Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84569c8c-45da-4fe8-bbae-95501c98c472.roa
File: 84569c8c-45da-4fe8-bbae-95501c98c472.roa (raw, json)
Hash identifier: v4cPJH0p+lOHgK15GfhLn0RDk8fTD/tO7dhVHlbHWSM=
Subject key identifier: FD:65:73:AE:DC:66:45:03:11:03:D8:48:4C:1A:8E:A9:FB:1B:25:5E
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5F942133672A6F5F9F08BC5C6D2801284B60D5C5
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84569c8c-45da-4fe8-bbae-95501c98c472.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:94:21:33:67:2a:6f:5f:9f:08:bc:5c:6d:28:01:28:4b:60:d5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:e3:cc:75:ef:d5:05:ab:05:5a:4b:76:28:
44:63:45:37:1b:ef:ec:79:7e:96:70:54:d7:2c:5e:
ed:bb:5d:7c:e6:b0:2a:1f:03:9e:ed:6b:23:94:80:
fa:62:49:3a:e7:f3:cd:a4:9e:e0:de:72:f4:a4:6f:
eb:72:9b:f0:17:0d:d2:fa:79:6e:33:71:3e:39:ff:
43:4b:c5:65:52:4d:f9:b9:df:3d:17:7b:56:41:0a:
0f:d6:16:24:5f:d5:09:15:b7:26:96:37:17:b0:76:
87:e5:a9:8f:d7:aa:f8:99:82:ba:b0:34:3b:fd:53:
28:d7:da:c6:86:2a:88:fc:08:48:3f:54:d6:43:b3:
3e:ec:af:03:35:d7:10:ea:bf:9c:aa:76:15:e6:2e:
84:a4:1d:78:21:56:c1:78:75:89:88:20:83:91:51:
75:8b:5b:bf:57:3c:63:5a:69:5e:e1:0b:79:bc:b0:
d6:5e:70:31:45:e5:b4:d6:36:d4:9f:ba:e8:7f:f0:
86:03:e7:8a:5e:2c:c9:50:4a:0f:ed:15:b5:89:4c:
c8:1d:eb:7a:52:86:8f:77:2b:7f:fa:ba:ff:1c:61:
fe:c4:68:de:84:6c:18:fe:c2:fa:95:81:b1:91:d3:
ab:78:5a:e0:97:de:37:06:a6:dc:0b:de:39:7c:f9:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:73:AE:DC:66:45:03:11:03:D8:48:4C:1A:8E:A9:FB:1B:25:5E
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84569c8c-45da-4fe8-bbae-95501c98c472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.136.0/24
Signature Algorithm: sha256WithRSAEncryption
09:53:23:78:43:65:cb:da:44:2d:0c:8e:28:94:bf:fe:34:9a:
a1:f5:6c:70:1c:fe:0d:bd:24:fd:91:0c:85:73:22:03:23:2f:
de:d3:62:8f:12:32:6e:18:e2:60:05:71:b7:4c:26:06:58:6b:
15:5e:94:dc:1a:3f:1b:87:c3:78:07:9e:07:c7:ee:b8:be:a3:
0b:29:cc:d3:7e:93:bc:17:b4:c4:f3:9c:d8:2a:95:01:64:4e:
39:7e:e2:e2:0d:da:17:3b:ce:fc:ca:10:29:41:99:fa:4a:81:
cc:cf:99:6e:30:22:75:68:30:24:5d:7a:dd:08:11:8e:38:b0:
29:41:c9:91:52:1c:44:20:74:52:d9:1c:4f:f0:42:7d:11:43:
0c:f7:46:2e:1a:70:19:b6:0f:70:4f:58:ea:8a:b7:6a:7b:54:
05:13:0b:ae:1f:c5:c7:9b:37:c7:9b:4d:95:2e:86:91:4e:ff:
96:00:80:98:cc:c5:df:33:30:d0:91:2e:02:8d:f1:2e:7a:8f:
c7:bd:18:cc:91:68:f5:4d:fe:e0:7b:c3:3a:e0:7a:fd:89:5a:
d0:73:ee:36:f8:09:b4:d6:79:26:8a:39:d6:77:19:e0:f3:c9:
64:7e:e0:a8:cc:3f:16:5d:d9:fd:cf:28:aa:68:e8:47:02:4c:
4e:3a:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:39:03 2025 by rpki-client