Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a16d3500-025c-4019-a854-0f0dbdbcbb3a.roa
File: a16d3500-025c-4019-a854-0f0dbdbcbb3a.roa (raw, json)
Hash identifier: HxPKvjx24AAxOOYpqfC1Ez9m0hSNro76un4zOwOy60k=
Subject key identifier: A3:19:4F:B3:B1:F4:1B:F4:24:F3:03:54:53:65:C6:39:CB:7E:2C:6B
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 7C51FEF602AF977D5CEDF94971233EAA61116B06
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a16d3500-025c-4019-a854-0f0dbdbcbb3a.roa
Signing time: Wed 30 Oct 2024 00:00:00 +0000
ROA not before: Wed 30 Oct 2024 00:00:00 +0000
ROA not after: Wed 04 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 23.249.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:51:fe:f6:02:af:97:7d:5c:ed:f9:49:71:23:3e:aa:61:11:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 30 00:00:00 2024 GMT
Not After : Dec 4 23:59:59 2024 GMT
Subject: serialNumber=1d7eca9c60e2ff0b3217ddf73a4ce2c54ea26f1eb7e3351c398ee8c65b5562a7, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:40:35:ab:59:12:83:5a:87:c5:0c:9e:76:
f9:c4:b0:9e:8c:3f:a7:05:52:fe:fb:37:29:58:a6:
81:d3:a2:4a:21:01:ee:6e:69:a8:90:70:11:01:77:
c6:8d:f8:91:b9:67:a1:ad:5e:82:ef:4c:89:70:a3:
91:68:df:1c:df:65:f6:75:e8:1a:13:61:a7:d3:8d:
0a:21:dc:9f:1c:5a:ff:ee:86:49:91:53:94:0b:82:
e3:28:2f:2a:c6:37:5b:70:71:f2:39:1c:3d:eb:1e:
d7:85:fa:5e:a4:e6:13:05:68:9a:fd:5b:2c:83:a1:
71:0b:0f:71:c3:53:d1:b3:82:5d:9f:71:cf:c3:38:
41:c1:17:ff:19:fc:ff:03:ec:5e:14:91:d7:3b:ea:
ce:d7:42:3c:e0:21:ef:20:ba:ae:fe:1d:18:44:3e:
bc:8f:7c:0d:83:cf:f9:96:63:30:86:bc:a3:ee:15:
bc:e0:61:8a:2d:2b:bd:3f:a6:ce:d9:9c:1a:86:cb:
6d:40:8a:c2:0a:e2:37:c2:20:50:c6:55:15:a7:a1:
03:53:f2:6a:6f:3d:10:3b:38:75:0a:b3:b5:94:eb:
af:ac:5e:fa:54:0e:f1:72:59:fe:24:c2:cb:e7:ce:
04:e5:5a:b5:05:1b:6d:95:95:68:9e:24:18:f8:02:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:4F:B3:B1:F4:1B:F4:24:F3:03:54:53:65:C6:39:CB:7E:2C:6B
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a16d3500-025c-4019-a854-0f0dbdbcbb3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.208.0/20
Signature Algorithm: sha256WithRSAEncryption
88:b4:da:b4:eb:14:aa:1f:30:70:38:59:7a:0a:58:23:e3:46:
44:de:c6:4d:cc:fd:e0:81:55:e0:34:7e:00:46:b6:1c:a1:78:
d9:77:94:3e:24:9b:ea:7a:f9:80:45:4b:53:a6:75:84:e0:36:
99:0a:69:45:a0:87:8d:55:19:3b:06:b5:b9:7d:c9:12:99:02:
b8:a7:ae:b3:34:9b:12:a2:d5:9d:f9:95:e7:48:33:a8:6c:32:
2e:5d:65:d6:37:89:96:50:e1:c9:4a:60:97:55:43:79:79:33:
3c:a6:3e:ee:b9:a2:f1:46:35:a6:2e:b3:87:bf:88:4f:d8:e3:
19:6f:41:68:46:17:4e:fc:da:f1:20:8d:d9:09:d5:99:c7:72:
6a:55:39:15:6b:ab:00:88:be:90:55:65:c1:6f:14:6a:79:b3:
5f:b5:e7:e6:71:03:f7:c6:68:b8:a2:76:2d:f5:18:6e:ed:d7:
60:78:ca:3e:e1:85:fb:40:2b:de:33:83:7c:bd:22:c4:f5:4e:
1c:2f:01:d1:50:69:c3:ba:80:27:18:ca:69:22:78:98:5e:b1:
d1:72:f9:23:c9:e5:11:96:15:73:b7:fa:3f:cd:bf:f0:40:9d:
50:a2:c5:7e:96:a6:9a:b7:77:da:0a:a0:11:9d:d4:72:0c:f7:
a7:db:1a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net