Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
File: 8f549665-8398-44a1-8d57-5658d76e1c61.roa (raw, json)
Hash identifier: 5P0gD56YhFOMTbeC/nM1HIiszBT4hPtEP8TkFMyudlE=
Subject key identifier: CD:DA:F7:F5:96:14:43:2C:AE:9C:01:5C:D0:53:08:45:EC:7F:54:B6
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 6C716EC2B80845D63950FAB37217AA9DC881BA14
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
Signing time: Sat 29 Mar 2025 00:10:24 +0000
ROA not before: Sat 29 Mar 2025 00:10:24 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:71:6e:c2:b8:08:45:d6:39:50:fa:b3:72:17:aa:9d:c8:81:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 29 00:10:24 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:1a:a3:d6:61:63:78:db:01:0b:b7:d7:69:
99:6d:68:4a:ab:4d:ba:8e:3f:fb:48:db:d5:a0:a9:
4a:1b:09:ea:15:2e:67:13:02:cd:3e:45:d2:e7:a1:
56:c1:c2:d7:3d:58:7c:6f:b9:fa:d3:a3:ee:b3:9e:
e4:68:5e:ee:99:d6:6a:43:49:d9:0f:6b:93:e3:59:
97:78:46:d7:0e:14:9b:e8:d9:dc:af:01:d4:20:f1:
47:09:8e:cc:95:b5:ed:8f:56:92:04:5c:86:71:f4:
7e:3f:67:a4:36:7d:3e:47:9f:c9:9f:a6:28:58:fe:
cb:da:cb:7d:f4:c9:b8:54:fa:17:ea:31:be:e4:7c:
de:e3:53:05:48:80:e9:c5:9a:2b:e7:51:3f:00:bf:
22:f8:a0:7c:da:f8:fa:c7:bc:9b:4b:28:9d:ff:21:
8c:6f:79:54:6c:1e:35:ac:18:f0:56:44:70:e0:42:
ff:70:71:1c:af:12:0a:c2:43:6e:08:a7:c6:9e:b9:
60:38:24:de:85:ed:6d:10:ba:5b:fe:f1:af:15:cd:
67:57:46:07:c2:6e:37:25:f7:41:3c:15:dc:8d:5c:
99:8b:96:b8:33:46:cb:3f:69:ff:01:97:75:11:77:
80:6f:87:3a:56:8e:62:37:72:6f:74:23:59:19:56:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:F7:F5:96:14:43:2C:AE:9C:01:5C:D0:53:08:45:EC:7F:54:B6
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.234.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bf:3d:e6:92:26:7a:93:51:e2:6b:c3:00:d0:18:46:12:45:
aa:10:09:80:62:70:06:34:31:76:f2:cb:dc:2c:8b:ee:f9:78:
47:b7:47:86:d9:57:f9:20:88:82:aa:74:7f:59:9d:1b:6f:5a:
25:29:98:c1:cf:85:81:33:fc:32:73:cf:2e:ad:e5:b5:1e:c6:
4f:40:6a:47:c3:1d:5e:a1:f0:79:58:49:f5:81:64:13:55:b2:
87:0b:4e:be:5f:fe:59:02:18:bd:e2:21:1f:f7:51:f6:7a:83:
1f:fa:24:cf:b6:8d:23:6f:8f:fe:7d:63:51:46:b4:1a:5e:71:
27:5a:32:29:11:f5:60:f9:67:39:de:9d:62:62:b0:33:31:33:
cc:02:e0:f6:08:bf:27:e9:bf:0a:2f:70:56:08:e2:62:5b:8e:
6e:96:f4:fa:85:05:8d:a4:df:98:3a:b2:76:24:fa:cb:00:c9:
9a:3f:2e:56:d3:e8:4d:44:88:03:84:9d:4a:95:94:ef:72:e2:
de:b4:90:ff:3b:f8:4f:26:11:e1:dc:34:bd:18:e3:63:09:fe:
19:30:7e:fc:6d:e8:d9:27:a9:af:a2:b0:bf:35:2f:e1:ff:35:
dc:89:f9:8e:33:bd:d6:22:55:3c:9b:58:b5:8c:92:12:42:18:
f4:07:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:01 2025 by rpki-client