Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
File: 5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa (raw, json)
Hash identifier: FcUN3splsVz6WrjWk9VqqDfCN5zWoturukE8nGtukr4=
Subject key identifier: D1:6E:85:9F:06:0B:0D:50:81:2B:93:FD:57:D2:07:BE:F3:C4:E0:06
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2AC113A1F37DBD3D1DDCE1DBE82FD26E213C1ADE
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
Signing time: Sat 29 Mar 2025 00:10:27 +0000
ROA not before: Sat 29 Mar 2025 00:10:27 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c1:13:a1:f3:7d:bd:3d:1d:dc:e1:db:e8:2f:d2:6e:21:3c:1a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 29 00:10:27 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:17:46:a4:ad:e8:99:b2:29:81:82:b3:75:
33:18:e2:41:e5:59:f2:08:94:ce:67:0c:e4:f5:3a:
e2:fc:e7:2b:ec:fe:e5:5d:3c:a7:4e:9a:e8:7c:2a:
c2:b2:fc:37:68:d7:17:69:0f:07:da:c0:08:1c:2d:
99:fa:ff:48:3c:14:89:f7:9a:eb:84:b2:4c:58:3f:
73:77:5b:01:97:55:da:f8:6f:1f:78:84:47:c0:ce:
c5:90:fc:42:a7:34:7d:89:23:9c:1c:6f:5a:22:ab:
5d:66:6e:da:0a:77:a0:b8:fa:90:a6:21:c2:45:e3:
4a:59:4e:03:26:6c:35:c3:a3:9a:99:c0:29:7b:d3:
27:fc:54:88:33:f3:7c:2a:0f:c5:ae:36:83:34:97:
b5:4e:72:00:7d:fb:f4:dc:e3:57:0b:98:5f:2b:cb:
b6:28:34:bb:6a:98:f8:c4:a4:68:7b:83:e1:57:6c:
e9:2b:0a:fa:8a:0a:64:cc:b3:97:26:8f:99:bb:82:
3f:c9:bc:17:dd:78:20:da:ca:76:8a:07:01:62:18:
fc:0a:bc:de:aa:63:71:c8:42:95:ad:87:40:75:f9:
e3:cd:23:b9:f7:dd:f5:1c:61:f4:14:20:91:67:cb:
51:b3:c8:c7:04:fb:8d:55:9f:45:9e:79:0a:d5:ff:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:85:9F:06:0B:0D:50:81:2B:93:FD:57:D2:07:BE:F3:C4:E0:06
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.235.0/24
Signature Algorithm: sha256WithRSAEncryption
45:02:ee:cd:e2:c6:ff:3a:d9:90:ce:c0:9c:ac:8d:38:47:56:
ca:9d:81:14:51:31:88:b1:81:2a:a1:cf:6e:52:94:d3:dc:5d:
38:b4:2a:83:69:9d:fe:95:33:cf:2e:67:88:11:92:c9:5e:88:
66:52:08:04:62:c1:f7:18:a6:2e:b5:c5:fd:8e:4c:1e:7b:78:
69:0d:f0:39:29:16:f7:ca:1a:5d:e0:07:8a:db:29:32:77:93:
58:e3:c6:c8:b4:c5:a6:de:13:2a:b3:29:87:b0:dd:7f:65:be:
20:11:3d:8d:a4:a3:8f:55:d4:34:55:8e:47:a1:e7:c2:9a:c8:
22:fa:b9:d5:37:be:e1:dd:96:c1:c7:8c:59:14:18:d7:22:32:
b9:aa:ca:79:8b:ab:d6:66:9b:1a:71:dc:a6:6e:4f:f4:7f:ef:
9a:96:c2:68:cc:e6:2e:22:4e:b8:9c:67:a5:38:5b:3c:45:6e:
74:8e:4a:22:c7:08:b3:df:40:d8:6d:aa:03:bd:4a:24:28:56:
54:b9:60:df:fa:b4:fe:5f:e4:0f:24:d5:b0:29:2b:75:a1:ea:
2e:a4:62:07:e3:cb:14:af:3d:a3:17:74:04:74:7b:35:5a:27:
7d:2d:74:c6:69:92:20:03:c4:c4:95:b4:96:bb:d1:dd:ad:61:
da:1d:46:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:13 2025 by rpki-client