Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/363d7158-5b84-471f-b23c-123b81d01bbf.roa
File: 363d7158-5b84-471f-b23c-123b81d01bbf.roa (raw, json)
Hash identifier: 66BA9HdEzUQNq25vH7Pc73qd3LDgua4pLKodTO5Qtw0=
Subject key identifier: 57:C7:56:66:59:FD:FE:35:04:F4:E4:22:EA:E4:54:FF:6F:91:FA:E5
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4517251048FC38223E3F08D53A9A33EE87B0C212
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/363d7158-5b84-471f-b23c-123b81d01bbf.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.221.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:17:25:10:48:fc:38:22:3e:3f:08:d5:3a:9a:33:ee:87:b0:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=b38cad0b669786c95981790042dae6c65466a2950f1b6dd78bd62ff7a01dbe35, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:7f:cb:2a:ac:2f:76:d6:1b:0e:55:00:b5:
21:d1:4f:b6:07:f9:cc:78:e5:ac:53:1c:b4:c2:a6:
d3:94:1b:3b:f5:cd:ac:f2:17:23:e7:ca:00:30:32:
79:c6:ed:b2:51:9f:cb:8a:18:fc:cc:a2:d7:d5:df:
d1:61:47:b0:c6:95:2e:41:37:71:a9:9f:c1:7a:c6:
9b:58:e2:22:8e:08:c6:2a:79:b4:d5:40:1a:31:7e:
eb:56:1a:57:e8:db:4e:d1:df:b1:48:0f:88:a6:27:
66:ec:2e:18:91:ee:54:dd:33:f5:83:8c:3e:b5:77:
11:b7:fc:ca:57:72:22:39:d4:e7:8b:b0:b5:2f:ee:
1f:75:00:9b:01:c7:a7:9f:0b:93:7a:fc:79:12:79:
ef:50:66:ba:99:c2:d6:f2:a7:0b:de:5e:b8:96:51:
a6:94:27:9f:94:21:e9:1b:cd:7a:75:c1:d0:c8:e1:
78:3d:f8:6b:57:39:bb:7c:cb:f7:0b:cc:e2:16:e0:
b5:9f:02:bb:d3:c4:9a:df:e6:ba:a0:69:5b:16:6a:
05:89:bc:7c:81:e3:61:a0:b5:a0:47:1b:1f:9c:93:
89:de:01:ea:f1:39:7a:f8:28:8d:63:04:fe:04:1f:
5a:ae:13:a6:d2:11:f3:3a:f0:3e:2e:83:19:ee:ee:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:56:66:59:FD:FE:35:04:F4:E4:22:EA:E4:54:FF:6F:91:FA:E5
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/363d7158-5b84-471f-b23c-123b81d01bbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.176.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a4:9b:d5:06:b7:98:14:73:fe:14:f4:a9:f5:11:59:13:1f:
37:c3:bd:e8:19:7b:07:5b:14:bb:af:40:6b:01:25:4c:3d:bd:
35:0c:b5:16:77:cb:7a:30:cf:41:f8:3d:9e:32:aa:0d:1f:b5:
22:02:55:37:fa:45:17:2b:2f:3e:1c:f4:67:b1:84:c4:b4:c3:
53:3c:a9:9c:1c:e1:7f:88:da:9f:67:2d:49:dd:2a:13:bc:9e:
61:e1:5f:38:6a:92:e1:bc:50:5e:02:40:d9:f9:e9:65:6c:bd:
c7:08:f2:3e:e8:5e:06:87:d4:9f:15:cb:07:f2:74:1c:04:47:
0b:26:b9:e4:44:9e:eb:b2:9b:e3:0a:d5:20:f7:6c:6b:69:97:
c9:98:7e:3e:86:da:2f:8d:8e:1e:65:21:01:14:f1:25:dc:02:
a8:c2:d7:b2:ad:95:9a:43:5c:fe:fa:2e:4e:59:b5:72:0d:d4:
31:a6:e1:4c:60:21:0b:fc:0f:32:d4:2e:d0:69:a4:f6:ac:c6:
ef:e2:98:ab:8d:2a:c7:55:50:2d:06:b3:8c:00:ae:d1:7c:fc:
d0:1a:07:46:b0:ff:f2:b3:fb:95:64:8b:79:c2:3e:4c:8f:44:
75:24:0d:83:14:f8:e7:4e:95:9d:aa:e0:43:11:ed:dc:ac:3d:
8f:0b:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net