
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
File: dda383dc-2bda-4b83-8178-05fa6ae6d942.roa (raw, json)
Hash identifier: YM16+Lm+O/xrp7Lgbh8XVe/rHC/j+WECNsByLJ8Op6c=
Subject key identifier: 0A:15:3D:B5:1C:75:FE:50:21:90:80:B4:E5:49:A7:86:FD:D5:FE:EB
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 551BA12A9E7E6CAA8C1C4A88F7FE6B19FF81A20F
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 69.169.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1b:a1:2a:9e:7e:6c:aa:8c:1c:4a:88:f7:fe:6b:19:ff:81:a2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:fe:83:f5:d1:33:af:32:c8:bf:df:b5:10:
55:36:b7:ae:12:b2:60:44:c0:5e:f1:f2:94:c4:84:
99:62:d4:22:f5:2c:ff:d0:9b:61:ad:f9:fa:ed:80:
36:6f:73:60:a7:40:1e:1a:ae:c6:29:04:fa:91:bc:
11:b7:cf:6b:33:e7:1b:00:03:f8:7e:86:5d:19:60:
c5:5e:c1:82:b9:bc:97:64:2a:dd:39:e7:8a:b1:e0:
49:59:cd:49:44:61:37:5d:1f:9d:0a:fa:18:93:4a:
76:88:29:b5:e1:de:4b:50:75:2b:53:67:97:89:d1:
f5:7f:58:c8:a0:44:04:d8:2c:19:3f:63:96:bc:54:
81:4e:54:8c:91:2a:8e:79:77:71:ab:a3:a8:a0:d7:
a3:4a:da:72:0e:2e:c1:1e:59:24:e8:db:9d:78:9d:
ca:24:1a:2b:4e:35:a9:af:8b:25:dc:a5:9c:ec:64:
e0:fe:fc:0a:0e:50:6c:d5:20:0e:3c:1a:b8:cd:64:
28:ef:6c:20:9c:0f:75:13:64:b4:6f:2d:fd:7c:4b:
fd:db:18:e2:de:9a:c2:68:c4:91:41:e7:2d:3f:af:
39:bb:c6:4a:a4:09:84:bd:30:3b:79:29:2c:f0:06:
13:7d:6a:c8:17:c2:98:75:19:4f:91:57:2e:b7:14:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:3D:B5:1C:75:FE:50:21:90:80:B4:E5:49:A7:86:FD:D5:FE:EB
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.224.0/20
Signature Algorithm: sha256WithRSAEncryption
61:42:c7:66:4d:9a:90:04:22:ec:55:ad:50:1d:bb:6d:cd:e1:
2e:40:dc:0c:bf:7b:22:7e:1e:d0:39:54:9c:3e:c2:9a:0c:6e:
36:80:8b:ba:dd:46:9b:57:1e:33:5b:6f:d8:25:98:54:23:81:
3b:16:12:69:a6:66:7d:3c:20:68:ce:2c:3e:2e:37:7f:b1:e8:
ac:52:56:b8:86:79:f9:61:db:72:da:9f:c6:27:66:07:2b:94:
50:7f:58:4b:bf:b3:4d:34:8b:8e:ef:84:54:3b:89:75:8d:ca:
83:fe:64:64:2e:45:74:7e:4e:5d:34:81:97:45:b4:cf:19:66:
32:4c:43:ef:36:31:c7:71:03:12:b8:5b:95:ab:e0:fc:04:71:
8a:7d:87:ae:ee:71:c7:7e:26:ae:0a:45:66:67:eb:f5:7a:9f:
ba:53:08:ab:c6:14:c8:b5:07:bc:b5:85:7f:71:f7:c1:c3:f2:
4c:9e:2a:4d:19:d4:2d:8b:46:b8:0f:73:4e:5b:e8:c7:a3:02:
8b:e8:8c:98:fe:75:8b:65:e0:c6:7a:00:94:74:b1:40:e8:f7:
24:bb:5a:b3:79:c5:e1:86:1d:54:e5:82:83:e9:b7:6d:3d:bc:
bf:6f:da:e6:12:20:15:c1:11:21:6f:3e:ed:d8:a4:9d:9c:ef:
d8:e3:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:01:25 2025 by rpki-client