Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26f00df4-034c-4b0d-b280-697262a87247.roa
File: 26f00df4-034c-4b0d-b280-697262a87247.roa (raw, json)
Hash identifier: SRRdMzgg/TY5FKs2WKBYXar3y3SiDCZxjBR3ab1ilM0=
Subject key identifier: A9:15:FF:DD:3F:3F:B2:76:8A:BA:96:5A:91:02:EF:05:69:67:60:0E
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 14F2E7AD1FCE63125B6584976ED2920842C88257
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26f00df4-034c-4b0d-b280-697262a87247.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f2:e7:ad:1f:ce:63:12:5b:65:84:97:6e:d2:92:08:42:c8:82:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:07:e2:86:ed:bb:9d:30:68:17:bb:8c:58:
59:7b:63:0d:76:0c:e4:8d:a0:16:65:ec:d8:b7:78:
72:c5:71:cb:eb:ab:6e:c3:76:ac:93:97:48:83:13:
bd:5d:44:0e:67:49:2e:d8:fb:c6:b2:8f:2f:1c:19:
8e:95:2f:11:a1:46:67:31:ef:8c:99:f7:8b:68:e8:
b5:fd:57:80:7a:92:69:6d:08:21:58:27:22:01:97:
4b:7e:f5:d2:9c:00:47:a9:64:d7:e3:bc:a0:56:ac:
26:25:64:ad:0a:d0:1f:2d:a7:03:38:62:d7:22:73:
7f:e0:6d:bf:8d:ff:05:7e:06:3c:55:17:43:2e:09:
9e:e8:0f:c9:1e:5b:16:35:ad:61:af:b0:29:f0:c7:
15:1a:ae:68:51:c3:bb:68:ee:cf:a1:3e:00:6e:7f:
ca:0c:9e:b9:2a:e2:33:51:f2:95:72:46:eb:f6:04:
1e:50:24:04:aa:3a:d3:32:0d:22:7c:51:fe:ed:8d:
f4:b7:97:ac:92:16:41:e3:3d:af:21:6c:a5:52:94:
69:24:9c:62:73:5e:b7:73:a7:46:d7:b2:e6:e4:97:
4c:2b:0a:b4:dc:b9:58:cf:9a:12:ee:0f:74:92:85:
f4:ab:f6:af:56:39:ef:5a:bf:c3:0b:e0:cb:60:fa:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:FF:DD:3F:3F:B2:76:8A:BA:96:5A:91:02:EF:05:69:67:60:0E
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26f00df4-034c-4b0d-b280-697262a87247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.132.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3a:f2:68:79:21:24:34:1b:7d:4a:23:3f:c6:1d:80:f5:b0:
fc:85:76:6c:d6:b5:c8:d6:57:63:7a:12:45:7c:a8:80:2e:e8:
f0:04:13:4f:9c:e4:91:f6:e1:d8:7b:62:44:fd:43:2a:cd:56:
eb:71:b4:84:77:90:c1:03:e9:bb:fe:8e:e9:d8:97:ec:3b:7a:
13:1e:f9:63:75:7a:98:a3:e3:bb:bf:6a:19:94:88:25:6b:f9:
ea:45:32:f1:90:aa:3e:91:78:4a:ea:36:bd:6b:c8:b7:3f:7c:
35:f8:40:a5:db:40:01:7c:8c:3d:8e:ad:5f:c3:a1:26:d5:90:
78:ef:a3:38:59:e2:57:6f:e6:43:74:80:26:ea:59:56:7c:4f:
7a:32:b5:14:1a:99:65:41:87:51:67:c1:5c:1b:39:54:c9:1b:
20:31:06:75:51:a7:16:87:1d:ce:6b:6e:97:ac:ad:6e:c9:d6:
8d:91:d0:bf:54:46:20:0f:b9:4e:bd:ca:cc:46:5b:45:74:ef:
85:ae:ef:3e:bc:ad:3e:63:f4:5c:67:dd:17:e3:41:f3:ee:df:
6f:f6:ea:32:0a:5e:00:7e:6d:fc:7f:20:55:34:52:4d:d7:9c:
43:6e:17:27:a9:05:e4:99:21:0a:54:f3:bb:f6:99:d7:d9:c9:
86:e7:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:27 2025 by rpki-client