Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa
File: 161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa (raw, json)
Hash identifier: 4nYEG8pnoKdi4ADt9OoAn6aLExH05O21hVkOCjfu4LM=
Subject key identifier: 89:2F:13:99:3D:71:DA:C6:8C:8E:87:3A:2A:14:39:F9:BC:E7:29:8E
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 78B826F60A6B27A48A0752146D10EE134F71D4A6
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa
Signing time: Sat 29 Mar 2025 00:10:23 +0000
ROA not before: Sat 29 Mar 2025 00:10:23 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b8:26:f6:0a:6b:27:a4:8a:07:52:14:6d:10:ee:13:4f:71:d4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 29 00:10:23 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:e0:76:39:67:5b:3f:72:8b:cd:63:7e:92:
82:7b:34:b9:6c:aa:a8:27:44:44:ff:ce:b8:90:90:
b2:d9:b5:3e:80:23:66:65:62:52:bc:3d:ab:8b:c1:
1b:ae:1b:8a:a2:f1:ed:57:e7:ef:4e:ad:cb:32:db:
be:66:e1:b2:a3:69:00:9a:c5:11:da:e6:d9:36:41:
94:74:28:80:00:37:bd:3d:0f:ea:59:4e:ca:0d:2b:
23:7d:32:f8:42:ed:04:f0:32:7c:78:15:fa:5c:cd:
f2:4e:c6:a8:e5:94:57:a2:a3:a3:dd:6e:76:d1:ed:
d1:d9:1b:61:e9:c8:84:9d:f3:96:5b:b3:7a:69:8e:
72:35:89:3c:78:d4:21:dc:b5:3c:d7:0c:d6:82:52:
5c:e6:46:21:81:5a:a9:a2:81:4d:60:44:4c:ac:78:
c3:50:02:a2:b5:29:e0:a5:7b:d0:99:66:77:8d:76:
62:1d:95:a7:f8:d9:be:02:12:76:1f:0a:88:ba:f1:
70:3c:ee:07:e5:33:4d:cd:1c:b9:cd:c8:53:f4:b2:
19:19:26:70:b9:a0:69:45:f4:63:3b:3a:b0:19:6e:
7c:0a:ab:76:a3:79:c6:2c:65:39:69:9e:09:d8:1c:
f4:32:61:e3:a2:2b:6b:25:f7:01:c4:5f:63:b4:11:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2F:13:99:3D:71:DA:C6:8C:8E:87:3A:2A:14:39:F9:BC:E7:29:8E
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.244.0/23
Signature Algorithm: sha256WithRSAEncryption
95:91:16:b7:a7:59:19:57:36:da:7f:6c:15:0e:34:0d:59:31:
13:a1:a2:a6:7e:14:c2:1d:b7:32:83:a8:32:5c:57:fe:1f:95:
85:16:8e:6d:f8:70:7c:b0:3c:76:01:04:a7:e0:7e:e8:69:fd:
22:3a:c3:ea:df:62:c7:3d:dd:82:e3:7a:e4:18:62:2e:11:5c:
5f:31:01:47:e8:a2:b0:fd:65:1e:3d:ff:03:9b:c4:9c:c1:7d:
39:4d:3e:a2:91:2e:a3:64:b6:29:7b:ed:18:be:d0:a9:74:ea:
ff:fb:8d:f2:70:25:07:ba:cc:e2:88:e4:c2:a3:c1:5e:fe:06:
df:10:b2:6c:34:8a:bc:92:33:d6:11:ea:ca:14:f0:a0:bc:69:
a1:ea:6c:19:e2:2c:02:34:f3:a9:1c:42:94:8a:e5:2a:34:6a:
e3:0d:c5:eb:b3:9b:5c:6f:b6:20:4e:53:df:21:29:2a:a4:52:
33:3b:04:18:83:2a:f4:6b:81:b5:e9:3e:92:58:f0:20:93:6d:
bc:74:0f:38:83:b9:58:26:34:ed:d0:75:00:00:b0:c1:2d:f5:
e4:0c:dd:97:17:d8:98:b6:bc:42:c5:a9:2f:29:fc:5a:c0:af:
df:73:a9:d6:90:17:f2:a2:e0:92:52:7a:f1:a9:93:d8:55:da:
b9:56:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:20 2025 by rpki-client