Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2c0b17f7-5d4b-4019-bd91-7b902a370e2f.roa
File: 2c0b17f7-5d4b-4019-bd91-7b902a370e2f.roa (raw, json)
Hash identifier: K4qILQyxGzqusAsLy3GqLMc0aWk7e3BY7rfXXb2T4NM=
Subject key identifier: 1A:AE:95:5D:B1:91:31:AD:2B:1F:B7:EF:DF:3C:65:EF:B0:F1:E2:8D
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 26B74F3E3FE662A848960CCF97474A6463C7641C
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2c0b17f7-5d4b-4019-bd91-7b902a370e2f.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b7:4f:3e:3f:e6:62:a8:48:96:0c:cf:97:47:4a:64:63:c7:64:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=503ddd10ade5405a23b33175c202df6d8c3ba2cbd554e6b361ab08953ac80572, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:e1:4b:9d:ee:49:47:a0:24:0f:f4:cc:20:
5f:17:23:9c:b3:96:1c:91:ff:44:aa:18:82:2f:7a:
cf:a0:7b:5b:54:4d:59:01:9e:c3:a9:0d:bf:8f:71:
aa:41:33:03:18:17:9f:e0:68:13:8d:19:90:47:3c:
25:f2:82:07:3a:c3:5f:88:68:fb:b3:13:1e:93:7b:
fb:c1:14:f3:b3:35:8c:5a:5e:b0:03:73:84:55:e6:
3e:be:db:94:ae:dc:a5:5b:dc:c3:30:e7:3e:34:43:
00:bf:7d:be:ac:16:2a:a7:4f:e0:54:b3:22:b8:ba:
03:f3:5a:5a:51:5c:36:93:1e:c7:f1:e1:28:dd:1d:
d7:f0:c2:c5:c5:53:1a:9a:2c:22:dd:c0:1a:9c:7e:
20:30:8e:4a:4d:9c:a0:f4:e4:36:fc:65:ba:b8:09:
27:2f:dc:7d:0b:3c:d3:ba:e2:22:8e:1c:93:64:8f:
9e:25:c1:8a:21:c3:0c:bb:79:bf:c2:07:3f:80:82:
55:3b:08:0f:2f:19:51:24:c8:79:f0:b6:03:72:45:
31:af:27:1f:54:32:ab:eb:82:8d:68:e9:67:2a:82:
c5:60:9b:da:d9:d5:c6:b9:2e:42:58:3c:e8:e8:25:
66:89:17:0e:0d:9c:2f:69:35:2d:e5:e0:54:bd:e1:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:95:5D:B1:91:31:AD:2B:1F:B7:EF:DF:3C:65:EF:B0:F1:E2:8D
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2c0b17f7-5d4b-4019-bd91-7b902a370e2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.144.0/23
Signature Algorithm: sha256WithRSAEncryption
42:92:57:37:b3:9c:41:3b:e5:65:d2:aa:3c:d9:3c:2b:0a:95:
e1:b2:65:f6:f3:ae:eb:cd:79:7a:bc:3a:41:ea:e8:7f:27:c8:
13:60:d6:43:f7:7b:5a:14:01:9b:c9:4c:ba:ac:50:4a:43:ed:
6b:e9:1d:d6:e2:29:d6:51:6e:cc:4d:e6:c1:89:16:1e:2e:a5:
84:29:46:c5:c5:d8:0c:f9:e2:9f:09:8b:1a:2a:ee:81:84:00:
4c:df:95:2c:0c:47:9e:f8:7c:ef:c8:16:a1:39:13:2d:d2:6f:
a1:92:3e:6f:53:7e:51:9c:32:11:8c:2f:5a:f8:01:67:24:ef:
92:b0:c6:41:ad:04:91:a7:3e:72:49:27:ac:44:86:6c:74:c8:
89:20:9a:87:53:10:a0:1b:9e:d0:81:5f:e0:22:6c:48:96:ce:
d1:37:8b:6c:7e:1d:71:91:ab:6e:99:98:99:98:a7:a9:5a:6f:
f9:56:0c:e1:8b:69:0e:ac:94:59:75:80:56:a6:43:79:9d:f3:
89:b8:4f:3b:58:c0:ce:71:fc:dd:7b:7c:9a:f5:3e:c3:94:ef:
39:27:21:51:0d:62:a5:04:94:08:05:7c:a0:97:db:a8:10:5c:
d1:91:9b:aa:9f:74:0a:58:de:96:a5:dc:35:4e:39:f3:f6:da:
66:64:79:e6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJrdPPj/mYqhIlgzPl0dKZGPHZBwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDNkZGQxMGFkZTU0MDVhMjNiMzMxNzVjMjAyZGY2ZDhj
M2JhMmNiZDU1NGU2YjM2MWFiMDg5NTNhYzgwNTcyMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDE/OFLne5JR6AkD/TMIF8XI5yzlhyR/0SqGIIves+ge1tU
TVkBnsOpDb+PcapBMwMYF5/gaBONGZBHPCXyggc6w1+IaPuzEx6Te/vBFPOzNYxa
XrADc4RV5j6+25Su3KVb3MMw5z40QwC/fb6sFiqnT+BUsyK4ugPzWlpRXDaTHsfx
4SjdHdfwwsXFUxqaLCLdwBqcfiAwjkpNnKD05Db8Zbq4CScv3H0LPNO64iKOHJNk
j54lwYohwwy7eb/CBz+AglU7CA8vGVEkyHnwtgNyRTGvJx9UMqvrgo1o6WcqgsVg
m9rZ1ca5LkJYPOjoJWaJFw4NnC9pNS3l4FS94fCrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGq6VXbGRMa0rH7fv3zxl77Dx4o0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzJjMGIxN2Y3LTVkNGItNDAxOS1iZDkxLTdiOTAyYTM3MGUyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHON5AwDQYJKoZIhvcNAQELBQADggEBAEKSVzeznEE75WXSqjzZPCsKleGy
ZfbzruvNeXq8OkHq6H8nyBNg1kP3e1oUAZvJTLqsUEpD7WvpHdbiKdZRbsxN5sGJ
Fh4upYQpRsXF2Az54p8Jixoq7oGEAEzflSwMR574fO/IFqE5Ey3Sb6GSPm9TflGc
MhGML1r4AWck75KwxkGtBJGnPnJJJ6xEhmx0yIkgmodTEKAbntCBX+AibEiWztE3
i2x+HXGRq26ZmJmYp6lab/lWDOGLaQ6slFl1gFamQ3md84m4TztYwM5x/N17fJr1
PsOU7zknIVENYqUElAgFfKCX26gQXNGRm6qfdApY3pal3DVOOfP22mZkeeY=
-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net