Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b1844f8-b1a0-4679-8a85-acb929775c4b.roa
File: 8b1844f8-b1a0-4679-8a85-acb929775c4b.roa (raw, json)
Hash identifier: IAkeFnaH0V9BsYhvqb51jC5SFyQ5zUDhE+CzZrd3QiU=
Subject key identifier: 87:4B:C2:EB:12:AA:1F:FE:A7:A4:59:BE:C2:86:4D:AC:C8:0D:4B:CE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 17B16819CA4EC071E1359E4FAFB07568ADD364
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b1844f8-b1a0-4679-8a85-acb929775c4b.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.246.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b1:68:19:ca:4e:c0:71:e1:35:9e:4f:af:b0:75:68:ad:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:96:ad:16:89:c4:e5:27:95:a2:2e:d8:48:
da:7a:3f:e5:70:47:b7:45:9a:96:79:80:6a:20:34:
34:9e:00:93:e0:9b:79:9d:fc:27:f9:f1:9c:4f:29:
ce:95:fa:5d:aa:7f:71:9e:2c:0b:e7:10:ca:e7:13:
6f:cb:75:4f:bf:77:28:0e:48:b8:36:d5:38:b6:2e:
4f:24:34:f0:be:55:aa:d5:87:02:a5:aa:6b:86:69:
ec:3c:a4:60:d1:8b:02:ac:86:c7:2b:a8:b5:27:84:
fc:b5:4a:b7:1f:7c:9f:18:81:a7:a6:6e:28:62:23:
99:d1:4f:6c:de:84:74:42:b4:cc:cf:d3:85:76:0c:
fa:97:8f:f9:1c:3d:1f:8d:8d:50:39:ed:3d:13:88:
57:78:fd:b1:80:38:57:44:c9:9b:e0:77:cc:98:df:
1f:57:fd:03:54:55:ac:95:05:39:8e:30:5c:07:af:
b6:33:69:0f:ba:43:c2:b4:93:c9:8e:9d:6d:e1:fc:
51:5c:64:de:12:11:ff:a9:6c:45:fa:1b:69:14:a3:
c0:27:1f:88:32:03:24:81:e2:d9:8b:7e:5c:d1:66:
22:cd:66:3a:02:41:73:80:f5:99:40:15:91:8c:d1:
33:d4:40:b4:c5:ab:4b:3e:a2:1d:1a:32:22:2c:ce:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:C2:EB:12:AA:1F:FE:A7:A4:59:BE:C2:86:4D:AC:C8:0D:4B:CE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b1844f8-b1a0-4679-8a85-acb929775c4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.246.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:d0:28:10:05:c1:7b:c2:7a:df:55:72:b3:97:14:6c:ea:19:
84:0d:57:bc:af:df:52:fc:62:09:dc:e4:c4:a6:bf:07:6f:87:
5f:49:bc:d7:a9:b7:0b:5c:f4:c5:11:cc:0b:32:67:4e:ea:6b:
1e:14:43:0f:ef:2c:a9:7d:99:7d:f5:d8:33:a7:2e:5b:77:93:
79:d5:79:1d:48:15:65:90:1d:0a:f1:6e:cc:e2:5c:d7:54:20:
cc:a1:83:f6:d2:55:06:e3:77:39:7c:db:fd:5c:13:cc:2c:d7:
0f:d7:f4:e1:7a:a2:94:eb:05:90:1f:c2:0c:6a:d1:6e:a5:0e:
ba:e3:16:9d:8a:00:82:72:87:45:d9:63:19:7a:61:74:48:d6:
af:86:4b:6b:53:22:77:6d:1b:56:56:1f:f3:cd:8e:55:0b:b5:
fb:32:43:88:bd:3a:c9:02:d4:68:d3:63:b3:f5:d8:be:01:2b:
cd:46:b9:5d:08:17:db:84:18:fc:3e:53:eb:25:57:cd:49:f2:
27:52:68:8e:8d:e6:0e:30:66:84:0c:94:bd:56:d6:e5:dd:ff:
4b:cf:5c:3a:87:53:1d:79:42:54:d9:4b:bd:48:81:e5:34:c5:
f1:f6:0a:a5:ab:5e:28:07:37:08:96:d2:35:1d:44:10:6c:f2:
c5:3e:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:30:40 2025 by rpki-client