Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa
File: 801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa (raw, json)
Hash identifier: 4M5i+CPQkN0jj7ge+SwwuBCKRJTDdtZWqODzop1F8MA=
Subject key identifier: 7F:5F:C7:E8:27:F3:A6:89:C1:EB:EC:D7:48:0B:31:2E:21:0B:57:66
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 463BD9383DADC7CCE235810FC3D1FBF14FE09D1D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa
Signing time: Mon 10 Mar 2025 15:20:17 +0000
ROA not before: Mon 10 Mar 2025 15:20:17 +0000
ROA not after: Mon 14 Apr 2025 23:59:59 +0000
asID: 8987
IP address blocks: 173.82.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3b:d9:38:3d:ad:c7:cc:e2:35:81:0f:c3:d1:fb:f1:4f:e0:9d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 10 15:20:17 2025 GMT
Not After : Apr 14 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:3f:9e:78:64:62:0c:16:ae:20:0a:d9:0e:
af:dd:34:03:5b:ee:51:48:61:87:2f:6e:fa:48:45:
4b:ea:55:46:41:d2:9a:9a:8d:45:20:94:7c:16:ca:
32:88:e5:e6:9d:50:ab:dc:f1:ee:5c:14:5b:d6:35:
e0:37:be:4b:4e:e3:9d:1f:b5:a9:a1:58:9a:89:b3:
c2:e8:e7:f2:83:44:59:0a:c5:87:d9:b2:81:db:1b:
e6:aa:5d:ce:2e:fb:c2:4f:fe:1f:a0:4f:b3:51:04:
39:d4:f9:bb:5f:2d:f9:dc:74:1d:29:98:0b:88:db:
f2:3e:d7:92:d8:df:b9:a5:0c:33:05:3d:4e:3c:fe:
f5:17:fd:32:38:51:9b:a9:98:4a:bb:62:57:5b:26:
51:15:4b:ed:21:e1:20:cf:6a:c5:81:72:f7:e9:7d:
68:c7:0e:fb:84:be:70:e8:c1:8b:bf:6f:78:a6:6d:
f6:da:25:bd:c8:b1:92:d8:d9:fb:6b:6d:de:f7:20:
23:99:3b:95:f4:11:65:34:47:bf:aa:1f:5a:3b:6b:
e9:b8:45:a9:a0:b6:c2:40:27:1b:9c:d6:52:a4:b5:
81:74:9c:76:59:e9:04:af:28:9b:86:b6:9c:ef:fc:
eb:ad:f5:78:f2:6c:7d:03:09:ba:4f:f7:47:24:72:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5F:C7:E8:27:F3:A6:89:C1:EB:EC:D7:48:0B:31:2E:21:0B:57:66
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.255.0/24
Signature Algorithm: sha256WithRSAEncryption
80:13:5d:b8:40:84:d8:90:3b:b3:73:53:40:ec:34:93:2c:95:
2f:f0:0f:9f:80:d0:41:06:c9:38:51:d2:d2:e2:83:e5:0a:99:
af:e3:81:ed:d9:80:69:26:8e:48:1e:dd:09:58:85:b2:96:61:
c1:90:4f:cf:17:80:0b:32:cb:c3:9f:e6:f5:80:a4:40:43:a7:
78:96:80:cc:fe:6d:29:06:97:77:a9:af:d6:f8:9b:3b:52:02:
f7:93:c1:67:a8:6a:52:1f:b0:a2:36:22:f1:f7:bf:39:56:05:
56:9a:1f:bd:3a:7c:e4:82:8b:04:77:3e:23:ef:11:63:b1:71:
6d:e0:43:4b:66:c5:89:d8:8b:b7:53:02:b4:34:85:c4:cc:72:
f3:07:23:53:fa:c4:7c:1c:f9:69:64:56:23:9b:2c:7f:9a:83:
53:3e:bf:a4:ae:c5:09:fe:d9:5a:41:83:55:da:98:aa:69:45:
23:b4:8d:24:c2:18:85:a3:85:7f:fb:00:d1:8d:10:87:eb:c3:
ff:8b:d1:f1:e0:fc:df:1c:60:11:14:73:86:6a:b5:f0:77:05:
78:3a:fe:f7:d9:f4:b4:2c:02:0c:7a:8e:93:64:0d:66:6f:6d:
c5:d2:89:0e:e6:f5:33:83:14:c8:c3:c6:e6:f3:1c:43:e4:ca:
36:04:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:06 2025 by rpki-client