Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8fbe022a-61b8-4d81-8dfb-535ab024edd5.roa
File: 8fbe022a-61b8-4d81-8dfb-535ab024edd5.roa (raw, json)
Hash identifier: bVeIQtXr0qK0mUAny9L3IjtkLJP1gPfrm32zE14G25g=
Subject key identifier: 0A:7B:5C:90:FB:16:7D:52:55:23:68:2D:61:A0:90:F4:94:3C:33:76
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5A9B2B4357592E592344EC49E5519A30253AE690
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8fbe022a-61b8-4d81-8dfb-535ab024edd5.roa
Signing time: Wed 16 Oct 2024 00:00:00 +0000
ROA not before: Wed 16 Oct 2024 00:00:00 +0000
ROA not after: Wed 20 Nov 2024 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9b:2b:43:57:59:2e:59:23:44:ec:49:e5:51:9a:30:25:3a:e6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 16 00:00:00 2024 GMT
Not After : Nov 20 23:59:59 2024 GMT
Subject: serialNumber=c8579069c78d33823a5fdbee910a369f98b6db253abb9354d50d80c6642b972f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:78:55:8a:fc:b3:2d:73:9c:e6:24:d9:49:
ca:fd:cb:d8:de:fd:c9:b2:da:6c:b1:93:f4:f2:f2:
c8:c2:5a:64:41:b5:9c:74:76:7a:80:ba:3e:74:92:
aa:41:b3:df:e8:8e:c0:38:b8:eb:74:94:e4:1a:d4:
af:66:0b:9f:12:ff:3a:4b:b4:0f:cd:2f:c9:37:6a:
31:4b:f5:a1:9d:a9:6d:05:52:d8:aa:d6:03:ce:bf:
bd:31:83:dd:7d:85:c6:7a:8f:6c:ae:ad:f7:17:e0:
a3:41:80:73:8a:20:86:9d:46:92:86:e1:f8:61:db:
ea:36:bc:53:55:9d:c8:8b:40:87:65:a2:e3:1a:7b:
a3:43:eb:23:72:19:90:72:09:ec:c0:c7:d3:6f:82:
05:80:2c:b3:9c:ba:a4:4d:fd:e8:ea:87:ba:6f:6b:
5a:6f:91:a4:89:94:6d:7a:87:1f:8c:cf:a4:72:86:
65:d3:b0:1f:8a:da:2e:e4:3e:c6:5e:c2:17:87:df:
23:fd:9d:8f:d5:23:24:1f:90:39:da:3f:96:2c:05:
61:41:70:e4:49:4b:6c:99:d7:ca:f5:9d:c9:f6:bf:
ae:17:87:7c:85:14:33:7b:54:4f:07:f1:4e:df:98:
21:88:1d:32:5e:ee:c3:ab:e5:0d:f1:aa:c6:d2:b3:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:5C:90:FB:16:7D:52:55:23:68:2D:61:A0:90:F4:94:3C:33:76
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8fbe022a-61b8-4d81-8dfb-535ab024edd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.238.0/23
Signature Algorithm: sha256WithRSAEncryption
57:ef:34:94:52:b8:7c:dc:6f:dd:c3:6e:9f:d0:39:33:cb:9a:
49:f0:c0:fa:94:a7:05:a7:72:7c:e8:68:82:87:f8:ff:a9:14:
0c:13:46:ff:a8:6e:7b:56:ce:c2:a4:10:80:23:15:f2:4e:dd:
1a:10:e3:24:a4:76:82:d6:4e:8f:4a:2f:83:ba:58:3c:e9:9d:
33:17:b0:5f:b8:5e:aa:75:f4:22:f3:04:3a:40:c3:02:0f:db:
10:8c:42:6a:02:b9:95:64:d7:b6:08:38:f3:0c:7f:84:58:6f:
71:9d:bb:4c:db:d3:f1:8c:fb:1e:6d:5d:54:05:41:0f:8d:1e:
1a:d7:1b:f4:7f:c4:d2:60:e8:79:ff:d4:50:cb:5e:5a:e6:6e:
bc:9f:9c:3a:1e:c3:f2:bb:e5:32:f6:e8:64:17:0f:f7:6f:c2:
a5:c6:99:7a:32:f4:c6:df:6e:4b:7a:c6:f9:85:55:99:30:d8:
c9:ce:42:13:4d:98:9f:a3:c3:ac:e5:19:ef:76:ac:64:84:75:
eb:d6:af:30:c6:d3:44:a2:2f:eb:66:83:b9:22:d5:c1:ba:50:
c9:d2:4e:83:50:dd:f4:66:7f:dd:61:36:42:eb:9b:44:4b:f2:
41:82:92:1e:e6:4c:7d:32:69:a1:34:c8:26:da:df:c8:3a:d0:
eb:d2:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net