Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6f35bdc0-c6fc-4fcd-b608-8465f541d901.roa
File: 6f35bdc0-c6fc-4fcd-b608-8465f541d901.roa (raw, json)
Hash identifier: XF1QfHb5/ooYCxKvxvN61+s0Vr+evrpxM+uj2DPclo8=
Subject key identifier: E0:86:82:D9:C1:A9:20:02:35:14:AA:44:7B:C3:DD:E4:DA:8A:EA:E6
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5E993AEF5C34BC6020DA274166E599319FDCB992
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6f35bdc0-c6fc-4fcd-b608-8465f541d901.roa
Signing time: Wed 16 Oct 2024 00:00:00 +0000
ROA not before: Wed 16 Oct 2024 00:00:00 +0000
ROA not after: Wed 20 Nov 2024 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:99:3a:ef:5c:34:bc:60:20:da:27:41:66:e5:99:31:9f:dc:b9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 16 00:00:00 2024 GMT
Not After : Nov 20 23:59:59 2024 GMT
Subject: serialNumber=353b3619c20745356d7b67661db5c1ba73ed78108176c8962b2a10ba89019d86, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:20:8b:50:95:d3:a0:db:57:63:65:d3:f0:
95:60:a7:40:92:ea:2a:1a:dc:ec:d9:1f:82:87:b7:
00:aa:5a:3b:fc:30:dd:48:ca:43:62:27:c0:1b:f9:
6f:3e:77:65:d2:59:f0:6d:7a:4a:e8:20:ae:10:98:
e2:3d:f9:9e:a4:8e:39:55:bf:24:bd:52:cf:68:f0:
27:d1:65:ef:f7:46:c4:e6:02:21:dd:99:43:22:cb:
1a:5f:f7:fe:8a:af:68:98:54:70:17:37:7d:7b:d7:
37:b1:ef:4c:6e:7c:54:c6:ee:ff:d7:00:72:e2:db:
f1:16:d9:0f:5a:cb:15:22:6e:7b:e6:9a:18:1b:f0:
69:6e:70:60:00:ff:c8:36:5f:1b:82:e7:69:7a:4d:
da:07:21:16:66:90:97:99:87:7b:85:45:c9:34:78:
be:36:e6:d4:f5:3d:03:26:ff:83:28:cc:5b:47:c4:
e1:dc:24:96:25:b1:8d:09:db:b6:3a:2f:b7:6c:80:
67:2c:f7:79:93:06:c6:ce:09:60:b0:9c:4d:67:1c:
bc:7d:d0:34:e2:df:e1:c2:f7:f1:7a:29:b0:84:c5:
df:27:c0:76:d0:0a:2f:24:c0:b1:26:44:3d:1f:fb:
00:c3:7a:fd:f0:6e:de:bd:21:ae:97:f8:55:fb:6b:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:82:D9:C1:A9:20:02:35:14:AA:44:7B:C3:DD:E4:DA:8A:EA:E6
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6f35bdc0-c6fc-4fcd-b608-8465f541d901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.248.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:72:35:8c:04:c7:83:fc:f6:e8:23:b8:f4:54:8e:d2:9e:a5:
f0:a2:41:4a:0c:09:58:82:50:87:ca:3d:05:cc:5c:93:e0:90:
77:ce:73:7e:47:b9:96:9f:80:a7:50:b1:ab:c5:b1:f3:c9:0d:
07:45:8d:7f:84:13:63:7c:2b:19:75:07:79:42:35:a2:94:df:
56:dd:85:a9:38:c1:1d:62:5b:2d:57:e2:2a:62:48:80:30:83:
f1:ba:d9:f1:07:08:33:3e:60:09:1c:64:31:e9:57:9c:94:7f:
c3:e5:a1:ad:da:3d:a8:91:5c:ba:f3:ef:04:a1:96:72:f4:73:
48:be:a9:1c:83:0b:eb:5f:4c:d4:14:44:9e:85:6c:f3:98:07:
86:1c:0f:1d:5f:93:ed:49:94:1a:4c:f8:94:ec:ba:3c:25:04:
4b:f9:55:9d:86:5e:3d:ce:71:d2:ef:cd:b0:77:6c:9c:ae:8d:
63:b8:10:c4:84:ce:23:83:3e:38:17:9c:ad:d1:1c:56:73:61:
82:29:57:b1:31:1e:ff:e6:93:6c:d9:ca:83:2f:86:55:8e:f3:
eb:ce:e0:78:f7:25:54:34:bc:8d:05:f6:55:9d:9a:8f:66:97:
19:e6:88:75:0e:3b:c3:8d:89:ea:4c:50:9d:86:07:d8:01:04:
12:40:18:8d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXpk671w0vGAg2idBZuWZMZ/cuZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMDE2MDAwMDAwWhcNMjQxMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNTNiMzYxOWMyMDc0NTM1NmQ3YjY3NjYxZGI1YzFiYTcz
ZWQ3ODEwODE3NmM4OTYyYjJhMTBiYTg5MDE5ZDg2MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGxiCLUJXToNtXY2XT8JVgp0CS6ioa3OzZH4KHtwCqWjv8
MN1IykNiJ8Ab+W8+d2XSWfBtekroIK4QmOI9+Z6kjjlVvyS9Us9o8CfRZe/3RsTm
AiHdmUMiyxpf9/6Kr2iYVHAXN3171zex70xufFTG7v/XAHLi2/EW2Q9ayxUibnvm
mhgb8GlucGAA/8g2XxuC52l6TdoHIRZmkJeZh3uFRck0eL425tT1PQMm/4MozFtH
xOHcJJYlsY0J27Y6L7dsgGcs93mTBsbOCWCwnE1nHLx90DTi3+HC9/F6KbCExd8n
wHbQCi8kwLEmRD0f+wDDev3wbt69Ia6X+FX7a3GjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4IaC2cGpIAI1FKpEe8Pd5NqK6uYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzZmMzViZGMwLWM2ZmMtNGZjZC1iNjA4LTg0NjVmNTQxZDkwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEX+/gwDQYJKoZIhvcNAQELBQADggEBAG5yNYwEx4P89ugjuPRUjtKepfCi
QUoMCViCUIfKPQXMXJPgkHfOc35HuZafgKdQsavFsfPJDQdFjX+EE2N8Kxl1B3lC
NaKU31bdhak4wR1iWy1X4ipiSIAwg/G62fEHCDM+YAkcZDHpV5yUf8Ploa3aPaiR
XLrz7wShlnL0c0i+qRyDC+tfTNQURJ6FbPOYB4YcDx1fk+1JlBpM+JTsujwlBEv5
VZ2GXj3OcdLvzbB3bJyujWO4EMSEziODPjgXnK3RHFZzYYIpV7ExHv/mk2zZyoMv
hlWO8+vO4Hj3JVQ0vI0F9lWdmo9mlxnmiHUOO8ONiepMUJ2GB9gBBBJAGI0=
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net