Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa
File: 99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa (raw, json)
Hash identifier: Sc+sHCo+SBv7q2f8GaQU6vEpaA/D7L9HL0QVZXTq4vM=
Subject key identifier: CC:E1:ED:F7:B5:85:85:33:00:45:E0:37:A9:54:46:28:9B:59:61:5A
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5E21D948DC4801C15B91A9940FDBB7A99C266C7D
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa
Signing time: Mon 17 Mar 2025 15:10:16 +0000
ROA not before: Mon 17 Mar 2025 15:10:16 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:21:d9:48:dc:48:01:c1:5b:91:a9:94:0f:db:b7:a9:9c:26:6c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 17 15:10:16 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:3a:44:2e:83:a7:90:fe:7d:4a:54:fb:66:
f0:30:18:b1:54:e6:e8:e4:54:ca:5e:49:f9:60:31:
91:fa:1f:19:91:ef:bc:82:81:b4:5c:86:5b:50:2d:
01:25:49:72:c6:35:0a:41:de:25:88:1a:b1:82:2d:
7d:35:47:c3:e2:21:44:42:b5:28:19:8f:38:6c:fc:
1a:15:f4:b4:12:5f:16:ab:e2:7f:f8:ab:a7:07:8b:
1b:a0:99:63:d4:15:7f:01:b1:f8:53:4e:d1:31:68:
23:b4:6f:f1:26:9e:60:bd:80:b8:9f:dc:ee:82:21:
46:de:51:1c:58:af:31:50:e8:aa:aa:ab:9e:62:e1:
28:5f:e4:68:a0:c4:89:4f:78:d9:1b:c9:08:4f:61:
e1:c2:4d:a5:7d:fe:ac:11:78:99:5c:71:36:db:bf:
ce:5e:d8:d8:15:a4:51:8e:dc:95:d4:c8:d9:8a:42:
dd:f0:01:a7:bd:f2:c8:96:09:85:89:68:79:28:56:
c5:e2:32:b9:88:f1:ed:b6:00:20:73:e2:62:3a:96:
f1:d7:f6:73:bf:bf:41:78:ee:c7:0a:2c:b6:04:df:
18:8f:2b:df:eb:b8:74:12:93:74:4d:0d:14:34:4a:
2e:59:a8:9c:40:45:12:75:71:02:df:3b:99:37:d1:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:ED:F7:B5:85:85:33:00:45:E0:37:A9:54:46:28:9B:59:61:5A
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.184.0/24
Signature Algorithm: sha256WithRSAEncryption
15:71:e1:a6:d9:60:c4:02:cc:4d:c3:6d:14:86:ab:bb:49:f5:
4b:df:65:0a:e8:47:af:5c:0f:5d:58:d1:6b:cb:77:06:d7:53:
88:37:32:0d:88:1b:78:c7:0e:7b:8e:4f:9c:e3:e2:2d:d9:c1:
81:e8:40:ce:ac:f2:c6:b9:9e:d5:8f:a9:59:af:be:5a:8d:b2:
0f:d4:d4:c2:a7:c5:f1:45:d7:a2:84:24:4f:2b:ef:72:02:86:
8c:80:8d:ae:cc:ff:83:f9:95:73:58:e8:9d:43:1e:e1:a3:3e:
f2:c3:a2:f8:ea:3e:91:18:d1:3f:cc:1b:ed:d3:3a:ec:4b:de:
4c:cf:a4:01:5d:19:ed:94:2f:97:dd:bc:cd:5f:cc:8b:cd:01:
db:74:5a:75:36:3e:89:4f:81:30:59:79:09:ae:f5:d2:6c:3a:
35:05:f1:fa:36:c5:ee:9c:0e:f9:21:41:43:69:64:16:a9:a6:
cf:c8:34:fb:d9:8c:58:aa:9b:97:6f:83:79:ec:c4:1f:f6:fd:
47:46:ef:8f:87:06:73:36:5c:ff:16:41:7f:06:ce:3a:9d:0d:
3f:61:13:05:78:70:e4:e1:3a:a5:28:7a:11:5f:6f:ad:af:b1:
8c:e4:80:c4:e9:81:da:7d:09:af:44:63:d4:03:bb:00:3f:13:
8d:f6:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:36 2025 by rpki-client