Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
File: 84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa (raw, json)
Hash identifier: 8szPBYa3ytPOaHwouHrsA/H24FMY7LoU2L7yGEEDgRU=
Subject key identifier: 9D:57:48:71:34:F6:E0:E0:45:B6:AA:F6:18:B7:91:89:77:33:57:CD
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3F30761CF118F9E5C09EBF73A1EB0CF9A1B4865B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
Signing time: Mon 17 Mar 2025 15:00:26 +0000
ROA not before: Mon 17 Mar 2025 15:00:26 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:30:76:1c:f1:18:f9:e5:c0:9e:bf:73:a1:eb:0c:f9:a1:b4:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 17 15:00:26 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:37:33:3a:4e:e5:df:9e:72:58:95:42:41:
b9:7d:36:f5:95:e0:01:50:07:6e:fd:01:60:33:aa:
5d:a4:e2:ca:b0:63:d4:0a:4d:ab:ef:3e:b9:f8:d7:
c1:84:89:45:0a:7d:f2:a0:6b:27:3e:d8:ec:74:f6:
ed:0e:4b:7f:cc:61:1c:00:8a:69:55:dc:fa:95:80:
90:25:e5:6c:4e:31:12:e4:c6:28:a3:26:91:47:b7:
cb:e0:aa:a0:dc:c9:85:55:db:47:24:64:a3:be:f7:
f4:4c:23:92:af:93:60:49:22:aa:dc:86:74:af:eb:
b4:32:55:d9:4c:d5:c0:5c:44:69:4f:95:5e:79:ea:
90:6d:13:db:5f:59:cb:d8:45:9a:ad:c2:f8:b9:9c:
1e:ee:4a:22:f2:0c:61:4c:0b:1b:0e:17:a1:a4:91:
00:00:36:7f:b6:56:d0:ad:33:79:89:64:38:2a:2f:
0d:3d:22:d8:b6:98:4f:c6:d2:0c:4c:20:91:24:4d:
96:54:47:28:28:19:a9:ac:95:a6:0c:cf:3d:19:97:
c7:69:b3:f1:8d:b0:ea:75:57:f4:80:4e:4a:0c:34:
e1:3f:1f:b1:40:b5:77:cc:1d:a1:91:c6:9d:64:4c:
f0:2c:f2:a3:e6:5f:2e:76:c5:31:c8:b1:71:48:cd:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:48:71:34:F6:E0:E0:45:B6:AA:F6:18:B7:91:89:77:33:57:CD
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a7:64:28:05:33:c5:cf:e3:0f:30:c6:36:f6:0e:9c:71:e2:
97:b2:0b:ae:e7:5e:f6:d0:e8:b4:ce:0b:64:d3:bc:6a:1e:47:
82:7a:0a:58:89:f8:58:9c:1d:31:21:28:13:85:05:e3:f0:88:
e5:f3:8a:5e:64:67:54:41:13:bb:fd:20:1f:3a:53:1d:ab:4b:
6d:bc:b7:8a:7a:c9:04:b1:17:95:87:68:c5:e6:e3:9d:0d:81:
f1:7c:96:13:6b:a3:18:fc:f4:0e:92:c8:50:1d:3d:8c:bb:4e:
28:ca:0a:2e:3a:8b:c9:22:db:05:0f:c6:c4:f9:7f:1d:a2:82:
f1:f7:41:2e:ed:a4:c7:8b:f5:44:34:b4:eb:89:50:46:ba:af:
9c:e0:27:f8:97:fc:22:cc:3f:c1:2e:05:39:2a:2e:c5:29:4f:
e7:6a:43:06:d3:51:3d:1a:d2:fe:17:50:fa:6c:d8:f2:69:54:
ae:99:f9:7b:01:13:77:97:76:23:03:e5:03:91:41:05:e8:60:
ac:c0:da:20:59:73:21:81:dd:8c:62:c7:83:85:ae:25:41:15:
cd:99:b4:7f:e6:aa:aa:49:a6:b6:98:89:4b:47:c4:23:78:51:
7a:80:7b:18:fc:2d:67:d5:fa:28:a4:cd:31:c7:37:39:21:ef:
b5:64:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:20 2025 by rpki-client