Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5d33bf20-969b-4181-8d34-e9ee53bf7394.roa
File: 5d33bf20-969b-4181-8d34-e9ee53bf7394.roa (raw, json)
Hash identifier: xNeCY0M8+lNcC3w3JgeegvD+B7waXw23ALPMqntd4hU=
Subject key identifier: 64:9D:94:D4:F9:A9:81:A6:27:9F:D1:84:99:C9:13:15:4C:CF:E6:1A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 68ECE2C8AB92B189F743089F4FF20AE5BD0916AA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5d33bf20-969b-4181-8d34-e9ee53bf7394.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.246.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ec:e2:c8:ab:92:b1:89:f7:43:08:9f:4f:f2:0a:e5:bd:09:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8c:bf:52:a1:88:cf:12:1e:01:4b:9a:2b:ad:
34:a6:19:a4:36:28:49:d4:47:8a:ee:06:9a:cd:4d:
bd:6d:1d:09:cf:29:24:1d:ec:76:41:4e:6d:9d:32:
63:97:a6:ff:f7:e2:4c:ba:ec:7b:8e:23:5a:b9:00:
b5:41:fe:33:39:03:8c:de:79:f8:69:d1:3a:fb:8f:
54:96:72:63:46:c2:d3:0c:83:2e:5a:87:1f:c7:d4:
1e:53:ca:d9:8a:79:3b:09:49:0a:33:f0:fb:11:f6:
1b:0d:b0:55:0b:a4:c6:f5:58:b1:38:1b:11:d9:9c:
d9:d4:cd:c2:64:ed:26:c5:e7:e4:7e:52:c7:b2:45:
23:00:cc:4a:18:e2:08:d3:af:8d:47:42:6a:d2:8d:
61:4e:c4:80:c9:31:85:f1:3d:b5:9f:13:2a:75:76:
56:c4:6c:2f:d1:05:80:93:71:fe:ba:12:f3:2d:be:
37:c2:23:6d:1d:b0:b3:53:dd:9f:7d:d8:a8:48:7b:
84:06:f1:c9:94:d1:a1:ae:13:94:d2:00:21:d0:ec:
14:94:07:e2:11:f5:ba:42:25:b8:2b:cb:29:c9:a5:
e2:9b:33:d8:d9:73:3b:6e:22:72:7d:44:7b:e9:a8:
31:b7:47:0e:60:aa:2d:95:75:03:7d:4a:56:dc:41:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:94:D4:F9:A9:81:A6:27:9F:D1:84:99:C9:13:15:4C:CF:E6:1A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5d33bf20-969b-4181-8d34-e9ee53bf7394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.246.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:58:04:30:fb:11:78:23:02:70:0a:89:85:b4:97:b6:6b:39:
bd:cd:04:f9:69:94:cc:a9:98:95:fc:05:1c:09:d8:27:d4:df:
d4:85:b4:d9:18:76:1f:82:58:dd:22:6b:62:50:cb:84:45:da:
11:be:57:66:dd:e5:88:f3:36:a5:73:45:ef:65:7f:f4:bf:2e:
72:f4:11:ff:3a:af:7e:46:65:82:31:f4:3a:6b:df:b3:7b:df:
3a:a0:1d:24:c2:71:77:07:eb:c5:08:45:fb:6e:39:43:44:9a:
dc:ff:8c:17:f7:8f:8c:d5:05:e4:53:c4:ed:71:f0:38:f7:39:
fa:d7:b6:58:6b:ea:3e:a8:2f:58:6a:04:01:26:52:76:8f:e8:
d0:ee:06:bf:58:77:c7:5e:1b:17:52:5f:8a:a8:91:e2:ae:05:
a3:48:11:bc:a2:e3:7b:a0:65:07:0e:9a:31:15:1f:8a:39:01:
aa:73:fe:0f:e2:5e:e7:05:18:53:55:23:31:ce:35:6c:12:e4:
1e:a4:0c:eb:e6:06:7c:af:24:67:28:0d:9d:41:8f:26:ad:0b:
c5:c2:cd:4a:0e:11:a2:60:91:54:40:10:3a:32:4a:c8:55:b9:
a1:fe:fd:7e:57:48:45:4b:a7:a2:b2:3d:19:de:66:53:9c:49:
2b:cd:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:33:04 2025 by rpki-client