Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b38c64a-d8b3-469b-9d8e-d402620100a3.roa
File: 8b38c64a-d8b3-469b-9d8e-d402620100a3.roa (raw, json)
Hash identifier: ziz70M7myWknhu+QE0olSeLuZsjEUz0V9DwS/hj+MzA=
Subject key identifier: D4:CA:DA:3A:7B:F5:D3:09:CD:F1:44:DB:4B:B8:6B:8C:62:0B:AA:01
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 682DCEEE4D7461A4D8DFA48D17B6E6AF73B0C96E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b38c64a-d8b3-469b-9d8e-d402620100a3.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2d:ce:ee:4d:74:61:a4:d8:df:a4:8d:17:b6:e6:af:73:b0:c9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=8d2dc9bb0051a81e1c7d6ac53b2cbaeef39d373bb468167612b0b7e23ce23082, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:60:87:2f:8e:5e:1e:69:6e:97:90:d4:97:
c2:3a:e0:7b:0b:76:c1:c1:e5:2a:9b:43:dd:3a:c5:
eb:cf:85:a0:9b:62:e2:4b:a4:65:21:68:a9:55:41:
60:4b:33:41:8b:9b:5d:c7:9d:6f:4f:06:39:fb:e8:
8a:8d:d7:f4:8b:76:4d:c3:4f:34:be:b0:1d:8c:7b:
ed:e6:8d:e4:c5:08:96:1b:30:36:5b:74:0f:08:c6:
2b:24:17:66:41:44:81:f9:d7:26:67:76:81:c9:c8:
67:e9:ee:c4:78:53:4b:8c:28:f3:3c:e7:ff:2d:29:
97:d5:fa:8f:ca:da:29:34:a1:50:2f:45:c6:4d:d9:
da:e7:21:df:6b:a7:d5:a2:3f:75:77:d2:d0:93:40:
5c:4e:38:6c:36:ba:58:fe:67:a6:9e:c7:eb:45:92:
78:5a:63:9c:99:0d:a2:bc:e5:40:c2:04:45:80:8b:
07:8c:9b:71:e7:ee:0c:63:7e:75:75:ff:6d:6d:27:
03:ef:16:7d:27:8d:03:2b:a5:37:0b:3d:8c:17:ee:
57:14:6f:29:36:d6:27:7a:e7:dd:2f:bd:79:75:9b:
11:75:2b:3d:2e:7b:a1:ff:bb:fc:ab:09:29:a6:ef:
90:2d:5d:8a:10:eb:b3:aa:d0:1b:b8:13:ab:bd:ce:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:DA:3A:7B:F5:D3:09:CD:F1:44:DB:4B:B8:6B:8C:62:0B:AA:01
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b38c64a-d8b3-469b-9d8e-d402620100a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:cc:59:88:3b:f8:cb:a5:84:c3:e2:c9:6e:9f:e1:ba:bc:34:
8a:91:c3:0b:de:6c:9f:76:67:e5:e9:18:14:c8:c1:6a:74:ee:
f7:83:4f:f8:d8:92:00:99:39:f7:3d:e5:0e:c2:44:ea:f0:ac:
96:82:b0:d3:a8:55:4c:74:2d:7e:a7:54:b9:ad:dc:3b:f9:a5:
8f:5a:64:91:bd:64:04:21:88:26:68:0c:37:27:a1:91:28:fd:
b1:33:78:36:d8:33:25:02:5c:ce:bb:64:28:51:da:f8:4b:fd:
a3:b3:32:15:84:92:d4:54:52:c5:88:dd:fa:77:e5:9b:ac:ef:
f0:20:64:34:80:7a:6d:38:68:a3:50:1c:ba:08:0f:d7:a0:00:
e0:c2:d4:bd:d6:9e:1c:25:37:95:f7:91:e2:ac:a1:10:44:05:
6e:be:bc:f7:a5:04:41:25:ce:88:99:bf:7f:28:60:50:bf:6d:
31:7b:68:6d:d3:77:e4:d4:c4:5a:75:7a:7c:58:95:48:b2:05:
a1:73:15:09:f1:42:77:c7:8f:9f:18:75:93:a9:8c:6d:a1:e0:
59:d3:3b:dd:d6:32:5c:5e:1d:fd:b2:7f:b7:64:04:b3:82:70:
7b:77:a4:12:c6:c6:5c:73:53:8e:e8:85:a0:bd:20:61:db:7b:
ac:6b:45:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net