Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bb743fb8-35af-4adc-a4f2-6d14f841f9f8.roa
File: bb743fb8-35af-4adc-a4f2-6d14f841f9f8.roa (raw, json)
Hash identifier: TH3Jri8WImx/ieRaFsb/SqG2ZT792j+Zu439ZNLniuc=
Subject key identifier: 08:A1:A5:74:76:55:9B:BF:05:8D:9D:0B:7C:40:57:DC:BA:C0:2C:4F
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4097B99BDFDE5B7EA283C155C9928C5130D40F06
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bb743fb8-35af-4adc-a4f2-6d14f841f9f8.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:97:b9:9b:df:de:5b:7e:a2:83:c1:55:c9:92:8c:51:30:d4:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c1:3b:f4:df:d5:56:4f:c1:d0:66:3f:39:1a:
e7:fc:ba:a8:04:bc:fd:92:74:3c:cd:4f:9b:69:12:
6b:92:9c:cc:37:eb:cf:66:fd:b9:64:c3:3b:18:c4:
e5:98:bc:a9:17:e1:b1:75:21:bd:c6:1e:ee:0a:e6:
7a:f8:9d:6e:bb:14:6d:2f:8d:98:be:9c:2d:55:38:
cd:31:b9:3b:07:0e:1a:93:88:e0:aa:85:a4:e6:1c:
ba:64:ba:b3:96:b7:2b:30:84:05:3e:fa:79:bf:13:
bd:43:b0:b3:cd:cd:96:93:27:05:74:70:8c:44:7b:
89:89:d7:c1:56:b7:ed:1e:64:46:e6:a7:ea:bd:b0:
40:0d:73:1e:d2:e2:2a:bb:c0:8f:7a:f0:af:8d:9a:
05:fa:0e:18:2d:19:95:2e:53:60:25:b2:43:b4:90:
2c:60:ab:f8:f6:6f:6f:04:e0:2d:f6:96:19:f2:f1:
e6:cb:13:dc:69:7f:50:d0:d9:de:65:de:a2:8c:f9:
9d:d0:b5:06:ce:cd:7b:12:cf:43:a1:9f:4e:ff:ae:
92:a6:82:68:ed:73:9c:3a:d1:63:b2:e7:28:d5:84:
32:26:6f:c0:68:70:24:64:81:65:9f:59:d8:87:8c:
ff:b2:91:4f:98:97:6e:e4:0a:4b:1b:e5:a9:0e:f2:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:A5:74:76:55:9B:BF:05:8D:9D:0B:7C:40:57:DC:BA:C0:2C:4F
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bb743fb8-35af-4adc-a4f2-6d14f841f9f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.140.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4c:7b:67:51:fb:1b:92:7f:11:52:b2:f5:48:d4:c5:7a:df:
e6:c4:4a:9b:87:6f:c0:27:62:a7:80:04:e2:a7:3a:4a:23:0e:
c2:d4:42:66:b6:72:23:ce:a1:f2:76:1a:3f:d8:e2:5a:b4:23:
af:fd:dc:09:77:4c:99:72:42:bd:c9:8d:5c:9e:a3:f3:18:b8:
8a:3e:10:dc:f8:92:8c:8e:bf:aa:51:96:72:65:17:03:20:f0:
9a:49:d9:cc:60:0d:7e:50:e2:d2:c7:a7:f0:21:19:f2:d4:60:
04:0f:ac:b2:cb:23:ef:61:bc:c8:5a:de:71:b8:79:d2:b8:90:
17:ca:9c:a0:3c:a3:0f:0d:88:0d:c9:3c:0b:b5:88:90:67:e5:
35:dc:31:96:ae:84:4e:18:34:2b:cd:a3:80:48:43:8c:c6:3b:
fd:48:5e:fc:99:a0:93:b8:56:89:7c:0f:27:ef:82:7d:ab:dc:
a2:9d:72:62:ad:c7:57:0a:f8:14:af:8e:3e:e1:e0:45:04:5b:
80:c9:d1:14:d0:cf:2b:e8:28:ad:8f:fa:36:a8:35:fc:84:2d:
a3:8c:1d:26:4a:ba:1e:c0:4a:3e:6e:26:3c:e5:28:f1:98:a2:
66:83:4d:2d:f6:28:13:2e:38:ef:f0:ce:51:fc:40:d5:93:6f:
18:17:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:05 2025 by rpki-client