Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/073536a8-2e2e-4e13-9fcb-496a2374afba.roa
File: 073536a8-2e2e-4e13-9fcb-496a2374afba.roa (raw, json)
Hash identifier: 4At1VO4XxHMubB9AE8EODiFVz0Bnz18jk0i3+gyK2hU=
Subject key identifier: 1E:EF:7D:88:74:4A:37:27:F1:FA:22:F9:97:01:0B:C3:05:20:9B:83
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3B5100A432DEBF142742BD67FE425981449B86B5
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/073536a8-2e2e-4e13-9fcb-496a2374afba.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 76.223.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:51:00:a4:32:de:bf:14:27:42:bd:67:fe:42:59:81:44:9b:86:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:99:4b:88:13:15:60:35:f0:cf:5f:d3:a3:
eb:1a:55:56:6f:79:3e:54:47:c6:4a:37:67:29:7a:
5b:89:bc:b4:c8:a6:2f:07:10:68:af:e1:9f:4e:fa:
5c:eb:5e:38:b4:d6:54:55:ac:68:4a:48:03:38:f4:
78:07:37:3f:34:1c:d3:b7:5b:4e:82:22:7b:1f:2d:
54:b5:6f:d2:d4:49:b3:c6:48:3d:b5:ee:3f:80:e2:
60:d5:75:de:7a:ea:17:fa:90:22:5e:05:01:ad:ff:
c9:a1:85:64:09:09:11:ab:bb:5d:32:a7:21:95:0b:
9e:ec:bb:14:74:5a:1a:0d:d0:81:ec:8c:f3:7c:8a:
c1:90:88:c6:84:d4:88:98:11:cf:8b:6f:6b:79:ea:
e0:8b:74:0e:76:29:6b:2b:ac:a9:41:7b:68:6b:5a:
13:f8:bd:5d:8f:6f:ab:f9:9a:d9:53:17:04:2a:28:
26:8b:12:99:7d:92:58:0b:24:f9:5f:88:df:10:c5:
89:20:19:2c:fd:bc:a2:9a:fe:7f:c2:9f:a0:af:f6:
20:57:b5:38:cd:8b:0d:d3:ca:89:e7:00:9c:1c:f0:
a2:7e:39:23:05:6c:e4:30:17:8c:52:76:42:09:9c:
be:9f:76:cc:aa:d7:59:ff:fd:7e:17:94:a9:d9:d4:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:7D:88:74:4A:37:27:F1:FA:22:F9:97:01:0B:C3:05:20:9B:83
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/073536a8-2e2e-4e13-9fcb-496a2374afba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.176.0/20
Signature Algorithm: sha256WithRSAEncryption
64:f0:8d:23:87:cb:07:2c:47:8f:65:31:9f:fa:a6:87:46:76:
fb:f2:e7:9a:a6:a6:76:6d:02:2b:af:a9:8e:45:12:a3:a1:8f:
4e:28:93:ac:10:a1:38:37:c7:02:21:76:c3:49:0e:5b:4f:e3:
b8:04:47:5c:be:fb:79:e4:fc:34:f5:20:ef:75:60:c5:23:7e:
b6:0a:69:bf:3c:86:86:e9:8d:74:b0:25:a0:97:d1:9e:09:c3:
e9:89:c6:d8:ad:64:36:52:11:8e:cd:6e:7f:5a:02:20:ed:92:
5b:91:6d:3e:5a:13:3f:26:52:df:b1:b5:60:e6:d0:70:ef:6e:
e6:74:a8:31:9d:f0:fb:b0:80:b3:a4:c8:17:72:1e:60:94:8b:
37:87:98:06:ac:89:e2:04:a5:a4:6e:98:67:3f:46:15:56:c8:
57:21:2f:d9:9c:44:e2:c7:a7:a7:46:33:6a:89:79:2c:0d:74:
58:0e:61:fe:37:ac:1d:b4:57:20:16:f1:60:3c:ee:96:f4:73:
82:02:f7:4d:ee:d8:7a:2e:5d:1c:83:7b:11:83:05:d8:ba:9e:
11:e6:ad:a7:32:61:3c:1e:37:5f:c4:fa:d5:11:5b:64:39:ce:
62:51:0a:1e:cd:bb:f0:5f:07:23:53:6b:b9:a3:30:14:46:09:
ec:3c:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:59:28 2025 by rpki-client