Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8de97790-c26d-4518-84c9-98e21977e3d0.roa
File: 8de97790-c26d-4518-84c9-98e21977e3d0.roa (raw, json)
Hash identifier: 8zUgtMBwQU+fcV5I8hyo8v7bamsij+hsfusdVtESCAE=
Subject key identifier: 51:0F:1C:C8:C2:A2:46:8D:F2:F5:0C:18:C4:E5:67:19:E3:DC:6A:F4
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5D6D661769C27457A84E1ED3C6301CDC7411AD
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8de97790-c26d-4518-84c9-98e21977e3d0.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 199.127.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6d:66:17:69:c2:74:57:a8:4e:1e:d3:c6:30:1c:dc:74:11:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: serialNumber=25f500cec77594a0c578cdfd33e2d15fdac6ff8c977f57c349603ff467405f75, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:f5:5b:5d:64:13:1c:b8:86:90:c1:bc:9b:
9e:20:c1:82:db:3c:71:bc:7c:42:ba:84:fa:c4:2c:
3f:78:81:0d:56:59:19:41:4b:f7:73:72:5b:0e:01:
e6:d2:49:89:ee:0b:2b:eb:cd:3d:62:60:3d:95:c1:
54:6f:e8:ca:10:bd:52:c4:4e:30:90:b1:6c:3e:f1:
32:d4:8c:e0:90:a4:af:1c:1a:06:31:34:c1:c6:ec:
60:01:20:9f:7e:b2:ae:be:df:83:ca:80:b8:8b:26:
98:a6:53:2f:02:b5:ee:fb:c4:32:14:e7:a7:6a:79:
59:7e:58:2b:59:02:cf:1b:2d:5f:df:eb:7f:dd:20:
37:68:a3:22:96:e2:9f:bd:7c:1a:f9:7a:75:30:98:
ac:28:b1:b4:c2:2d:e3:a4:ca:5e:28:db:ea:42:7a:
76:97:6f:f2:89:6d:b6:64:25:c9:f1:c8:f5:c9:13:
44:b5:62:ee:bb:9c:2f:da:1c:fc:56:13:3c:5f:a0:
60:84:ba:39:91:fd:05:8d:9a:b3:2d:81:80:0f:ce:
8d:f8:6f:8e:4c:fc:0d:83:e0:3d:45:6a:8c:8c:f3:
6f:ca:d8:45:74:51:ea:a1:b8:38:13:df:25:02:27:
1d:a5:48:49:9a:82:b4:6d:53:fb:68:04:da:bb:23:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0F:1C:C8:C2:A2:46:8D:F2:F5:0C:18:C4:E5:67:19:E3:DC:6A:F4
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8de97790-c26d-4518-84c9-98e21977e3d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.127.232.0/22
Signature Algorithm: sha256WithRSAEncryption
36:e1:95:ef:e8:ac:dd:63:67:fd:63:5c:b8:6e:74:07:fd:bd:
b1:b2:a3:af:de:20:61:48:c5:03:c1:5a:b4:55:47:18:b5:3e:
e2:b5:0b:36:d8:3e:84:97:92:52:8d:bd:b4:1f:82:28:e2:c6:
5f:c3:b3:bc:7a:60:74:6b:ba:9a:ea:b7:73:36:e9:6c:9a:09:
c2:58:5f:59:e3:ce:37:1c:2a:ad:24:ab:65:a9:86:e0:71:59:
a5:98:e6:30:51:a2:b4:8c:f4:d6:57:ab:1c:79:2e:25:88:df:
1d:65:61:d8:6c:a7:59:3a:d8:ae:a1:24:06:28:49:60:6e:9b:
16:3b:ca:4d:c4:fa:b8:8c:ea:4a:e2:91:f4:1c:1b:1e:05:ed:
00:84:89:84:2d:3d:40:4f:78:80:ac:0c:6c:76:1e:51:8d:b6:
45:3c:72:dd:3e:c1:94:5a:09:0e:44:e7:8b:57:21:f2:d2:14:
60:a5:38:59:5e:2a:d5:c0:d5:20:52:01:4a:e6:88:dd:cb:13:
84:df:19:b3:6e:b0:0a:05:7d:3a:fb:bb:bd:9e:6e:e7:c6:98:
d6:8f:13:dd:06:77:8c:de:4b:8a:9a:e5:0d:ac:30:e6:83:92:
a5:49:c4:3b:55:79:bb:32:6c:fe:8b:b9:33:66:f5:73:e6:bb:
20:1e:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net