03:94:6f:c7:fa:ea:7a:c2:b7:
7a:56:54:ea:fc:fe:65:e8:1c:c0:ac:30:09:99:b6:
c7:73:89:30:62:91:94:08:c2:35:93:98:20:10:53:
5c:16:aa:5f:4d:bd:03:fa:8e:66:94:0b:76:2e:e2:
43:5e:55:8e:67:48:94:2a:27:5c:40:f6:10:e1:16:
d2:d5:ae:b3:b9:b5:c7:93:d9:86:1c:a1:8e:95:39:
39:e9:18:80:ca:8b:4f:b8:ea:70:76:30:7f:56:b3:
b7:77:3e:58:d5:90:5e:8c:c2:d0:4d:87:f0:86:d2:
35:5c:1d:fe:06:dc:e8:15:a5:1d:53:0b:48:46:20:
09:ef:c5:cd:fa:44:41:88:1f:57:44:2b:fa:72:94:
30:86:94:fd:c1:81:f7:d2:62:aa:50:f4:70:68:18:
86:d1:f6:aa:09:c4:b7:a8:f8:8c:22:ce:7d:3d:9b:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:23:54:A3:59:F0:E3:6C:E7:CD:03:07:7C:25:24:FC:19:1A:0B:B3
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ce61141-236e-4f9e-b965-53beb0966112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.94.0/24
Signature Algorithm: sha256WithRSAEncryption
10:95:a7:fb:63:da:f9:91:23:c6:0e:e5:3a:52:65:21:df:29:
52:1a:04:6a:b0:55:1c:25:f2:7a:77:7c:f2:6b:2e:c7:43:fe:
a7:55:f1:2f:7e:a0:98:78:b7:c3:2a:c8:8f:dc:e7:a1:43:4e:
c4:b1:bc:97:35:23:bc:32:88:bc:fb:c9:2d:cb:bb:c1:2b:39:
4f:de:e3:9d:67:f9:07:a8:c1:1e:bc:3d:3a:75:8d:6b:94:03:
23:ee:62:80:bc:ea:32:9d:8a:9c:02:98:e2:4b:59:41:68:a6:
dd:b6:01:4c:c9:1c:6d:7d:a2:61:e8:b6:92:9e:e8:98:e7:0a:
cf:00:3d:29:17:9e:98:65:64:33:74:49:41:e3:31:44:1c:ac:
94:4c:19:2b:72:63:8a:6d:26:c0:00:1e:ac:eb:b7:86:d4:be:
95:6b:49:ca:12:75:9b:46:ba:0e:fc:dd:63:ee:cb:08:c8:f6:
2a:0a:1e:65:80:0c:e3:ed:73:e8:3c:2e:56:23:23:dc:6a:50:
79:01:2e:0f:06:42:14:d2:c6:b8:77:58:79:8e:39:98:12:b0:
00:10:a4:fd:24:88:37:f3:25:90:34:57:9b:ea:8b:a3:81:be:
4f:57:21:67:40:47:ff:e3:2c:0b:a7:72:68:66:d2:ba:c2:ce:
68:24:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:03 2025 by rpki-client