Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
File: c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa (raw, json)
Hash identifier: 1PG6TzdybIR8ZUOkNDya099HM1YM2/X4w/tlBjldcHY=
Subject key identifier: 63:6F:6A:98:AC:AE:C0:C3:F8:CD:27:04:56:B7:FA:DA:F9:3C:F6:65
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 11430DF92C1B5A917AE8BA5318D576C45C02368D
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
Signing time: Mon 17 Mar 2025 15:00:19 +0000
ROA not before: Mon 17 Mar 2025 15:00:19 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:43:0d:f9:2c:1b:5a:91:7a:e8:ba:53:18:d5:76:c4:5c:02:36:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 17 15:00:19 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:28:05:23:af:3d:7f:27:9f:95:87:86:e0:
14:ff:b3:55:02:e2:1e:ab:f0:68:f0:a0:5b:ac:91:
7e:de:a0:2e:e9:0f:56:93:e1:78:3f:0a:2a:39:a1:
1a:97:74:78:b3:c5:7d:f2:d4:ea:84:56:06:63:0b:
de:83:f2:1d:fe:f8:3f:90:29:79:47:82:b3:e8:ed:
0d:ab:36:8e:79:8c:fc:5a:ac:39:d9:06:ca:6e:2f:
50:6b:0a:d2:07:f3:56:8b:7c:84:0e:91:45:2b:c9:
97:6c:a4:b2:0e:47:58:0a:55:cb:89:8d:7f:c8:20:
37:3a:a9:cc:99:6e:86:d2:b0:ec:4a:c0:a1:e0:f1:
d9:6d:f9:e4:3d:cb:d2:f0:db:b1:33:a3:8b:ea:06:
c3:07:0d:3d:a7:94:8b:7d:f5:29:72:aa:49:b4:26:
13:08:46:10:54:4b:b3:6d:16:d6:e2:81:6a:45:b9:
35:fe:16:31:6e:ff:22:97:4f:17:12:8e:ea:c2:53:
5a:5c:38:7d:f1:3a:b3:3b:73:ca:e7:fc:ef:23:29:
f6:37:b6:f3:03:ea:aa:d3:d3:2b:e3:1e:5b:74:68:
a0:80:3b:b4:89:26:01:34:fa:b3:32:81:ea:6f:fa:
6c:55:b8:6a:95:37:f9:2b:1b:17:0b:af:7f:36:ff:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:6A:98:AC:AE:C0:C3:F8:CD:27:04:56:B7:FA:DA:F9:3C:F6:65
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:cd:46:20:00:9b:b0:3f:28:14:3c:c4:71:85:ec:45:71:2c:
9a:c5:49:1b:88:de:af:5d:40:64:92:e8:fd:c0:dd:c3:82:9c:
e6:05:e8:24:24:65:e4:79:32:1a:fc:40:21:5c:08:a2:2b:bf:
9b:37:db:63:4e:c5:04:e0:7e:8f:18:03:ad:98:8d:73:78:44:
da:fb:b9:41:ef:91:a5:b3:dc:fe:4b:a6:63:21:4d:57:85:10:
a1:55:00:7e:a8:ef:2c:c1:d0:a4:e6:ac:56:25:40:8c:25:c3:
8b:fe:c4:26:54:0f:1a:82:64:2c:c2:52:9c:1a:73:54:73:98:
a0:e5:77:05:a5:22:d7:3e:4f:6c:c7:3b:f4:dd:29:d5:57:02:
94:5d:21:53:bf:f9:9b:ca:bb:8a:e3:34:d5:a1:e8:bd:f9:cc:
9d:53:13:fc:cd:bf:77:2c:a7:80:be:3c:43:27:30:d5:0d:39:
22:28:a0:7c:be:02:b9:4d:b3:b8:0e:05:d8:88:9e:c7:48:8c:
4d:ac:44:e7:20:32:d1:76:f1:3f:ad:db:7f:58:e8:b9:1f:c4:
81:fe:61:8a:30:18:9f:8b:ef:86:44:18:db:8d:ef:9b:d0:63:
72:18:79:90:14:7a:bd:a7:6e:a8:c9:be:22:bc:df:d1:a2:98:
d3:53:c0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:53 2025 by rpki-client