Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json)
Hash identifier: EyxwH+GQA+D2YF8ZrtNB46kaLln41fIETLY8KlGaRjY=
Subject key identifier: A0:B5:52:40:11:8A:10:A0:13:53:ED:14:DD:BB:69:4B:2E:CA:48:4C
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 354E5FD16FC6B84103B90063FED750B79CD5AFA5
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
Signing time: Mon 17 Mar 2025 15:10:11 +0000
ROA not before: Mon 17 Mar 2025 15:10:11 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4e:5f:d1:6f:c6:b8:41:03:b9:00:63:fe:d7:50:b7:9c:d5:af:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 17 15:10:11 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:ea:ad:12:c5:06:45:74:f2:d5:96:96:36:
40:68:5c:7f:bb:37:83:38:0a:f8:be:ed:5f:1d:7d:
cf:70:d4:82:61:ae:5f:57:26:9c:38:92:9d:13:a6:
e1:56:8b:75:2c:c6:cc:ba:8e:3a:38:e5:62:d0:d3:
e4:05:49:8a:0e:ea:9f:79:56:16:13:52:df:84:1b:
3c:b4:d1:9d:c0:44:b9:f4:fd:8d:d0:f0:73:c6:cd:
d1:91:b6:49:99:8f:6b:d4:9c:09:2c:0d:ef:2f:5e:
fe:e7:7c:14:96:7e:49:3b:98:ad:93:04:61:a7:ee:
df:d7:10:34:13:0e:c3:50:ea:99:48:36:73:4f:76:
89:2d:cf:98:fc:de:fb:2a:85:b6:2a:1d:06:f7:85:
d8:93:36:1a:2b:ed:f4:3d:55:4c:83:b1:d5:fd:15:
dd:56:3b:cf:72:82:8e:06:2a:98:ad:70:39:d7:5b:
cc:33:d9:dd:dc:14:98:f9:64:a8:bf:bf:97:27:e4:
19:22:8a:ee:95:8b:29:7c:be:ee:ca:56:f5:a8:9c:
75:55:f6:56:e1:ed:b7:73:b1:84:ab:5e:54:5e:56:
00:e7:66:25:41:5e:b3:b7:b7:ad:79:46:6d:65:31:
6a:cb:9e:4c:c1:2b:84:d5:df:15:74:c1:9a:b7:6b:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:52:40:11:8A:10:A0:13:53:ED:14:DD:BB:69:4B:2E:CA:48:4C
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.189.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7b:f9:96:7e:27:02:1f:33:c6:9c:c1:99:b3:af:0e:40:a7:
69:17:0c:25:71:a0:fe:21:4e:6b:e0:de:f6:f7:d8:2f:ce:2a:
a7:33:23:09:8f:30:46:cc:86:66:b2:1d:18:85:1b:0f:18:55:
0d:d2:b0:06:6b:88:c8:b1:b1:a0:40:a2:23:0c:f9:74:48:c0:
39:f7:4b:4f:01:f1:f8:1a:2b:05:29:6f:d7:11:9a:0b:33:ab:
f9:df:b3:2f:04:34:34:ab:28:15:c6:81:69:10:2f:33:d1:d7:
86:0d:42:0b:38:95:70:b9:eb:59:dc:18:47:48:7d:2d:cf:77:
b6:e4:c5:0b:e4:b6:af:1a:4a:e2:68:35:ee:aa:a4:50:b9:83:
9b:c2:01:c1:2b:62:0a:ad:f4:33:d1:d4:da:00:a9:01:86:9e:
84:e7:e3:a8:bd:67:3b:d6:b9:13:b7:fa:07:4a:58:1b:41:46:
88:53:03:1c:df:2c:5b:fe:38:cc:c9:ee:3c:91:c6:81:d3:72:
09:e0:8c:1f:9c:f6:68:83:d7:40:0c:e5:20:35:4e:54:87:38:
b4:2d:11:14:62:55:90:15:de:6d:5f:4c:d3:d7:2f:e5:c8:36:
6b:6d:85:f4:3d:65:25:b0:cf:24:e0:16:ff:9c:37:07:2f:22:
39:89:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:46 2025 by rpki-client