Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
File: b59643bf-eb80-414a-aca0-653646d46e07.roa (raw, json)
Hash identifier: Avd5Yi/nyOD5yQoLsS/vftVwnNZeDwkT7Og3Wkhc4BQ=
Subject key identifier: 0C:35:9B:9A:FE:05:DD:49:B9:9D:AE:75:BE:23:89:AB:55:08:22:44
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1741F9F240F316AF29E02C6B58491B0879E857DD
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
Signing time: Wed 05 Mar 2025 00:20:02 +0000
ROA not before: Wed 05 Mar 2025 00:20:02 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 199.127.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:41:f9:f2:40:f3:16:af:29:e0:2c:6b:58:49:1b:08:79:e8:57:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 5 00:20:02 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:99:83:23:14:00:3b:67:36:62:a9:bc:6d:
9f:5c:c3:a5:4e:2b:3e:c7:07:93:c8:c8:7e:81:eb:
ba:b8:05:c2:bd:b2:11:59:34:f8:bc:ad:7c:15:e7:
84:d4:c3:79:5a:21:7e:a5:c5:76:9e:d3:b5:03:cb:
6d:cf:c2:28:5c:b3:cb:58:6f:50:4b:34:5f:ac:44:
51:a3:bc:40:bc:e8:8a:e9:04:5b:ab:e7:d0:d4:c2:
d3:67:68:5a:38:a8:6a:68:0e:a7:c6:dc:7a:d0:89:
9d:3c:63:f7:c4:2d:f4:d3:54:f5:37:0b:48:cb:fc:
2d:f4:6e:df:90:70:0e:bf:3c:19:f5:0c:ac:ee:09:
0d:2c:56:95:6d:dd:e3:8b:6f:2e:e5:80:61:7b:b5:
da:ae:7b:31:2e:49:13:68:0b:64:3d:08:a4:32:f4:
e2:76:78:25:12:c5:c3:b9:79:a5:07:30:61:8c:30:
c0:0b:13:c1:db:d1:46:69:5c:ad:c1:ff:1a:fa:dc:
ab:ee:bf:0c:9d:49:77:66:56:2b:8a:08:41:ca:cf:
b6:74:7f:bd:0a:7e:37:77:61:bc:c2:e8:29:4b:85:
23:25:13:9b:f6:23:b4:bd:46:5c:80:1e:33:bb:32:
6c:a3:fa:81:2f:cd:aa:5f:c6:14:cd:34:ce:c7:ec:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:9B:9A:FE:05:DD:49:B9:9D:AE:75:BE:23:89:AB:55:08:22:44
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.127.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:0c:9e:66:5e:3d:4b:4c:9d:66:02:ea:5b:97:76:d2:a6:a7:
8d:61:ce:35:74:b6:14:3f:e1:41:56:70:4e:44:8a:e9:81:60:
d8:37:f0:02:3e:a9:82:43:69:73:e3:c9:48:54:80:03:e3:6e:
d1:68:e6:b4:17:de:af:ea:bd:ee:7a:c3:19:df:4b:ea:87:bc:
53:ea:10:6a:7a:b2:ab:3d:b5:6a:18:e8:0b:5e:cc:6e:a6:cc:
93:d2:22:7c:27:30:3a:33:2f:15:e5:e1:32:e8:4c:c5:5b:76:
88:04:77:3c:4b:1c:98:12:89:02:9f:d4:8f:e2:ef:b9:c5:cb:
38:e2:87:1d:15:98:70:12:97:3a:80:f0:b7:b8:2a:33:42:0a:
33:cb:c5:a0:5f:f1:0c:2a:0b:63:6c:51:51:c4:da:d3:4c:bf:
e3:1d:aa:2d:ed:41:ca:2d:34:22:7d:05:e8:70:49:23:27:9c:
2f:64:99:a6:97:b8:f0:a6:26:08:8b:0b:f5:de:9b:60:04:6b:
04:e3:5a:5b:23:e2:49:62:78:ea:03:31:b3:cc:81:02:b2:d1:
13:08:27:53:4c:59:dd:4d:e1:f6:83:ae:ce:27:ce:07:e9:2a:
1d:3d:9c:b7:a3:27:06:e8:b0:0b:fd:03:84:c0:29:f9:15:63:
97:38:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:51:34 2025 by rpki-client