Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26f00df4-034c-4b0d-b280-697262a87247.roa
File: 26f00df4-034c-4b0d-b280-697262a87247.roa (raw, json)
Hash identifier: 9nVolcBiKSkUN1LzGIgNo3+UgCgomKacmxl/2YDUaLk=
Subject key identifier: 62:AD:E3:47:6E:E6:57:6B:24:AA:B0:9E:13:9F:5E:E8:FE:B1:5C:F3
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 640C06233B706A96F0D4ADA06D6E898498471F45
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26f00df4-034c-4b0d-b280-697262a87247.roa
Signing time: Wed 04 Dec 2024 00:00:00 +0000
ROA not before: Wed 04 Dec 2024 00:00:00 +0000
ROA not after: Wed 08 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0c:06:23:3b:70:6a:96:f0:d4:ad:a0:6d:6e:89:84:98:47:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 4 00:00:00 2024 GMT
Not After : Jan 8 23:59:59 2025 GMT
Subject: serialNumber=0baa07c81f257998a6007b1b04c3f4b133f03bff0ced71a35d267007f9a1a2fa, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:69:94:97:1e:15:44:f1:59:86:05:81:7f:
97:43:bd:60:90:b2:15:17:c0:b7:fd:ff:8f:55:56:
25:04:98:f5:7a:2e:d0:67:1c:3a:01:f6:88:30:ce:
9f:e9:56:02:cf:c5:31:4f:5d:6b:10:ac:cf:fb:60:
78:7f:d7:aa:05:fe:be:e8:49:97:8c:53:fb:47:4c:
7e:1e:fe:7a:bd:01:a4:78:e5:c8:55:24:22:8b:79:
4a:bd:93:ef:f8:d9:88:fb:12:04:41:e6:45:4a:a1:
fb:5c:2f:1e:2a:76:bb:68:d0:ec:91:ca:82:01:5c:
aa:b1:36:30:28:d4:0a:ea:2d:04:c9:b2:a2:3f:f6:
51:1a:23:e1:fd:ec:e7:0c:24:0c:35:23:cf:22:b5:
9e:e5:b6:dd:36:9e:bc:d7:22:c5:99:3d:8f:49:9f:
d2:f0:f8:07:8c:9c:88:75:55:aa:55:1d:9b:ae:79:
82:3f:2a:cc:4e:25:7c:57:a1:f2:2c:2d:6d:bc:d3:
e6:c8:88:49:d3:63:a8:da:a8:4f:74:a5:bf:e2:59:
04:d8:5c:7d:a7:20:4f:c8:d1:a1:b0:02:21:cf:62:
a0:ac:af:90:93:66:c9:2d:03:30:76:87:77:3b:af:
29:bc:46:1d:f6:dc:cf:38:f4:ae:2e:ec:ff:bd:fd:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AD:E3:47:6E:E6:57:6B:24:AA:B0:9E:13:9F:5E:E8:FE:B1:5C:F3
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26f00df4-034c-4b0d-b280-697262a87247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.132.0/24
Signature Algorithm: sha256WithRSAEncryption
88:91:ac:e4:68:fc:92:8e:b1:5f:f9:a4:62:92:2d:22:9d:51:
17:af:f7:3e:04:6e:b4:cb:01:9f:c7:2f:07:00:8c:38:4d:98:
72:d9:94:6d:d9:4c:f2:12:21:a6:f6:11:ad:65:06:ca:e1:42:
ec:a2:7b:5b:8b:ba:84:b9:a8:75:4d:cc:a1:c2:a2:40:c0:f6:
ad:70:6b:06:3e:03:8f:c0:bf:06:fd:05:35:b7:6c:dd:cc:2c:
bf:e0:36:c1:f3:78:db:07:2e:0d:60:93:6b:d8:f1:db:f8:59:
f6:67:b2:cf:30:48:4a:26:77:43:ca:78:25:21:58:a6:5e:26:
59:94:fd:ba:fe:0c:06:c8:07:7a:c5:47:b3:82:f5:e8:79:53:
0a:68:b6:39:66:48:69:74:34:f9:3e:b3:1d:87:7a:71:ae:cb:
4f:59:1f:13:1b:a4:84:6a:87:42:cb:61:7b:c8:31:66:41:e7:
ea:13:2d:19:cb:2e:ed:cc:a3:e4:d8:37:a2:3c:6c:79:a2:54:
dc:b9:df:ad:07:cb:15:fd:33:32:e8:86:9e:00:e8:21:f0:55:
a8:06:19:6c:a0:52:89:e7:c8:ba:fa:45:c4:1a:0a:82:4b:a3:
5e:d5:64:b8:fc:fc:f1:c3:82:7d:2d:c9:b9:95:12:32:b7:a2:
ef:6f:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net