Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa
File: df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa (raw, json)
Hash identifier: 0JX5Y0aSrdQt9bswDARmoGghUDmI4zER30UGLUwrDwY=
Subject key identifier: F1:BD:5F:BA:F6:0A:F2:AB:DA:C5:68:67:42:A0:0F:CE:86:BE:6D:99
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 75BB2B181FBF1E965CAEEEB7EB7749E02D62C33E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa
Signing time: Fri 11 Apr 2025 00:00:47 +0000
ROA not before: Fri 11 Apr 2025 00:00:47 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:bb:2b:18:1f:bf:1e:96:5c:ae:ee:b7:eb:77:49:e0:2d:62:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:00:47 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=872555b0e8c1b92da36b97a4feb8f4801734184fd6502fc4f3074565ed8a8504, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:c7:d0:52:99:97:e1:cd:d2:b1:3a:2b:d6:
b0:d5:22:7e:e5:ab:a5:1b:32:b7:4e:55:99:04:73:
08:59:98:e9:0b:66:e7:0a:b7:09:c8:7d:e3:d9:56:
6f:bd:ba:30:dc:cc:67:68:51:c7:74:9d:97:62:2e:
09:45:05:de:fd:9d:86:ca:6e:27:75:8f:b3:5f:61:
1e:d2:a2:25:58:28:89:f4:24:a7:14:9f:77:8e:51:
91:65:71:00:9e:7a:a9:28:00:0a:fd:2a:66:ac:6d:
f8:dd:d7:e9:75:c6:19:73:96:0e:77:f6:d7:cb:91:
21:6a:1c:6f:c4:12:0c:52:01:d4:d6:7c:8c:7f:d6:
f6:76:3b:80:53:06:f7:ed:06:fe:d8:ae:b3:e8:31:
6f:fc:7c:3b:d4:6b:32:82:11:9a:09:08:c5:39:f2:
2e:ff:f7:07:5c:cf:ca:af:7a:bb:4f:4a:e9:c9:4d:
5e:15:b2:f1:f8:c3:2f:44:51:c0:59:7c:a1:10:07:
9e:4b:00:6b:6e:36:43:49:a9:98:ed:f5:4f:ef:56:
e7:4e:7a:3f:29:7d:b7:d5:f1:75:f5:29:6d:82:cf:
ab:05:7b:31:6f:0d:5b:37:68:64:e5:e6:7c:01:73:
16:77:10:84:47:20:c8:c7:42:6e:6d:4e:ba:b7:a2:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BD:5F:BA:F6:0A:F2:AB:DA:C5:68:67:42:A0:0F:CE:86:BE:6D:99
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.232.0/24
Signature Algorithm: sha256WithRSAEncryption
44:72:64:4c:e1:ed:17:e8:5f:b1:31:38:0c:40:ab:b3:6f:32:
f1:17:48:f1:27:b6:f7:0a:29:93:3a:46:4f:8a:eb:d2:4f:25:
7f:94:81:8d:d7:ec:d6:1f:d3:01:1c:f5:fa:3c:a3:1e:00:fc:
ad:8d:6b:d5:40:9b:bd:c4:d9:1a:ce:50:c6:5f:1a:79:f4:24:
7d:12:55:c9:f5:ab:13:83:e4:2a:48:33:46:01:f4:0e:ef:8b:
c4:58:e5:d6:62:ee:a6:65:dc:a4:35:d3:0c:f1:2c:8c:7b:4a:
6c:34:95:99:13:5b:05:22:a2:82:b4:ba:05:22:31:c4:12:e3:
c0:b2:96:ef:2c:aa:9f:45:e9:51:fe:88:1f:5d:ac:2f:86:8d:
0e:ae:35:60:c7:b2:73:4e:b8:ad:64:28:ca:7a:40:1b:ad:11:
e9:8b:4a:26:d1:f0:06:29:d3:81:c5:a0:cf:30:33:f5:92:c8:
d2:3f:a6:60:b3:cd:b9:27:65:d6:ef:68:97:59:84:5c:bd:3b:
1d:b1:2c:38:fa:50:32:d1:e6:ed:0c:da:2c:4b:7f:ef:70:6c:
be:f4:cc:e4:00:a3:99:4d:26:ac:79:8f:19:03:63:51:61:c0:
90:8e:d5:0a:a1:2e:a2:bf:59:0d:f2:60:f0:4d:c7:eb:b0:39:
44:6c:7c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net