Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
File: b5e0d86e-0f74-41d8-a413-497ad79e414d.roa (raw, json)
Hash identifier: M7hKv/xdwnkMVPSWCsvpe42iyDY2V7Cc0//kAVgzlPg=
Subject key identifier: D3:19:0C:91:B7:D8:89:08:DF:40:A7:24:80:AE:D4:59:56:1F:25:1F
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 48CDA3D101B2FD19B2B33E67457757B98917587E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
Signing time: Wed 09 Apr 2025 00:00:09 +0000
ROA not before: Wed 09 Apr 2025 00:00:09 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.221.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cd:a3:d1:01:b2:fd:19:b2:b3:3e:67:45:77:57:b9:89:17:58:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 9 00:00:09 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=a834234f5e6cf6a76473aabef0209b185abab677d5af2aff58ad378e2fc1ded0, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:e7:8f:01:86:50:f6:bc:ce:80:1f:75:24:
d6:19:06:b2:89:09:52:3e:75:8e:cc:0e:c2:be:3e:
80:9e:51:5a:a8:a8:52:66:59:18:fa:6d:49:59:7a:
ab:0a:9f:cc:b1:7f:5c:2b:cd:b0:f2:23:6c:de:f5:
d7:7a:02:2b:85:1c:10:a7:05:b6:28:3e:d8:d2:55:
7c:a5:cc:be:91:e0:4d:3a:27:e4:a5:ea:db:27:d6:
87:95:77:75:74:d6:4c:b8:0d:cd:ca:17:6a:12:0d:
0c:59:4f:a6:fb:47:f5:d4:a4:0a:26:93:2a:11:53:
bd:8b:6d:b9:d1:19:74:b4:ff:b5:8f:3d:51:74:d9:
29:db:bb:5d:f4:61:3e:ba:dd:4b:4e:e8:bd:f7:2d:
ed:e9:d1:83:95:d4:2b:5d:ef:4a:a5:25:e2:13:d9:
44:22:ac:57:95:b8:cc:f5:b5:a8:2f:0c:fc:2d:18:
21:b8:58:9f:2a:a9:b1:1f:bf:39:68:21:30:4c:90:
76:77:f8:86:19:a5:c9:97:41:d6:34:db:e6:5d:c9:
60:54:04:ea:b3:28:b7:5a:1e:18:1d:d8:c8:91:c7:
49:ff:d4:07:80:59:b5:eb:57:0c:07:17:50:05:07:
49:78:c2:ac:32:6c:5f:d1:a4:62:c9:69:4b:51:2d:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:0C:91:B7:D8:89:08:DF:40:A7:24:80:AE:D4:59:56:1F:25:1F
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:43:a1:0a:a3:2a:28:9a:8f:a1:1f:29:0e:05:bf:8c:e7:92:
41:80:59:5d:8e:3b:d3:16:13:ec:cf:3b:b7:ff:ec:dd:ee:25:
fa:0b:3f:6b:d7:8d:c6:94:b8:ea:af:6c:03:f4:37:d8:75:94:
e7:e4:96:03:0c:3b:8e:ca:f1:a9:78:a4:45:dc:e2:a9:16:56:
d5:56:91:39:c4:56:05:a8:28:ff:77:54:d8:7c:74:4f:e2:66:
15:a3:13:65:c9:cd:da:c1:49:46:d9:46:92:8b:0f:1e:e7:3b:
8d:4d:30:24:f3:d7:73:ea:72:2e:38:38:f6:da:ce:81:df:94:
90:16:c3:ce:04:d9:af:92:d1:87:3d:39:43:64:8c:61:ab:3f:
db:ae:3e:96:b4:8f:f1:2e:5e:50:f1:f8:ad:f8:b7:66:42:ec:
85:5b:d3:a3:7e:e8:99:26:47:11:23:fc:db:a6:a5:4c:a2:dc:
44:6b:18:43:22:e7:9b:4b:46:89:9a:41:6d:de:3e:49:9e:51:
69:98:58:00:1a:3d:93:1d:c7:ba:78:f2:32:2f:6e:8d:5c:6c:
26:e7:45:0e:bc:17:5c:3c:a7:9d:35:76:75:c8:b5:80:40:2c:
35:46:5a:79:63:07:6d:6f:f9:68:29:c5:33:03:b4:fd:6a:5e:
0a:d1:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net