Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa
File: 498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa (raw, json)
Hash identifier: lXVZ2xjJ0asBr92TUPbnOvkAUqPl9ZUU1g04MK6jpEY=
Subject key identifier: 5B:01:1E:1B:67:12:9F:D4:50:E1:A1:49:7C:F8:A9:B4:F8:6F:91:4E
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1554FFFBD766BCD0F91B65F4D3F86B79EC20749A
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa
Signing time: Fri 11 Apr 2025 00:10:09 +0000
ROA not before: Fri 11 Apr 2025 00:10:09 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:54:ff:fb:d7:66:bc:d0:f9:1b:65:f4:d3:f8:6b:79:ec:20:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:10:09 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=c19843db175f8c78cecb66b6a55ab2667c42d2f96dcffca8190ef357a3394f53, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:2b:5a:bf:f5:92:10:2e:44:2e:7a:77:c2:
71:71:70:75:af:b8:88:a6:95:a5:73:3b:cc:20:36:
10:02:28:3a:4a:3b:2e:18:18:13:d7:e8:5c:0e:e6:
5a:dd:f4:38:90:9c:26:1b:5d:13:d1:72:e4:ee:d7:
94:fc:89:d8:88:58:5d:8f:bc:c9:cd:91:a5:d2:be:
bf:b6:36:53:6b:0e:73:04:27:f5:46:be:5d:09:6a:
bf:de:f9:70:fd:9f:4b:4f:6a:20:cc:ac:93:7f:d8:
d2:33:72:c9:aa:cb:84:f6:be:2d:4e:ab:9e:85:bd:
e9:dd:a5:b5:a2:61:1e:4b:04:b6:22:9d:5d:14:55:
8d:48:fa:e6:b5:10:08:c1:c6:e7:8d:33:8e:2f:66:
98:a1:aa:d4:1e:54:6b:f3:b2:56:e5:10:c2:2a:df:
af:6e:b1:52:13:32:de:33:c8:10:02:88:10:4e:61:
d5:aa:ec:89:8e:25:67:63:40:39:35:2a:d4:ac:ce:
ef:c4:31:7e:fb:39:29:0f:b7:19:52:9a:b1:60:fa:
99:a5:87:e6:c2:d4:3f:de:bc:78:88:00:e8:e3:d2:
ca:b5:7d:a1:c6:2c:1a:da:3f:7e:6d:47:4e:7b:9d:
d9:54:e4:dd:f7:e9:c2:71:74:6a:81:e5:29:6e:e4:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:01:1E:1B:67:12:9F:D4:50:E1:A1:49:7C:F8:A9:B4:F8:6F:91:4E
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.186.0/24
Signature Algorithm: sha256WithRSAEncryption
01:31:25:72:93:83:6e:12:45:3e:aa:78:06:5c:63:2b:3c:a3:
1a:93:02:bf:12:ea:b7:f0:89:ca:10:29:ba:99:c8:8a:c2:c9:
df:3d:ff:5e:10:48:de:6b:c8:3e:fb:15:75:39:27:55:ee:26:
15:d7:5a:81:ab:4e:84:ad:c0:0e:89:28:ef:55:3c:0e:94:3d:
06:4a:5e:7a:e2:a9:61:46:45:70:5f:4e:d9:81:2b:86:92:d6:
28:28:5b:18:9d:55:6c:57:b6:ad:0d:81:06:f4:4b:ec:e9:eb:
1b:8f:bd:86:a0:f5:99:4b:b9:ba:69:be:e4:46:93:09:81:3c:
10:46:16:02:f2:95:2b:fe:43:28:7d:29:41:76:ca:11:1f:7e:
57:99:c1:7a:c5:5c:62:a7:48:79:bb:31:6d:8f:65:3a:2e:38:
91:87:ef:55:4e:6a:7d:28:c1:ef:f7:19:9b:f6:a8:b0:ed:b0:
8b:8a:63:d5:4e:42:66:82:92:a6:02:3d:6b:63:08:a6:41:27:
82:61:fa:36:37:29:1b:f8:37:31:c1:13:c1:64:71:d0:4c:ee:
81:c0:6e:af:0d:36:a7:2f:65:0a:c8:bf:9f:6d:d2:3f:8c:d0:
86:62:63:33:bf:97:4e:30:2c:5a:95:1c:ff:62:b6:33:15:ad:
8e:e6:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net