Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/23a6493c-7da2-4642-acd3-a90a8b54788b.roa
File: 23a6493c-7da2-4642-acd3-a90a8b54788b.roa (raw, json)
Hash identifier: Xh53/fq4kUYa20RbDa3GWVE4TFMDUzktwSRohkx6bks=
Subject key identifier: BD:A2:04:2D:D6:10:19:BE:EA:D2:E5:70:B6:5A:EA:A8:3A:3B:2F:EC
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 10C3C9DF30C3A8A6B8D80949BC543DA07C69AC2E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/23a6493c-7da2-4642-acd3-a90a8b54788b.roa
Signing time: Wed 30 Oct 2024 00:00:00 +0000
ROA not before: Wed 30 Oct 2024 00:00:00 +0000
ROA not after: Wed 04 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 23.251.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c3:c9:df:30:c3:a8:a6:b8:d8:09:49:bc:54:3d:a0:7c:69:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 30 00:00:00 2024 GMT
Not After : Dec 4 23:59:59 2024 GMT
Subject: serialNumber=6a154ab29d807b90cd61ddf0a534712f50d969f7cdf17d3dfc4b9e7488ce1ff6, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:6b:8b:5b:ff:d9:0c:5d:28:59:a2:9c:a0:
99:d0:ad:8b:f8:e5:a8:aa:46:28:df:a9:11:82:1a:
3c:24:0a:aa:d9:37:c8:d9:d3:c0:c9:2e:82:0c:33:
d2:75:e3:56:9e:96:07:9a:fe:e8:c7:b1:48:ce:37:
8b:cb:e1:c1:be:bc:11:9c:a2:a7:6b:11:10:40:24:
77:70:dc:a3:d2:59:ff:ec:6e:fc:39:a6:67:e9:fd:
24:6b:ce:10:44:85:a2:86:a0:9a:c6:94:26:0e:cd:
8b:2b:58:04:8e:88:d5:32:89:fa:68:9f:b5:60:31:
62:2a:02:76:cd:93:42:39:e5:02:43:6e:d1:b1:27:
4d:54:ee:ff:f6:17:6b:bd:d6:b7:0b:20:e3:cf:7d:
9e:d5:75:c5:41:0b:eb:53:af:c6:c4:ef:5e:cd:01:
55:f4:ea:bd:4a:f4:95:26:e0:05:9c:ad:be:0c:d5:
c7:ac:be:8d:39:e7:33:50:91:cb:12:a6:49:47:50:
ef:2e:89:39:8a:c9:9f:32:9f:d4:07:ac:c0:7a:b0:
5d:fc:56:f3:81:58:9a:06:22:33:15:b6:5f:8e:15:
3f:b9:ad:f6:e3:a8:33:4f:a8:cc:17:37:87:5e:c4:
6b:4a:aa:5f:b4:7a:13:c9:d6:1a:87:aa:1a:db:0e:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:04:2D:D6:10:19:BE:EA:D2:E5:70:B6:5A:EA:A8:3A:3B:2F:EC
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/23a6493c-7da2-4642-acd3-a90a8b54788b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:ad:d5:dd:6e:e3:b9:b1:82:e9:60:3c:e3:0b:3b:04:bc:17:
63:a8:dd:7f:19:93:4d:c8:30:b6:ef:50:8e:e6:2f:f3:9d:57:
97:47:25:0a:6e:72:6f:2d:c3:a2:61:cd:85:e6:89:74:fe:47:
d6:2f:d4:e2:7a:bb:87:7d:ac:4d:1b:e1:21:0a:db:9d:1b:de:
e1:3d:12:2a:1e:ac:8f:0a:68:14:1e:ce:52:63:b8:bb:68:9b:
6d:8c:52:21:59:fa:4b:fd:0d:c5:84:65:b0:8e:bc:6a:dc:68:
62:43:3e:12:22:48:bd:4d:e8:4f:43:1f:29:38:df:f1:ae:72:
d6:2a:c4:8e:a8:b3:23:18:26:7a:60:8a:be:d1:2e:ce:36:e1:
02:67:05:d6:49:56:ab:b4:fc:70:85:cd:a2:7a:ca:a5:3f:3f:
9f:76:23:1a:e8:b9:93:dd:01:7a:b7:74:44:08:1b:f1:25:a6:
b1:5c:27:34:0b:4f:51:bb:00:fe:90:6e:7d:d4:ef:48:7e:fa:
9c:4d:39:32:34:aa:ff:70:e2:37:57:41:68:8b:55:26:ca:40:
36:23:e9:19:78:e1:53:e3:58:02:c4:28:d4:59:d1:97:39:bc:
ad:95:82:29:c7:ee:05:f7:a7:69:51:40:0e:9e:71:0a:80:7c:
df:5b:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net