Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
File: b59643bf-eb80-414a-aca0-653646d46e07.roa (raw, json)
Hash identifier: twwIBoX0IKuR5vl+lOr6fBplecLgPzIF7DcjfsvbATw=
Subject key identifier: 85:FD:77:AE:78:A4:A8:EE:A6:CF:10:52:1B:61:8B:08:DD:3F:5E:70
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2CF9459A23EA45ADC81721E9A7791BAAD4F1B0CA
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
Signing time: Mon 31 Mar 2025 15:10:03 +0000
ROA not before: Mon 31 Mar 2025 15:10:03 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 199.127.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f9:45:9a:23:ea:45:ad:c8:17:21:e9:a7:79:1b:aa:d4:f1:b0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 31 15:10:03 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=5819c6b2367b83f22b60ff4b73be3254413dfc0faf87f7260d3aff5c866f5e5a, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:ba:34:75:18:75:e0:2f:5d:63:b9:9b:1b:
f1:28:be:36:5c:7a:b0:8e:5e:09:8f:9b:f2:16:cd:
63:2a:49:fe:d0:92:69:fe:ae:20:51:6f:dd:c3:9f:
93:d3:da:c0:83:33:63:96:49:af:4d:56:52:c0:13:
41:7c:15:d8:09:04:0c:ba:20:8c:4a:b8:f8:35:ae:
b8:f8:bd:50:56:f2:30:a6:78:60:ec:0a:76:90:0c:
42:eb:ed:b7:dd:d8:2e:ac:9a:25:a7:1a:1e:da:16:
dc:e9:1b:82:05:81:82:af:9e:a4:0f:7c:d8:0d:de:
e9:b5:96:ce:f1:98:fb:34:cd:c8:11:ea:54:ee:99:
cf:e9:48:e5:f4:55:62:9b:2a:aa:9f:db:8c:38:42:
c7:d3:47:e3:27:d0:7d:f1:6b:f5:cf:09:3d:73:2d:
65:d8:43:d6:5e:b2:fa:31:9e:ae:01:7f:7b:db:81:
43:98:f9:8c:61:eb:e8:2c:db:d0:bc:26:32:ac:7d:
37:54:84:c4:25:97:25:a6:0a:a9:96:c8:38:4e:02:
ec:44:02:bb:43:1e:a0:90:82:67:b0:08:24:74:3d:
33:98:4b:fe:d7:ad:68:b9:38:3e:9e:9b:89:00:48:
30:75:48:48:af:59:e4:4e:8a:d4:df:b3:d0:f5:3c:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FD:77:AE:78:A4:A8:EE:A6:CF:10:52:1B:61:8B:08:DD:3F:5E:70
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.127.232.0/22
Signature Algorithm: sha256WithRSAEncryption
44:69:cf:33:ec:3f:07:ca:c4:ae:cf:80:6a:7a:4a:a7:ca:eb:
a1:99:17:5b:df:c3:22:b5:ba:83:66:f5:08:b8:09:41:62:55:
22:f8:ab:d8:e8:95:ed:b3:75:1d:99:72:a7:8e:e9:1b:3c:d2:
7c:97:16:1b:f4:70:cb:5c:d5:0d:c8:98:37:5c:ae:65:f2:39:
3f:88:40:d6:73:92:ae:b5:9d:e5:65:cd:01:6a:5a:fa:cb:c3:
b9:6d:db:30:8a:e1:56:4f:95:00:16:3d:cd:2c:de:f1:ea:25:
2f:ac:60:c0:14:0b:6c:5a:64:f1:9c:3d:62:48:39:c5:6a:14:
79:f3:34:e9:d3:b5:49:f9:92:3a:16:ef:37:11:60:a8:18:75:
dd:03:6a:7c:cb:90:5d:58:b6:82:34:cb:33:60:20:de:39:cc:
60:c1:23:99:62:13:da:f5:9b:a7:20:27:19:05:59:79:5c:9c:
d8:17:d8:e6:ba:fa:1e:df:6b:57:4b:48:24:06:02:5d:e8:61:
c9:6f:35:ac:d3:ca:bf:34:9d:00:e7:ab:b8:8a:41:51:94:d9:
10:b7:08:81:17:da:c9:76:9d:78:e8:7f:b7:a3:59:d4:2a:46:
ff:82:72:c0:44:7b:61:52:24:d1:00:8f:8b:89:6a:52:c8:2a:
c2:6e:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net