Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa
File: c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa (raw, json)
Hash identifier: JUJq3/uLu06aUT3a0toubIjr5fkb6GJKjqGCsv0cjxQ=
Subject key identifier: 61:C2:D1:70:9E:BB:ED:09:1F:3A:C6:96:FE:67:1E:CC:B2:F0:22:C4
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 728092CB7E6280E2CABD7B36ED5543F46B46593E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa
Signing time: Mon 17 Mar 2025 15:00:16 +0000
ROA not before: Mon 17 Mar 2025 15:00:16 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:80:92:cb:7e:62:80:e2:ca:bd:7b:36:ed:55:43:f4:6b:46:59:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 17 15:00:16 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:16:8b:87:33:63:6f:99:4f:35:0c:3f:ab:
b4:c6:22:61:76:18:97:0f:a2:f6:ea:ce:f9:48:49:
0d:3c:ea:e8:c3:79:b8:e6:81:8e:a1:50:42:ae:95:
ff:0f:82:69:21:df:da:b0:bd:c0:d8:cb:ba:e9:e8:
92:8f:bf:56:ef:9b:82:a6:18:27:22:a7:0c:a5:08:
79:7e:1b:c5:2f:aa:a6:10:b4:1d:b7:25:c5:a4:ab:
b5:01:38:ec:81:5a:2b:74:c4:dd:70:fa:c2:af:7e:
e1:39:e7:8d:52:58:0a:49:7f:4b:ed:1d:2c:23:f3:
f6:29:ec:49:cf:38:f8:7b:e6:39:b5:9d:34:29:42:
c1:7f:62:7f:c3:b1:f3:fe:03:8a:49:a9:d4:93:2a:
76:4b:82:53:3a:57:9d:9b:3d:1e:58:4e:86:51:8e:
7e:f5:1a:51:82:54:96:46:3c:1a:0f:b7:44:56:47:
dc:0c:c4:ab:f3:cf:f3:7c:2e:ce:c3:c3:aa:34:17:
38:dd:7a:0d:a4:a9:0b:e7:ba:bd:a4:00:56:d5:4f:
0b:53:34:7f:76:61:5f:ce:7d:c7:ee:7b:b9:ee:ad:
2a:65:a8:91:6c:bb:4b:28:f8:f1:de:d4:48:66:c0:
dc:7d:70:fb:e2:d7:70:58:2c:7f:f6:44:47:14:5c:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C2:D1:70:9E:BB:ED:09:1F:3A:C6:96:FE:67:1E:CC:B2:F0:22:C4
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.216.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5d:27:b6:bf:56:cf:82:8a:18:76:6d:d7:58:72:01:85:70:
c6:33:3a:fa:a8:19:1f:59:ba:d2:9d:60:a7:33:ad:95:04:df:
6e:41:4b:02:ec:e4:d8:ed:da:26:45:55:73:cf:24:a8:14:80:
3c:9c:b7:0d:e3:78:32:2a:39:0f:4d:84:8d:5e:74:43:e2:0a:
38:3e:88:ed:5d:49:3a:42:fc:f9:64:20:35:6f:ba:69:aa:08:
3e:83:86:f8:2c:2b:e1:53:ba:cb:6e:d2:a5:0f:54:75:55:fa:
1d:d3:f5:14:9a:b0:f1:25:75:0d:21:29:3f:94:80:54:c4:00:
f2:b8:6e:3f:24:ef:f8:6a:ef:84:fb:39:2e:8f:96:66:3a:82:
60:f4:9a:42:ea:c0:61:8e:a2:87:e9:03:72:eb:32:d5:09:23:
8d:66:cc:d0:7e:4f:0d:46:a9:dd:fc:4e:18:75:81:f4:95:b1:
66:86:78:e4:bd:9a:3a:eb:9b:06:78:60:6b:7a:14:90:f6:5f:
84:51:58:dd:07:e1:b8:6f:b5:25:63:de:97:f9:fc:a4:ec:00:
c2:17:b9:32:56:a5:da:10:82:ce:ec:5d:de:8c:52:c8:20:17:
2f:01:c1:3b:98:6a:1f:2d:b2:f9:66:58:58:99:b7:00:b4:21:
c7:7a:b2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:17 2025 by rpki-client