Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa
File: e1133321-dc3d-4778-889e-c80f1cc829c7.roa (raw, json)
Hash identifier: IF+9wn4/G3VdukywM8Zeb7BbQJnjzaSP8ga/YUPZGqE=
Subject key identifier: 8B:8C:6D:E9:7D:86:BC:8D:18:EA:C4:8F:3B:E7:74:79:DA:DE:39:57
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 74D474F312BB47384AABB201FF729B6133F1A019
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa
Signing time: Fri 21 Mar 2025 00:50:22 +0000
ROA not before: Fri 21 Mar 2025 00:50:22 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d4:74:f3:12:bb:47:38:4a:ab:b2:01:ff:72:9b:61:33:f1:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 21 00:50:22 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:31:d9:2e:cc:06:79:fa:d5:80:f5:35:eb:
1b:c7:5e:b0:1d:01:cc:5a:3f:70:cc:d6:76:fe:dc:
c5:94:90:b0:79:5b:fe:cc:f4:2b:08:12:25:7a:f7:
13:62:30:58:3c:d7:92:46:3e:3e:84:46:50:7c:d3:
0c:db:64:c2:46:13:3e:23:5e:54:b8:c3:71:33:05:
31:94:e2:6e:68:0c:f4:ea:39:a3:51:63:b2:57:2c:
78:0a:a1:78:9c:7d:90:9e:94:fb:f6:ed:0b:08:04:
e5:8a:7d:ca:19:3a:28:3d:2e:c8:4d:8f:64:5e:ad:
cc:5d:25:dc:3d:f5:a4:00:0b:be:8a:a9:ac:61:3f:
d5:57:03:4d:ab:9b:6b:be:82:ec:02:5e:48:69:cc:
cf:3a:d9:58:9c:a4:92:47:26:46:a8:c8:46:b1:5e:
ed:66:0e:91:d8:50:1e:63:f5:27:ea:c4:c2:75:90:
27:d9:23:87:bd:c1:2f:ef:fb:36:5c:8f:8a:80:48:
cf:2e:d9:33:93:c9:51:36:19:f0:9a:40:31:c3:b3:
75:23:46:24:6a:04:30:3f:99:03:a6:6b:7c:a2:b1:
36:35:b7:4b:4a:40:c6:b2:7f:19:48:30:ec:00:4a:
fb:50:32:f7:eb:7c:0a:61:18:98:40:bb:58:ba:25:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8C:6D:E9:7D:86:BC:8D:18:EA:C4:8F:3B:E7:74:79:DA:DE:39:57
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:54:ec:ed:98:f7:5c:d0:7c:32:93:7d:ec:d4:78:9c:70:03:
00:65:41:00:2f:56:3a:5e:84:64:69:af:3f:a8:5d:8b:25:7b:
f7:87:55:fe:e9:1d:de:1d:fc:72:c5:5f:1c:f1:86:c7:b6:46:
50:23:a7:fb:dc:3d:8b:14:5e:1b:59:51:dd:3b:19:58:ae:6c:
fa:ea:a5:9e:2d:5b:a0:0c:34:48:9e:d0:da:13:a0:73:1a:23:
26:64:82:15:aa:4b:44:81:03:08:0b:3f:b9:e5:8e:a4:68:3e:
81:2d:87:a8:e8:8b:61:22:78:cb:9f:5d:40:32:11:07:eb:5b:
c3:72:e2:ed:77:09:fc:f5:31:5e:bd:ae:5e:b8:2c:3c:b2:d1:
cc:60:f3:57:f4:01:2e:6b:67:4e:1b:90:4e:66:f3:b3:08:0c:
d4:18:2b:1d:c2:11:2d:99:9f:c4:54:8c:6e:15:80:3c:0c:32:
75:0c:f0:6c:9f:4b:85:8f:96:7d:3e:48:a8:ec:13:49:f1:16:
70:5a:db:05:f5:6f:af:ff:3a:4a:32:6c:5a:90:1f:d3:89:52:
cd:65:6e:1a:8c:1b:89:65:03:23:93:9e:b3:37:fb:0d:8f:c9:
af:2d:e1:50:10:03:bb:45:2c:d4:7b:0a:df:a5:2f:6d:97:b1:
d4:ab:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:30 2025 by rpki-client