Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f61cc07f-fd77-4bea-97da-7c9a16936618.roa
File: f61cc07f-fd77-4bea-97da-7c9a16936618.roa (raw, json)
Hash identifier: eHuywDAGRy15Yv4+E4s8NA+leJCIXZjn39bhFIrnjb0=
Subject key identifier: AA:A9:0A:25:EA:D0:81:69:CA:B5:A7:5B:22:99:6C:09:5B:A0:BD:A5
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: C16B5D4475D3A3BB952FB087EF2D37D82666AE
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f61cc07f-fd77-4bea-97da-7c9a16936618.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c1:6b:5d:44:75:d3:a3:bb:95:2f:b0:87:ef:2d:37:d8:26:66:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:c5:17:1d:1c:d2:03:6d:f2:3b:c0:87:e3:
fa:c1:d9:85:ca:c8:b9:e3:32:f3:b7:23:bc:90:98:
18:da:37:e5:27:54:1c:34:00:74:b2:c0:cb:30:9a:
81:76:ae:0b:ae:0e:65:8e:b1:0c:70:45:52:83:25:
b2:78:33:fd:8c:0b:d0:be:5d:43:60:5d:d2:4f:22:
50:a2:ea:63:42:81:d4:8d:2d:7e:23:c2:ce:aa:ce:
2f:d9:49:0e:f2:52:e2:af:59:fa:c1:d4:14:83:b3:
bb:43:c7:65:b7:17:ba:61:1d:0c:62:cc:6f:71:17:
77:44:28:f4:8d:dc:4d:77:15:54:48:73:5b:fa:8f:
6f:e1:eb:25:e7:96:ca:d3:d7:75:67:bb:23:ae:51:
15:dc:24:85:93:09:db:c3:da:e0:40:25:de:4d:c5:
5a:77:75:dc:d2:cc:f8:16:d4:6b:59:97:8d:3d:8c:
ea:3b:fe:04:bd:a5:a6:e5:11:6f:1c:a5:ea:cf:53:
4c:61:47:07:0c:43:90:07:78:83:b9:07:67:a7:bb:
f8:0b:37:7d:fd:01:5d:b5:d4:28:0f:d2:ba:1e:b4:
15:12:e0:3a:04:7a:14:35:e7:60:82:66:0a:60:65:
23:1d:95:3f:ca:7e:df:f7:db:f5:be:ec:92:25:17:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A9:0A:25:EA:D0:81:69:CA:B5:A7:5B:22:99:6C:09:5B:A0:BD:A5
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f61cc07f-fd77-4bea-97da-7c9a16936618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c4:a2:90:56:74:30:2f:38:43:47:e8:87:ec:0f:72:93:07:
ed:20:c3:eb:fe:1a:af:46:8c:45:c2:78:46:40:cf:24:50:5f:
eb:42:69:04:0a:45:0f:37:41:79:df:a4:0e:82:0b:a4:08:25:
3e:69:f3:93:9e:b8:e9:70:93:3c:e4:22:9d:45:fe:8a:2e:9b:
ba:ad:a1:ca:79:10:00:04:e2:3e:2e:50:1f:23:d0:e0:76:7b:
72:27:6d:6c:ed:c1:4c:5a:db:f6:11:b7:a7:d7:96:29:8d:b1:
63:3f:09:6d:1b:b5:7b:45:25:dd:3b:39:e4:f4:3a:be:4c:65:
10:4c:0a:5d:a2:15:93:bd:6c:c6:32:99:be:cb:fe:14:08:4a:
96:32:38:0c:cd:7c:1a:56:5f:02:aa:28:67:ff:7e:65:e0:33:
79:df:ba:6a:7a:7b:89:7c:cc:4d:03:4f:b5:28:7a:02:71:85:
a3:34:4a:4d:5d:09:57:5c:5f:49:07:ee:fa:c5:fb:01:b1:39:
9a:02:70:55:e5:e2:ad:6e:b3:25:57:f5:97:26:d0:ff:9d:0a:
5a:8b:d7:9a:ce:af:e9:55:ef:99:bb:70:49:10:c1:d3:a0:fa:
b4:ad:bf:21:23:47:14:3b:b0:60:e6:53:aa:65:a6:d7:d8:2b:
6c:18:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:57:20 2025 by rpki-client