Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa
File: 271f0380-5b52-472a-bc37-cdbbdcd650e9.roa (raw, json)
Hash identifier: V/DOx5VcOdZyEvWnNBI74kienj4vgIJu0AIOHvYntLw=
Subject key identifier: FF:4B:3C:65:1C:5C:CD:67:D3:31:A1:C8:14:E8:D9:17:59:61:24:08
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 27B245C879F473DF38BC88AE7BB474A301D4D61A
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa
Signing time: Fri 11 Apr 2025 00:00:17 +0000
ROA not before: Fri 11 Apr 2025 00:00:17 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b2:45:c8:79:f4:73:df:38:bc:88:ae:7b:b4:74:a3:01:d4:d6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:00:17 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=50f33270e5b57a72944449145c9c8a809bf1745554cb2616c56645340e24149a, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:01:08:88:90:6e:dc:99:70:96:c4:9a:b3:
a2:64:94:59:a4:9c:68:26:8f:6d:d4:58:7f:ad:54:
53:76:f9:c5:1b:17:13:7c:fd:90:89:48:87:50:2c:
1b:89:f2:d5:65:27:88:7f:3a:95:81:f3:fc:04:d8:
81:74:cc:c1:6e:15:bb:12:6b:ba:c9:6c:a9:81:c9:
15:74:ec:7e:d4:ae:3e:21:ee:d3:42:20:f3:75:89:
c1:9a:1d:af:57:91:c3:b1:67:5b:18:ca:af:74:68:
11:c5:19:d3:2a:a6:b3:57:a8:9e:04:fc:4f:80:06:
3c:8f:0a:c7:64:78:2b:2d:94:1c:d2:48:75:8b:e7:
5e:34:22:14:03:82:36:14:52:b3:b0:c2:38:3a:60:
17:66:09:e1:c8:22:44:08:c9:f2:57:5c:0b:d2:fc:
c8:68:37:66:03:31:5e:bc:0c:f3:87:cf:bc:57:52:
8a:83:0f:31:ec:77:1e:28:67:75:9f:9b:52:89:e8:
31:ff:f4:67:84:a7:ed:20:38:95:e2:e3:9a:06:93:
eb:e2:f0:2b:7d:d1:58:3e:3d:dc:1e:63:da:86:ca:
3c:1b:60:32:d6:05:84:47:38:29:d6:12:58:32:06:
0f:57:3f:72:78:64:dd:80:07:04:6f:a9:04:cc:90:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:3C:65:1C:5C:CD:67:D3:31:A1:C8:14:E8:D9:17:59:61:24:08
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.217.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c9:69:78:20:f6:28:4d:c1:b6:5b:cb:0e:0b:09:72:a5:21:
f9:15:ac:55:89:2f:76:ac:bc:03:83:39:e2:cb:7d:75:10:0e:
ce:0e:fa:12:46:5a:dd:90:8a:f9:3c:b2:c3:b2:24:e1:4f:53:
6f:00:93:39:76:5a:e9:0b:b5:af:d3:b7:a6:82:1e:40:c2:9a:
99:08:a4:b4:b2:66:fd:0f:a4:17:8e:21:6f:84:56:46:4f:a7:
48:aa:18:f5:16:53:77:33:32:90:33:f6:f3:68:56:78:01:fa:
7a:d4:46:0d:b0:1b:db:de:95:05:64:7e:ee:fc:d9:57:16:9a:
04:74:34:c6:57:91:fb:c0:f9:ed:20:ff:3a:dc:40:31:06:0f:
ca:38:a1:f8:51:f3:95:fb:f6:a6:e8:76:36:42:29:80:9f:cb:
f5:19:51:9c:70:2e:c5:dd:b0:5d:5e:5a:18:1a:22:34:12:9d:
dc:0f:0e:3d:bb:57:3a:27:0c:ab:fd:7c:6b:2c:37:fe:f2:8b:
80:25:89:60:7c:44:b1:ce:3c:ec:26:b4:75:80:27:ac:11:31:
2f:3e:8a:25:90:d4:93:4c:48:0d:cc:f4:30:cb:bc:50:da:e4:
11:ce:e2:11:e8:63:41:3e:67:1c:9a:bb:4d:3b:05:dc:16:9e:
f2:7e:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net