Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b9d7aa76-4486-4178-af60-adfa2d26fc0b.roa
File: b9d7aa76-4486-4178-af60-adfa2d26fc0b.roa (raw, json)
Hash identifier: GtwC3Udz8FVLnVziZ9Liw+94QgysRvWXmgYgyKSoWHI=
Subject key identifier: A9:6C:42:A6:CE:28:49:E8:5E:39:E3:25:B4:8F:A6:17:3C:F6:5C:B5
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 21BBE401E9C95819501E477F56D3FD0A9CA0A183
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b9d7aa76-4486-4178-af60-adfa2d26fc0b.roa
Signing time: Wed 16 Oct 2024 00:00:00 +0000
ROA not before: Wed 16 Oct 2024 00:00:00 +0000
ROA not after: Wed 20 Nov 2024 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bb:e4:01:e9:c9:58:19:50:1e:47:7f:56:d3:fd:0a:9c:a0:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 16 00:00:00 2024 GMT
Not After : Nov 20 23:59:59 2024 GMT
Subject: serialNumber=031b723feb114d441977822abcf0e1e457943a48576c1adec0276831a39889d6, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:4d:e4:46:da:ca:d6:36:50:b2:d6:04:11:
cb:6e:df:cf:6b:4a:ea:ee:53:96:78:6a:68:ff:83:
11:9a:a2:24:2b:6c:c7:3c:1a:73:bc:96:6c:7e:aa:
5e:8c:cd:07:f5:45:e6:39:94:91:6d:75:cd:19:65:
cf:16:d9:8d:ff:af:ed:c4:75:00:a4:09:58:21:ed:
04:41:59:ce:0a:dc:a1:e2:e1:ce:bf:4e:98:b0:a9:
35:c8:c0:35:e3:7a:f1:d0:48:91:0d:e1:0d:da:4e:
b2:0f:10:2c:bb:93:9a:e0:f0:db:15:95:fc:a2:3e:
e2:38:fd:a1:7d:db:a5:15:9e:b2:c2:d2:58:11:95:
f1:b9:c2:58:09:26:d3:f0:69:16:89:d9:0b:eb:56:
14:29:82:89:82:de:23:67:85:5d:1e:92:cf:1c:2d:
c2:ef:3b:99:02:fb:d5:88:bf:e3:71:10:61:da:9c:
ca:06:1e:40:53:71:ad:c5:b1:6e:bc:0a:05:4e:b5:
53:e5:3b:0c:a3:51:9e:98:55:ce:d3:aa:86:90:69:
84:07:f3:b7:84:2d:9e:e2:a8:82:05:f9:7f:9d:93:
e8:f4:ca:e5:cd:aa:75:79:bf:e1:c3:13:d5:aa:69:
4a:d5:bb:12:45:a2:9f:2c:48:6c:c3:5d:c1:b1:ad:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:42:A6:CE:28:49:E8:5E:39:E3:25:B4:8F:A6:17:3C:F6:5C:B5
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b9d7aa76-4486-4178-af60-adfa2d26fc0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.242.0/23
Signature Algorithm: sha256WithRSAEncryption
20:a3:21:6b:82:ab:7b:f5:87:21:0f:9c:f0:ac:8e:d9:a6:a1:
7b:48:68:2b:36:47:c8:8a:50:63:64:fa:bc:f9:37:ac:21:65:
73:fd:9d:7c:61:f9:23:73:4d:9f:30:d3:7b:c2:8a:39:2f:c2:
ac:9e:ae:cb:4b:ef:6e:1f:9f:85:ef:7f:56:e1:12:51:85:9c:
ac:20:f6:a5:4c:1e:ee:8b:05:0b:0f:fe:18:c3:d7:a8:1a:3f:
a7:24:77:dc:66:a3:73:4f:ee:2d:03:c6:1a:eb:6b:3d:19:ab:
2a:aa:78:8a:44:f7:3c:05:2f:71:40:d9:05:27:1c:72:cc:54:
c6:57:c1:35:8a:38:64:b1:d3:c3:4a:37:b7:dc:26:d1:9b:a2:
96:72:31:83:91:11:8c:4c:04:74:98:33:f0:c6:df:6b:cc:8e:
ab:8c:89:67:9f:47:72:70:ff:f5:ad:b8:b4:ef:84:4c:7f:3d:
25:82:55:c7:05:e4:ad:ab:ca:8a:ce:8c:58:10:ee:f4:a0:3e:
3b:77:42:0e:b5:f2:ef:f6:ef:11:d1:87:6e:d0:4b:89:89:e2:
e3:33:90:c3:34:4f:62:7d:73:62:5a:d9:4f:2a:df:28:fa:3d:
32:57:3a:c1:88:6e:15:7e:2e:b7:9e:e2:dd:f6:97:da:a4:7c:
55:32:6b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net