Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cac99dc1-c0fc-4f06-a349-1676349923b9.roa
File: cac99dc1-c0fc-4f06-a349-1676349923b9.roa (raw, json)
Hash identifier: ZaU6m+ORMEEpYshT77NmdauFkrUbXhGayiG365QiSMI=
Subject key identifier: 74:0C:1E:00:5A:2C:7C:BA:8D:DE:52:89:73:12:AB:A8:29:94:0A:EF
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3BA03BAB744985C65384CE368508FA4F6CA9D91D
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cac99dc1-c0fc-4f06-a349-1676349923b9.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 23.249.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a0:3b:ab:74:49:85:c6:53:84:ce:36:85:08:fa:4f:6c:a9:d9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:1f:0f:68:5a:80:d6:c1:10:74:8a:d0:b1:
49:1d:53:1a:94:a8:0e:62:58:6c:5f:81:f4:ff:ae:
e0:57:3e:6b:62:61:d1:43:f4:e7:d0:f8:6e:1a:8e:
ee:97:f9:19:28:13:08:3b:34:8a:f0:32:01:f1:4c:
fd:2a:24:00:e7:95:23:db:d3:8e:58:cd:d8:64:8d:
27:cb:ad:f2:a7:c6:e4:3c:77:e8:f7:58:9d:eb:f8:
01:4c:2e:ca:1d:80:33:9b:00:4f:58:9c:d4:68:5b:
aa:ca:98:a9:9c:73:03:d4:27:86:d0:3d:2d:24:c2:
e5:c9:ed:4a:e5:9d:6e:1b:51:c9:33:82:5f:bd:20:
66:18:6d:41:a9:b9:72:15:75:05:d8:0d:ab:19:8e:
46:6e:6a:ed:19:92:22:7a:db:a2:99:e3:55:64:ef:
7c:c8:02:63:f3:b6:08:32:66:b4:db:30:44:41:01:
d2:49:9d:90:78:96:d8:81:23:26:11:94:c8:b9:4c:
38:44:4f:4b:e1:36:ec:80:09:f3:97:2e:0a:f4:78:
23:b1:24:d1:be:54:5a:98:d6:a1:2b:cd:0b:f0:c6:
c6:64:30:77:2d:51:62:0b:ae:9d:3a:47:42:c3:ba:
a3:7e:60:66:5d:e6:7e:0e:ef:5b:e6:83:a6:ab:ae:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0C:1E:00:5A:2C:7C:BA:8D:DE:52:89:73:12:AB:A8:29:94:0A:EF
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cac99dc1-c0fc-4f06-a349-1676349923b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.208.0/20
Signature Algorithm: sha256WithRSAEncryption
12:e7:b7:9e:61:8b:02:13:f7:c5:e9:b1:88:ab:39:76:ae:52:
10:3d:11:61:c6:79:c8:9e:f2:bf:8b:f4:b4:e0:39:b6:a4:27:
1c:b8:5b:1a:91:b7:f8:33:a0:35:6d:3f:7a:6d:59:ff:81:8b:
61:89:94:2a:82:29:e6:3f:b7:72:1e:60:95:93:28:0e:93:de:
8d:cd:b6:24:c1:2b:61:08:91:3a:e7:55:9c:45:c6:5e:ba:03:
25:b6:d8:b5:de:3d:70:1f:12:23:22:a9:c8:a5:b3:3f:59:4e:
0d:88:92:e8:df:a7:74:62:3f:01:3e:2f:70:d1:a4:05:bf:05:
e3:64:f2:d4:cf:ed:3e:15:32:a7:a6:f3:91:9d:bc:54:da:94:
d8:b7:bf:93:87:c3:7c:1f:11:88:31:86:8c:b9:1f:5b:3a:da:
30:45:12:90:1c:d0:12:c2:e1:d5:f1:4b:10:b3:c6:18:9b:90:
ba:0c:55:eb:4a:38:db:69:0d:31:bf:b6:72:74:69:77:ba:99:
44:5c:91:35:fb:06:18:47:28:c6:b4:3d:9f:7c:ab:15:b8:f4:
d6:f3:e8:94:fd:bf:fe:fe:fd:7f:2c:5c:8a:38:5a:81:76:35:
41:01:e8:37:f0:32:fd:75:31:37:f7:60:a8:0f:6b:9e:2d:ff:
34:90:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:57:40 2025 by rpki-client