Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa
File: e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa (raw, json)
Hash identifier: ++4LgApVWACfEHakx0JXE2/wcq2U2HaV7+fbtLzxu+A=
Subject key identifier: DE:69:61:7F:AB:51:F4:EA:13:D1:C0:16:D8:06:F2:E8:B2:21:7F:A8
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2155C1A732702DD37563AB38FCFEBC7FC9177ECC
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa
Signing time: Fri 11 Apr 2025 00:10:08 +0000
ROA not before: Fri 11 Apr 2025 00:10:08 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:55:c1:a7:32:70:2d:d3:75:63:ab:38:fc:fe:bc:7f:c9:17:7e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:10:08 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=876f62c6c20171f06b8150e91264930af6c5185b8c336ec4bac9906478713aff, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:8f:f1:6f:29:e5:8d:4e:d1:d7:41:fd:ab:
23:30:5d:1e:2c:17:b6:f4:77:b2:d9:84:86:8c:d6:
52:d8:09:cc:6c:b7:82:5d:2c:bb:c1:22:22:6f:ca:
ac:76:87:9f:ea:45:65:97:51:0c:a0:70:d1:aa:66:
21:a4:eb:67:05:76:6d:2d:f6:02:69:35:f3:e8:25:
f8:95:1e:3e:6f:21:33:7e:a8:83:39:5a:6d:ae:28:
cd:9c:1d:f9:dd:56:8d:dc:54:17:a0:73:f4:a9:67:
99:5a:fb:1f:4d:3e:d1:a9:c0:af:10:b8:f6:f6:22:
61:7a:30:1b:64:fc:34:0a:f5:75:db:02:1c:96:64:
65:a0:d6:62:a3:ad:a7:46:6b:fc:54:e1:0e:84:32:
02:79:7d:9c:ed:08:77:07:97:e2:16:11:b4:80:7c:
8a:b0:4f:ae:61:20:bf:ed:15:08:70:56:79:21:6a:
76:db:e3:30:bc:2e:a4:e0:07:33:6e:a1:9c:ea:7a:
0d:a5:34:15:e9:7d:7a:0d:36:62:99:79:78:8b:7d:
b1:c4:c0:be:9a:ea:fb:0c:b2:ee:35:a4:32:eb:2f:
d0:df:92:cb:81:a6:40:99:2d:95:05:76:ed:88:3d:
73:a5:11:56:5c:69:32:b8:ea:27:ed:4e:87:82:2a:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:61:7F:AB:51:F4:EA:13:D1:C0:16:D8:06:F2:E8:B2:21:7F:A8
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a0:1a:6b:c5:9c:d2:5e:7e:eb:24:4f:2b:d3:53:cd:aa:61:
2e:f4:79:d1:4d:bc:32:04:2f:50:ce:21:8e:15:9d:2e:0d:e4:
f8:bd:c3:fb:ad:31:0f:f9:0e:15:b0:cc:75:48:4c:69:08:94:
ea:6d:67:82:1d:e6:0d:46:c8:2a:fb:c0:22:d7:a9:5e:ef:54:
a4:63:2f:f8:d3:76:bd:74:b2:09:97:dd:b9:96:ad:3d:34:8d:
4b:9e:66:7a:88:5d:43:5b:f6:97:8b:5b:5b:bf:30:1a:52:84:
bc:4d:34:00:da:60:c1:f8:bc:d3:a7:8b:7c:a2:76:68:79:db:
52:e6:f2:bc:ec:17:77:19:9b:90:92:2c:00:8d:5d:22:15:be:
36:4a:bf:20:f1:23:f5:1c:45:36:bb:d2:39:0b:a4:26:4c:2a:
d0:b1:e6:9d:b8:b1:c6:11:05:6e:20:0e:48:dd:ec:9e:3a:04:
9b:08:c4:b3:36:0b:63:aa:d5:81:4d:8a:00:83:76:2d:e6:55:
5e:32:92:ec:b7:19:3f:32:28:97:17:58:f0:d0:d3:ed:3a:80:
a7:d9:5f:86:02:79:f9:42:c1:25:a4:a8:64:61:24:7b:7f:66:
59:e5:fd:7a:eb:e1:a4:91:70:44:e0:88:14:39:5f:41:fb:47:
82:84:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net