Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/95fe4378-32a8-4fba-a78c-ef4e36a9abb9.roa
File: 95fe4378-32a8-4fba-a78c-ef4e36a9abb9.roa (raw, json)
Hash identifier: E/v5MPX+bWsiMN/z2FCyV8Xinxy5i8X71/X2loUl0KA=
Subject key identifier: 6D:B7:7A:3F:1A:E7:29:C5:BB:8F:04:68:B1:22:96:AC:45:70:5A:AD
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 0D2A275F772E759E451D9E4107313A91687CAE94
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/95fe4378-32a8-4fba-a78c-ef4e36a9abb9.roa
Signing time: Mon 17 Mar 2025 15:20:14 +0000
ROA not before: Mon 17 Mar 2025 15:20:14 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2a:27:5f:77:2e:75:9e:45:1d:9e:41:07:31:3a:91:68:7c:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 17 15:20:14 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:3b:9c:cc:01:68:15:72:67:59:00:25:55:
a0:03:6c:48:1e:ac:f0:d1:e0:56:12:d5:2b:e4:22:
57:fa:22:5c:46:26:84:0c:4f:c2:d0:c4:a8:74:ce:
e6:7d:cf:0d:fe:b5:f4:4d:94:d2:bd:36:4c:ad:65:
5f:02:28:df:31:ad:95:5f:1b:b9:44:f0:b2:32:a1:
a2:b7:bf:34:b3:4e:22:2a:42:4f:35:c9:29:c3:10:
95:be:d0:d9:ad:27:17:06:74:31:b1:f0:94:15:96:
46:76:2f:64:d2:44:1e:9c:f9:0e:89:7c:66:a8:c8:
50:db:3c:15:ee:96:c4:7d:0f:2d:99:cb:f8:1f:ce:
f3:f0:b8:31:65:b7:0c:27:76:58:08:7e:f9:23:47:
7e:07:44:7a:72:1b:d7:9d:35:01:36:59:a5:f4:95:
61:e6:44:8f:4e:95:46:16:c1:35:bc:50:32:ac:29:
49:d3:d1:9d:0b:bd:82:08:8a:78:a2:fd:db:6c:3d:
fd:45:89:2b:50:d8:1d:08:45:dd:09:62:3f:a2:e0:
8d:ba:07:31:05:7f:a8:f9:ed:05:78:64:3c:11:09:
c9:d6:62:e8:6f:81:4a:f8:32:ef:d4:50:b2:a0:0f:
55:b1:82:7f:ed:b4:a6:fa:40:9e:16:7c:53:58:a0:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B7:7A:3F:1A:E7:29:C5:BB:8F:04:68:B1:22:96:AC:45:70:5A:AD
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/95fe4378-32a8-4fba-a78c-ef4e36a9abb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:52:01:63:ea:18:e1:a9:26:97:8a:aa:b2:b9:ae:4d:c3:3f:
6b:b2:96:91:d3:c8:a6:0b:92:92:bc:19:79:2a:f4:18:26:0e:
cf:3f:ab:43:bf:44:f0:e7:b6:09:82:0d:eb:de:7b:75:a8:9f:
1a:00:dc:22:29:51:60:31:1a:7c:44:0f:f2:4c:f4:7e:92:55:
89:0f:bc:e5:db:13:fc:4a:bc:81:7a:2f:f7:15:10:90:82:ad:
4f:78:61:85:d3:10:86:d7:a9:bd:db:a5:fc:da:29:fa:ae:eb:
71:a8:d9:e1:58:b9:9f:4b:f6:7c:b1:30:2d:ce:63:00:fd:1b:
4e:35:f1:37:71:61:a4:be:49:0b:37:d3:83:fc:d5:e3:1c:30:
a5:be:e0:59:20:b5:fe:07:e8:0b:08:8e:d1:72:2b:7f:e6:9e:
36:a3:b1:81:bb:48:e7:ea:93:26:40:99:bc:c4:08:c6:80:f7:
37:af:20:b0:89:cf:85:00:bb:47:71:47:b0:e5:74:9b:c9:9c:
13:0c:d5:36:1c:c8:b2:8c:f6:02:13:08:93:0f:3c:18:01:11:
25:37:d7:0b:79:80:af:91:64:44:57:ee:f7:ce:4f:79:57:22:
3d:04:95:2f:20:68:c5:72:da:32:99:08:0b:04:f7:1c:a0:e5:
41:bf:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:28 2025 by rpki-client