Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
File: ebd968d3-ce48-4118-aed7-b938cd13153f.roa (raw, json)
Hash identifier: NTg6XoaIgyRwkJ3EPHM+DQ355E6y6XgA13Pf61kLw6Y=
Subject key identifier: 61:75:3C:52:10:32:16:CD:AB:92:E8:B8:CC:81:89:48:C9:C8:36:D6
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 276C152CE3AB0CDD11CBF9EB6012BCE083DFD28B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
Signing time: Mon 17 Mar 2025 15:01:13 +0000
ROA not before: Mon 17 Mar 2025 15:01:13 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6c:15:2c:e3:ab:0c:dd:11:cb:f9:eb:60:12:bc:e0:83:df:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 17 15:01:13 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:b6:ea:f3:dd:ba:9f:bf:d6:82:d1:52:85:
27:0f:cd:87:64:03:27:e9:17:5e:bb:46:32:13:59:
29:18:34:dd:d4:7d:af:fe:56:dd:d6:69:61:d2:58:
f7:e1:3a:1a:54:0d:1b:ea:1f:ff:b2:03:7b:c7:72:
2a:ee:08:8c:83:31:39:2f:1e:3d:a2:7a:bd:f9:01:
b4:71:1f:ee:05:51:49:70:91:23:a9:90:9f:3b:89:
ac:4d:ab:63:d5:12:48:0e:fe:3d:19:2c:93:43:0c:
85:f9:db:cf:b3:7c:77:f0:4b:56:5d:7c:d3:fc:f3:
90:e6:e2:a0:62:bd:31:b0:45:32:7e:97:de:e3:20:
44:79:45:81:5a:63:f7:4b:dc:84:0d:f1:01:ab:cf:
d5:42:2e:57:7c:e3:87:a1:61:b3:df:a4:58:9e:02:
cb:20:8e:1b:fb:0b:a5:38:bc:c6:a0:5b:a2:d9:e1:
aa:7c:20:89:62:29:b1:d1:e0:02:30:83:21:87:a4:
ca:05:fa:7a:8f:a3:6d:de:ec:e7:8c:f2:13:82:8b:
43:46:af:52:81:cc:fd:e2:8d:35:3d:4e:d4:8e:7b:
e9:a4:61:d5:24:30:d6:d9:1a:4f:ea:e5:7d:ce:97:
5f:60:5a:d8:0b:be:cf:3e:99:64:74:1e:e4:a5:5d:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:3C:52:10:32:16:CD:AB:92:E8:B8:CC:81:89:48:C9:C8:36:D6
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.228.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5b:8d:23:14:ab:0c:34:b2:84:83:d4:99:c8:c7:32:00:ec:
6b:b7:a6:fa:45:ba:e9:8a:e6:b0:e7:7c:0b:fa:89:69:69:67:
14:05:dd:cd:bf:0a:67:65:24:d4:f2:16:58:00:d3:01:0f:a6:
0e:ba:21:c4:fd:14:e1:14:15:7b:47:c8:6f:9e:f0:5d:a8:67:
1a:85:e4:64:75:f8:0d:eb:44:60:89:95:ec:d4:14:86:46:e0:
eb:fe:12:f0:4e:96:5c:98:e0:0d:09:b9:f4:b2:f3:93:0d:da:
50:0c:40:7e:4d:e9:8e:e5:65:77:c0:5e:14:eb:b9:c1:ce:94:
4b:da:d4:a0:b6:34:6a:6f:16:ee:e2:d5:d4:bc:16:f0:5a:ec:
bb:04:56:91:50:18:35:8b:a4:0c:ea:d3:1e:6d:47:43:20:4d:
43:95:1e:5f:22:54:30:62:79:b7:6c:a1:2b:b9:d1:65:3d:db:
6b:d1:c3:21:9c:0b:3d:a5:e8:41:ab:ee:8a:05:06:83:03:f2:
2d:c9:ee:53:a1:ac:fe:1b:c7:1e:92:d6:af:87:1c:06:35:e4:
fd:7b:c2:4d:77:34:9b:69:e5:8d:30:60:f7:41:18:55:bc:54:
cc:de:42:76:af:9d:47:c9:cb:70:77:c9:23:69:79:f0:f7:dd:
ec:d4:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:46 2025 by rpki-client