Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5445d11e-52a9-4731-8647-9a8be823a511.roa
File: 5445d11e-52a9-4731-8647-9a8be823a511.roa (raw, json)
Hash identifier: ECbhnRVkUAd+EJ75eO5/o8DGLxyaE5G2TqrRAMz5LaA=
Subject key identifier: 96:4D:DF:9D:5F:D8:5B:B8:44:11:B3:6C:7B:76:8B:33:D6:F8:72:B0
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5D3F88E78348FFD34C2EAA2C303A0FF1CE54BD5E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5445d11e-52a9-4731-8647-9a8be823a511.roa
Signing time: Wed 16 Oct 2024 00:00:00 +0000
ROA not before: Wed 16 Oct 2024 00:00:00 +0000
ROA not after: Wed 20 Nov 2024 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:3f:88:e7:83:48:ff:d3:4c:2e:aa:2c:30:3a:0f:f1:ce:54:bd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 16 00:00:00 2024 GMT
Not After : Nov 20 23:59:59 2024 GMT
Subject: serialNumber=7ff18601a3a9ff4d0f8326f441521b51dedad51c9f9acebef1b9225e68b458b9, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:a5:cc:af:77:07:81:b2:2c:4a:46:d5:59:
c1:01:7e:26:02:9b:c8:71:dd:90:94:04:9d:76:5d:
8d:bb:51:e2:38:f3:e2:d3:91:f2:d6:50:d3:d6:7a:
c7:40:00:69:6d:29:7b:85:f9:1a:62:d3:27:96:e9:
a0:9e:e8:42:68:dc:a9:87:91:0f:03:8b:ce:ba:74:
92:f5:34:d4:1c:f5:e7:c0:5d:97:53:c6:83:c2:38:
25:2e:c5:cc:ff:97:aa:1a:3b:2f:8b:0d:f5:b0:b5:
5b:f5:e8:6a:c1:3e:ef:9c:fe:f7:85:3e:5a:ab:88:
db:9e:e4:c1:32:b4:d0:5a:16:6d:9e:c8:b5:21:87:
d4:54:9b:82:ce:76:7c:d2:15:ec:d9:51:7d:ce:4b:
fe:86:58:df:6d:8f:44:19:3b:ac:a8:72:f5:fb:0f:
cf:b6:2e:ac:8b:aa:d1:49:3f:27:1f:3e:38:01:bc:
58:7b:3a:2b:d0:3f:59:62:d2:ff:53:f0:08:a7:7a:
4d:f6:da:44:ab:97:f6:79:d0:c4:cb:46:a1:c1:06:
d4:9c:4b:a1:05:6b:91:9a:a9:6f:37:32:bc:62:bf:
2b:86:46:7a:20:3f:36:4b:88:77:27:99:bd:3b:7b:
96:bd:d1:01:9c:dc:4f:2e:9a:44:0a:98:dc:db:88:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:DF:9D:5F:D8:5B:B8:44:11:B3:6C:7B:76:8B:33:D6:F8:72:B0
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5445d11e-52a9-4731-8647-9a8be823a511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.246.0/23
Signature Algorithm: sha256WithRSAEncryption
94:4f:11:94:6d:56:60:1b:0d:6f:6a:d4:8f:a7:2d:d4:7c:45:
c8:11:a0:d3:71:ab:d0:fd:7e:84:4e:1b:f5:3a:b6:d4:1a:68:
f2:7e:97:11:69:9f:ba:58:b5:4d:70:38:75:99:1d:cd:1e:d1:
5d:88:aa:c7:c8:cb:39:c0:ee:c7:2f:c4:71:c2:66:dc:5c:a5:
40:ae:23:6f:a5:e5:d1:69:a9:3a:35:37:ab:a6:de:ce:f3:f4:
0a:ca:77:6f:2e:03:ab:70:ad:c4:7c:df:97:41:c2:59:5b:4a:
77:34:5a:65:cc:aa:75:ce:7b:1e:7d:43:68:5b:26:7c:99:44:
10:7f:42:68:33:9b:c7:cd:a9:6c:c0:35:13:a8:b2:98:da:5c:
7f:16:1a:e6:5c:f0:4b:6c:af:8b:39:f2:23:60:47:1c:15:81:
79:ca:e9:20:e5:a7:ff:3a:93:2a:1f:53:4e:9e:1f:0a:ed:aa:
09:11:68:78:b3:a6:97:fc:ad:e3:c6:23:a3:e7:f3:b4:78:2e:
c9:ba:fb:ee:22:99:1d:36:8d:10:05:ad:cf:65:34:b7:c5:3f:
94:48:3e:d6:82:67:44:60:f6:0b:2c:db:cf:1c:d1:bc:f8:89:
3f:42:2e:5a:eb:d6:96:bd:a2:fd:09:06:a5:3d:8a:8b:9c:91:
29:36:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net