Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d299022b-5471-432f-9035-9fa98725bc90.roa
File: d299022b-5471-432f-9035-9fa98725bc90.roa (raw, json)
Hash identifier: Jt5nqeg6GTFsytEfXaPgxByIwD8rVKuCRHvFoOZLxI8=
Subject key identifier: EA:08:B9:5D:79:22:F9:73:DF:E8:A1:7C:F1:C6:CC:42:0C:E7:3B:68
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7862886D2A4D3E5C9FF7391FBC41F957806C0512
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d299022b-5471-432f-9035-9fa98725bc90.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 205.251.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:62:88:6d:2a:4d:3e:5c:9f:f7:39:1f:bc:41:f9:57:80:6c:05:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:fc:59:64:9a:96:fd:f8:b0:e4:22:d4:85:
e5:9d:5a:d0:62:aa:96:bd:2d:00:af:66:36:0f:0c:
e5:d1:73:1f:75:0e:ae:f9:44:c4:0b:56:cb:36:8b:
d7:79:f5:1e:e5:02:89:d6:3c:06:44:35:1b:4b:d3:
52:a0:ff:d4:1c:5f:ca:a9:72:3d:6b:98:b4:4e:11:
89:85:b8:87:15:43:24:8d:10:13:c1:41:fd:cd:8d:
dc:ca:cf:5b:17:5c:c6:25:22:25:65:fc:ea:94:ca:
55:9f:47:26:85:8e:9e:35:d0:f6:3a:6e:f0:a3:77:
53:ba:cf:d7:f3:2a:de:44:5e:2d:e5:2c:83:c4:86:
3e:0a:dd:e7:10:e2:56:29:e7:80:da:c0:b8:73:f2:
2f:45:94:14:0f:04:3d:d1:8b:da:42:27:af:83:01:
01:30:c3:9e:a3:22:62:18:0c:53:c0:ab:91:bb:ed:
f7:ca:ab:34:5c:ba:a0:69:0d:f0:97:1f:a7:8d:52:
c9:6d:83:ca:45:e5:01:4c:f3:ec:f5:a7:1c:c1:87:
26:a2:e3:e2:4e:56:77:45:58:9d:78:fa:c3:5a:67:
9d:03:f6:bd:c7:96:10:a6:7f:3d:f3:5b:d8:8b:a3:
ca:66:b1:73:39:1d:20:85:54:55:d5:f9:8d:19:2d:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:08:B9:5D:79:22:F9:73:DF:E8:A1:7C:F1:C6:CC:42:0C:E7:3B:68
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d299022b-5471-432f-9035-9fa98725bc90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:00:84:76:e5:6d:11:b8:f3:d2:fb:55:41:2f:bd:1e:f5:2c:
18:be:5c:f8:e8:00:b1:77:d7:a8:d7:81:06:3f:4a:77:94:89:
8f:93:1f:bc:1c:00:fa:94:ca:c6:15:1b:2e:33:a7:91:3c:cc:
82:4d:8d:f6:80:8a:25:a7:a9:6b:3a:de:cc:b9:e3:43:62:4a:
41:91:7e:a5:be:76:45:7d:2d:86:d6:05:e0:eb:3e:2c:7f:c7:
62:a3:42:68:07:ad:1c:92:7f:b5:46:f9:26:b7:40:c2:80:eb:
35:b6:1d:ef:cf:d5:bc:0c:1b:94:fb:d8:35:31:df:7b:82:e1:
b8:48:bc:40:58:5f:f7:be:86:60:54:af:d0:6d:19:01:3f:f3:
aa:b8:4a:7a:8f:83:c9:5d:97:f3:58:d3:7e:07:6f:5d:ab:b5:
6a:48:7b:34:48:2c:ac:c1:1c:fb:dc:b8:5d:76:d6:07:99:41:
6b:59:5e:68:b8:96:e4:b9:7c:9a:d6:78:8f:e0:07:12:c9:17:
60:05:a3:70:69:d3:38:0d:eb:e4:aa:92:45:85:e5:32:92:3c:
b7:75:3a:3c:42:f7:93:c2:fa:e1:78:9a:45:c1:3e:44:f1:41:
98:0c:bc:a9:df:03:d7:d8:d6:ef:0a:4a:69:6c:5c:78:69:0e:
e5:4f:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:27:17 2025 by rpki-client