Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
File: ebd968d3-ce48-4118-aed7-b938cd13153f.roa (raw, json)
Hash identifier: qeP/KNcUC3M4+bM4D003IoDvcaUkVR6H7dLo8NvJu1o=
Subject key identifier: 81:34:DB:4A:CA:D0:5F:D1:64:9A:A3:86:B4:12:B8:02:13:C2:D0:08
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 16F7DC4DA779BECB1542D36EC134A415ACEC51A2
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
Signing time: Fri 11 Apr 2025 00:01:05 +0000
ROA not before: Fri 11 Apr 2025 00:01:05 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f7:dc:4d:a7:79:be:cb:15:42:d3:6e:c1:34:a4:15:ac:ec:51:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:01:05 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=fba2bc77cdd64ab73e37cc747dbe5647ed71a2e21ab76d65c2ce58539100358f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:39:6b:ca:6f:8c:b8:9a:6a:77:5b:ed:cf:
2c:da:19:06:39:87:a2:e7:51:53:ed:7e:b1:40:5d:
04:c3:59:2e:2a:47:9a:b3:79:c1:85:c2:06:a4:08:
2d:9f:d0:40:a6:b8:a0:28:88:c8:2c:13:8c:d2:45:
b7:8b:31:cb:eb:20:8e:7a:7e:da:dd:85:c2:7b:e9:
1b:46:b9:e0:0f:f6:da:26:be:d9:b2:40:a5:6a:a7:
e3:a7:f6:7d:b7:c7:a1:c9:5e:10:aa:0b:b9:82:aa:
4a:49:c0:e8:08:63:f7:d4:5e:c2:e8:d3:10:ec:65:
05:f1:4f:f1:24:3e:5d:5c:96:92:29:99:84:8d:92:
bf:9c:b6:06:fc:8c:7b:9f:ba:12:28:03:0b:43:7c:
87:33:26:e3:a4:a9:d0:16:12:42:fb:e8:1a:35:b6:
22:69:f7:ae:7c:0c:0c:37:49:e8:d8:c7:fe:cd:c9:
b1:3b:a3:3a:b4:98:ec:c6:3b:77:9f:4e:44:05:24:
b1:be:c8:ce:fc:bf:d2:b1:70:81:a7:81:6c:30:94:
6b:80:86:c1:81:94:ba:34:36:b5:6a:0f:8d:69:67:
9d:2f:0c:79:f4:0a:08:58:e4:93:8c:dd:01:fd:12:
a4:87:a1:28:a0:e1:ce:09:74:c9:e5:4e:c5:de:8c:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:DB:4A:CA:D0:5F:D1:64:9A:A3:86:B4:12:B8:02:13:C2:D0:08
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.228.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7f:57:85:2d:fe:e8:ab:2e:36:4e:bb:eb:93:8e:ee:f4:d0:
03:7a:c1:ff:3c:9d:fa:9d:8d:b3:0f:c7:2c:ad:74:63:09:6c:
06:3c:f9:e6:a4:22:4a:18:0a:17:47:9b:98:23:f1:d5:07:3f:
76:84:4d:e6:b3:4c:17:d8:c4:b2:70:3a:50:4b:c0:d0:bf:a8:
05:12:95:76:17:e3:35:02:8a:53:35:4b:46:f5:57:1f:84:0b:
5c:99:61:cb:d9:05:66:b5:c6:7c:8a:64:5d:f7:f4:c0:7b:48:
af:81:4a:dd:ee:a7:58:79:91:a9:06:81:63:ce:98:a3:ed:28:
71:7d:18:5f:38:dc:df:a7:d3:4f:af:5f:a6:25:57:8a:cc:c1:
16:75:6a:82:5f:eb:bc:fa:46:d3:56:28:db:1d:ff:d9:80:9e:
da:02:5e:1d:ff:38:9e:df:97:0c:22:38:69:41:a2:b7:db:44:
56:73:a5:e6:a6:5c:a0:f3:6a:84:a8:7d:78:09:b2:a2:70:06:
87:2f:20:6b:b2:45:cf:a5:12:90:7e:59:1f:dc:46:74:68:31:
a5:f1:0b:ab:bd:7e:0c:a5:4c:88:49:16:c7:12:ee:3b:fb:32:
db:0d:d5:48:3e:a1:7a:6b:0f:07:0f:8e:9c:a9:4d:09:98:7f:
95:97:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net