Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/208a2712-fe4c-4e11-a6ab-8b5aae024500.roa
File: 208a2712-fe4c-4e11-a6ab-8b5aae024500.roa (raw, json)
Hash identifier: OoulF4hZBBxZ+yBvxzUewT5+5YwotEvLSoPKXdJLaHQ=
Subject key identifier: 4B:B2:59:FF:C5:20:CE:1D:7F:2E:44:2D:66:E5:1B:A2:D9:BC:51:4B
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 75FFEB85627353793CD7DE635455E2E7F0B66B7C
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/208a2712-fe4c-4e11-a6ab-8b5aae024500.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ff:eb:85:62:73:53:79:3c:d7:de:63:54:55:e2:e7:f0:b6:6b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:2c:80:65:84:e7:30:96:e4:a3:55:b2:f0:
fe:aa:54:b5:6b:a7:7e:52:7c:d2:ae:63:93:9f:55:
bc:f5:30:62:5f:c2:ce:6a:1a:24:d5:78:0b:6c:9c:
ab:d2:60:69:0e:13:72:cd:0d:a1:16:c2:48:6b:cd:
eb:12:8e:17:ca:cf:6f:be:44:8a:31:02:d6:45:77:
1e:b0:ff:0d:ba:8d:34:6a:22:c7:14:55:b6:d4:ae:
d2:20:63:1a:b2:cc:cc:b0:b3:c0:5e:68:ff:b2:b1:
3f:4d:af:66:3e:ae:b3:40:4f:04:43:c1:6e:0b:e7:
10:73:86:af:9c:60:63:b0:fb:8e:b6:c6:7d:c7:e3:
77:00:20:8d:ff:4f:95:de:f8:6a:18:a2:5e:8e:bf:
34:26:ad:d3:45:60:c5:62:23:c4:2c:4c:cd:18:a3:
7e:32:35:f6:ea:c6:85:8a:4c:5b:11:e6:17:7a:53:
c5:ff:04:ad:4c:9e:4c:11:d9:ca:c4:5d:06:94:d2:
46:ed:45:12:9c:fb:19:b6:7d:17:b0:94:2d:70:cd:
e8:bc:7b:d0:52:a4:dc:1a:5a:0f:96:b2:0a:fb:7c:
7e:e9:7c:d0:30:c8:d8:92:02:72:16:df:a2:3d:7e:
7a:38:84:d5:97:af:94:f3:fd:45:03:23:4a:59:e6:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B2:59:FF:C5:20:CE:1D:7F:2E:44:2D:66:E5:1B:A2:D9:BC:51:4B
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/208a2712-fe4c-4e11-a6ab-8b5aae024500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.139.0/24
Signature Algorithm: sha256WithRSAEncryption
53:13:1c:fd:a7:0e:36:f8:0e:5e:76:66:0a:1a:f0:b4:ad:6c:
f9:16:85:87:3c:55:d9:18:d0:10:46:9e:8a:46:f0:9d:21:93:
bf:07:dc:be:0c:91:0e:01:8a:12:4e:e1:bc:48:ab:94:54:e8:
0b:35:8a:09:98:66:4e:f2:ef:3b:e5:84:25:ee:27:df:e7:71:
e2:1e:4e:cf:6e:55:c7:e3:d1:aa:be:39:a1:05:71:31:be:db:
61:1d:ff:a3:94:12:fe:2a:fc:58:af:ff:74:81:e8:25:47:cd:
0b:15:bd:13:fc:1e:6b:13:6d:3f:10:c9:d0:10:17:ce:51:69:
94:25:c7:f0:ba:72:51:e0:b1:04:30:62:7e:51:3a:75:d7:66:
13:1c:c2:18:01:80:40:89:de:bc:9c:92:f5:31:7c:63:40:af:
2c:79:13:87:14:92:19:48:4f:a9:30:89:86:66:b5:fe:ad:11:
53:b3:69:b2:5f:53:17:db:16:1c:ff:3f:f3:4d:6e:eb:76:7f:
8c:92:ea:bb:c4:d0:bd:4b:74:e6:a5:43:d8:ba:df:7c:46:d5:
96:ec:99:63:5c:c1:b9:f8:9a:ea:87:ea:79:6a:21:31:d5:eb:
e6:2e:a1:0e:a5:1d:2e:64:a8:75:99:1f:dc:7d:54:b4:03:52:
1d:d9:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:50:18 2025 by rpki-client