Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa
File: b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa (raw, json)
Hash identifier: D1urMndakOmy1f5RbPchK5hk1tcIz2mGiXcf1cIHaX0=
Subject key identifier: 78:47:41:F5:C3:F7:6D:98:B2:EE:2D:B6:25:6A:31:35:12:2B:C7:DC
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4436511C3137EAE696BD75863FBE1338ABFA903E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa
Signing time: Fri 11 Apr 2025 00:00:56 +0000
ROA not before: Fri 11 Apr 2025 00:00:56 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:36:51:1c:31:37:ea:e6:96:bd:75:86:3f:be:13:38:ab:fa:90:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:00:56 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=3203eb177fe4631742d19a95bb7163d2968483b9abd1b9e787db0e341ce697c8, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:24:e6:a0:cc:d3:33:a8:60:aa:cb:db:7e:
3b:ba:34:e0:32:c0:ce:d1:69:85:82:db:99:41:bf:
d7:b0:49:e1:eb:ab:d3:4a:cf:c5:a3:42:e2:1b:1b:
db:c3:38:b9:f6:e4:36:e4:81:3e:30:a2:db:9a:a8:
2d:0a:db:2e:89:80:a3:68:4b:ec:93:87:49:1c:3a:
74:d6:b6:a7:d8:d4:16:09:ad:f6:69:06:09:1c:59:
05:43:48:db:e5:5a:58:93:d7:3c:2f:1f:20:db:3d:
4b:23:75:9e:c6:62:99:63:14:db:95:d5:ce:67:02:
8d:01:54:de:72:4c:b2:81:7e:75:3b:e6:57:62:da:
42:71:56:a6:f1:b7:49:d1:df:12:54:90:da:78:85:
aa:2c:b9:69:6d:1d:fa:72:ff:24:ea:14:0d:dd:51:
49:39:bf:4b:1f:87:43:82:ed:a9:31:db:98:05:b0:
a0:78:b6:ff:35:01:f0:2f:f1:c4:7f:4d:bd:7e:da:
e1:b4:cb:85:d5:a1:07:f7:bd:92:43:e7:72:85:41:
b5:58:23:60:b0:d1:cf:ed:ad:6b:bb:44:bc:1e:59:
0b:4b:d2:9e:9a:49:1d:f4:73:a5:3d:cb:39:8c:49:
d8:83:f6:34:ea:e1:7f:d0:a6:e4:96:a3:3a:20:9d:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:41:F5:C3:F7:6D:98:B2:EE:2D:B6:25:6A:31:35:12:2B:C7:DC
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.236.0/23
Signature Algorithm: sha256WithRSAEncryption
70:5e:6f:52:9c:b0:02:b9:ca:96:b2:d3:5c:40:2c:99:ad:96:
77:45:45:79:4e:d4:6c:de:f9:31:68:ba:f8:83:3c:e6:ab:db:
b4:54:ef:c5:50:b9:35:fd:55:82:77:56:99:2b:8f:5c:4a:2c:
db:28:1a:1b:f4:fd:3b:92:74:7b:eb:07:16:19:e1:25:74:f8:
df:6f:a9:13:99:87:08:79:ba:94:13:bb:82:15:a5:60:da:08:
63:0c:dd:12:81:c0:92:b9:46:0d:74:f0:1b:df:75:68:70:59:
37:f0:05:f2:2d:56:e9:0a:ac:17:ec:ae:9d:16:18:9c:df:32:
b1:d4:84:e0:cc:7d:f4:f6:00:e8:4c:93:36:18:d8:29:fd:98:
27:e1:e8:8e:ce:df:ae:d8:74:44:b2:66:36:47:ff:9b:33:7a:
eb:da:f3:59:fc:5c:a2:91:04:69:40:7b:45:5b:b6:d8:c9:9d:
6d:fc:7e:78:e5:80:90:27:85:6d:8e:9c:33:49:2a:52:c7:c7:
c4:05:24:8d:32:7e:1b:35:71:70:ea:33:d9:be:8f:2b:8f:a7:
98:b2:a5:61:7e:cc:49:e0:09:88:4c:20:92:35:c8:fc:ba:8b:
4a:4e:73:f4:03:83:90:67:98:7c:cd:89:27:c7:e1:61:7f:55:
f4:b1:a7:24
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURDZRHDE36uaWvXWGP74TOKv6kD4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAwMDU2WhcNMjUwNTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMjAzZWIxNzdmZTQ2MzE3NDJkMTlhOTViYjcxNjNkMjk2
ODQ4M2I5YWJkMWI5ZTc4N2RiMGUzNDFjZTY5N2M4MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2ECTmoMzTM6hgqsvbfju6NOAywM7RaYWC25lBv9ewSeHr
q9NKz8WjQuIbG9vDOLn25DbkgT4wotuaqC0K2y6JgKNoS+yTh0kcOnTWtqfY1BYJ
rfZpBgkcWQVDSNvlWliT1zwvHyDbPUsjdZ7GYpljFNuV1c5nAo0BVN5yTLKBfnU7
5ldi2kJxVqbxt0nR3xJUkNp4haosuWltHfpy/yTqFA3dUUk5v0sfh0OC7akx25gF
sKB4tv81AfAv8cR/Tb1+2uG0y4XVoQf3vZJD53KFQbVYI2Cw0c/trWu7RLweWQtL
0p6aSR30c6U9yzmMSdiD9jTq4X/QpuSWozognUkpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeEdB9cP3bZiy7i22JWoxNRIrx9wwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2I0YmI5ODUxLWI1YWEtNDM3MC1iZmZlLTRmYzFmZDQxNDg1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEX++wwDQYJKoZIhvcNAQELBQADggEBAHBeb1KcsAK5ypay01xALJmtlndF
RXlO1Gze+TFouviDPOar27RU78VQuTX9VYJ3Vpkrj1xKLNsoGhv0/TuSdHvrBxYZ
4SV0+N9vqROZhwh5upQTu4IVpWDaCGMM3RKBwJK5Rg108BvfdWhwWTfwBfItVukK
rBfsrp0WGJzfMrHUhODMffT2AOhMkzYY2Cn9mCfh6I7O367YdESyZjZH/5szeuva
81n8XKKRBGlAe0VbttjJnW38fnjlgJAnhW2OnDNJKlLHx8QFJI0yfhs1cXDqM9m+
jyuPp5iypWF+zEngCYhMIJI1yPy6i0pOc/QDg5BnmHzNiSfH4WF/VfSxpyQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net