Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/3ca45720-879f-43d6-b7f7-c3b911cffcfd.roa
File: 3ca45720-879f-43d6-b7f7-c3b911cffcfd.roa (raw, json)
Hash identifier: WUGLH006rIvaJ7NeK4zG/+fIA1RifmVOzHdvjaGoNiY=
Subject key identifier: 50:6C:39:E7:DB:02:80:B9:40:6B:03:DF:68:56:C9:08:A4:84:0A:99
Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial: 5CD754BF6484F02678E629B04AAAADFC1BB48651
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/3ca45720-879f-43d6-b7f7-c3b911cffcfd.roa
Signing time: Sat 19 Oct 2024 00:00:00 +0000
ROA not before: Sat 19 Oct 2024 00:00:00 +0000
ROA not after: Sat 23 Nov 2024 23:59:59 +0000
asID: 8987
IP address blocks: 184.169.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d7:54:bf:64:84:f0:26:78:e6:29:b0:4a:aa:ad:fc:1b:b4:86:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Validity
Not Before: Oct 19 00:00:00 2024 GMT
Not After : Nov 23 23:59:59 2024 GMT
Subject: serialNumber=8faebebd5b0c3a0493a6f12a84142bb09b2eec6631ae4f10fd48e7883e7223b4, CN=71c3876e-b944-4600-92c7-cec33d89523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:89:fa:66:1d:e9:0e:c7:6a:08:8f:2d:4b:
94:f3:f5:8c:d9:06:ce:24:75:aa:4f:c4:ea:53:d0:
a7:d1:ed:9e:dd:b9:d0:16:d5:d4:72:e8:c8:ce:b4:
6f:8c:87:15:c1:48:7a:77:98:e2:78:19:26:c8:15:
6a:6a:1f:ed:fc:55:cf:e8:ba:c7:dd:93:69:d5:b3:
2e:16:5b:17:6e:8d:06:44:6c:2f:31:68:95:6d:0a:
bf:fa:37:fa:6a:53:d1:10:10:62:db:56:86:0a:9c:
25:b0:d3:63:aa:80:f4:ee:ba:7b:72:e9:46:c6:c3:
40:1b:5d:00:a0:59:1c:85:1b:34:66:ca:53:3b:25:
49:c4:7f:21:34:34:9f:11:a8:8e:f4:d7:49:89:ec:
a2:52:c3:8e:9c:17:73:ad:60:dd:23:cf:3c:c0:ff:
2d:d1:25:33:70:ff:17:6a:ca:7e:73:a7:45:8b:0d:
dc:fc:0e:d0:5c:67:eb:fb:41:57:51:5a:55:2c:5f:
e1:9c:47:6b:39:7d:46:c2:c8:45:63:27:aa:0b:64:
4b:8b:a6:17:8b:70:0c:34:68:3a:22:d1:cd:b6:8a:
1b:7c:35:45:70:a8:42:d0:e8:6f:00:d0:67:53:f9:
ae:d6:33:42:3d:9c:dd:d7:4d:41:57:99:33:62:da:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6C:39:E7:DB:02:80:B9:40:6B:03:DF:68:56:C9:08:A4:84:0A:99
X509v3 Authority Key Identifier:
keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/3ca45720-879f-43d6-b7f7-c3b911cffcfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.169.128.0/17
Signature Algorithm: sha256WithRSAEncryption
34:09:dd:9a:4b:8d:77:27:e6:55:0d:68:1d:ad:e8:43:db:b2:
02:27:d5:5f:f8:0d:1e:fd:76:14:5c:44:8b:b5:d3:ad:f0:b1:
96:99:4a:a2:00:c9:92:db:9c:89:87:c0:8e:31:62:9b:b0:06:
44:bb:47:a3:b3:4b:d3:04:a2:4a:94:0c:a2:72:88:b7:44:33:
63:ae:48:db:8e:43:c6:4b:10:73:10:43:ee:f0:4f:1f:7d:e4:
48:23:3e:9d:df:bf:64:5d:44:64:f2:8c:bc:bc:67:0a:7a:31:
79:65:e1:f8:f3:49:73:7b:20:6a:cd:1f:5c:41:1a:48:df:31:
5d:04:7e:ab:1d:c3:94:a9:52:bf:c5:a6:5d:91:f3:c2:ba:8a:
87:72:5b:56:ce:25:c2:28:43:7f:66:7c:fa:fd:e1:b9:ff:23:
45:19:a5:2c:59:3d:68:92:85:62:5f:e0:27:0f:52:c1:a7:4b:
29:72:c0:1a:0c:a0:93:d7:f2:9d:d8:f4:e4:47:ea:3a:2f:ac:
6d:5a:1c:d1:f2:e6:80:91:89:56:1b:1f:a6:16:2e:98:73:c1:
c7:4e:ea:7c:e0:13:61:aa:74:3e:09:8a:e9:7d:df:f4:f2:82:
34:a0:5c:db:7d:54:85:ca:ab:8d:53:18:d0:93:78:74:4c:36:
b3:22:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net