Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
File: 639621c0-050e-4e66-b3a2-1dd129de2c24.roa (raw, json)
Hash identifier: OYS7XYJj3gaaul52aTw72m66kr0NGIbg0wSOKF8+yNk=
Subject key identifier: A6:9D:5C:FC:25:B9:3E:42:B2:4E:43:F5:6E:9A:50:EC:19:DB:B6:E7
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 0A2A7829DA34A7AD27F7A8415C6B685764945E39
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
Signing time: Fri 11 Apr 2025 00:10:17 +0000
ROA not before: Fri 11 Apr 2025 00:10:17 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2a:78:29:da:34:a7:ad:27:f7:a8:41:5c:6b:68:57:64:94:5e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:10:17 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=875af1bedfbde518688abaf39c37ff93452507d153b2e43444af8333016db23b, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:62:ea:c7:0a:cd:dc:64:43:c3:14:d8:e8:
e7:7d:93:1b:cf:63:8c:3d:f9:56:38:46:27:a3:7d:
88:20:2d:94:bc:97:67:ef:4f:f5:03:54:30:b7:b0:
12:02:68:d9:c1:de:83:c0:25:50:1b:d1:d9:b3:51:
ae:a3:10:ee:66:3a:f7:5a:3f:4a:d2:64:d7:42:47:
1f:30:fc:a0:ad:1a:e3:9f:5d:c4:93:76:94:02:8d:
6b:b3:82:d5:92:22:3c:24:88:9a:8a:9d:93:f3:2b:
bd:1f:2d:cc:d4:61:38:88:30:eb:53:c9:7a:97:bc:
84:73:d4:e4:1b:40:3c:b0:16:8b:3a:58:42:18:6b:
00:56:49:c6:1f:ce:42:19:4a:54:7c:60:62:6f:d8:
86:f7:26:b3:4d:81:e6:3b:27:3b:2b:87:91:26:62:
1d:fe:42:f2:02:e9:bf:73:94:d1:02:4d:60:67:7b:
67:73:8a:49:8c:f6:b3:dd:b2:17:9a:5f:f4:9c:52:
0b:82:d0:f1:e0:60:f3:76:a4:b6:f2:76:f8:32:70:
f3:20:4b:9a:8f:75:f9:4b:1e:f7:b6:60:be:c5:a4:
aa:34:5c:ad:05:cb:22:2d:ff:12:97:83:01:3b:c2:
d8:26:5c:65:9e:d0:19:42:3f:9e:04:b6:16:f2:2d:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9D:5C:FC:25:B9:3E:42:B2:4E:43:F5:6E:9A:50:EC:19:DB:B6:E7
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.182.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:27:e2:cd:d8:ef:ce:32:ec:27:2d:65:87:95:66:5e:9b:31:
48:da:26:f9:f2:35:ec:41:d1:6f:ec:7d:f9:32:4d:b9:fa:fe:
08:35:f7:e1:b7:38:b3:33:17:22:2b:df:50:81:87:d4:46:1e:
96:d5:f1:27:23:12:4d:25:24:57:ff:22:01:c4:b0:d8:42:bf:
72:2f:2e:02:0a:56:06:a5:99:98:26:6e:74:29:79:e0:a2:1e:
ef:54:28:d4:67:18:3f:6b:7f:fa:e9:e5:99:b5:86:af:d6:0b:
c1:18:82:17:45:81:3d:0b:da:18:74:49:4a:1b:d4:f6:29:0e:
97:13:be:c3:5b:af:19:8e:86:a6:db:d5:23:7a:a6:10:70:ff:
d8:99:86:c9:20:23:c3:52:17:9b:53:a5:71:a5:e3:2f:36:f9:
2d:16:62:3b:e9:43:bc:84:99:9e:b1:5c:44:ff:6e:e6:c6:0b:
4b:e9:73:d0:c2:f1:51:e0:34:e2:a1:37:e6:ce:8c:b8:8e:43:
4e:55:5c:92:53:f3:d7:f7:c5:d3:bf:50:5d:88:df:d9:18:d7:
aa:26:bb:6b:a2:f2:8f:6d:af:36:b0:e8:86:e9:94:ee:d1:cb:
74:17:a1:6a:83:15:e9:07:de:e3:f1:07:9a:91:34:dd:1e:e1:
ee:bd:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net