Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bb743fb8-35af-4adc-a4f2-6d14f841f9f8.roa
File: bb743fb8-35af-4adc-a4f2-6d14f841f9f8.roa (raw, json)
Hash identifier: Te/wsJCJg7+D3drU3Ko4vOAU8VYqn+mr53D0FNsm4Ao=
Subject key identifier: 8A:D2:F7:48:3D:4F:BE:C9:CE:D3:5C:42:01:1D:B1:97:2E:DE:55:85
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 015A5BD8219612B1F9B6176F213535BFE68D3177
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bb743fb8-35af-4adc-a4f2-6d14f841f9f8.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5a:5b:d8:21:96:12:b1:f9:b6:17:6f:21:35:35:bf:e6:8d:31:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=8775fff2d195d3cb9914d044a6f8fc7a379a22d1841d161f880e0e870e90ea65, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:cf:eb:f4:7e:4f:29:fe:f2:21:f1:e5:db:
a2:69:f5:04:45:64:0f:84:86:8c:26:13:59:2e:06:
f3:b0:34:b4:f3:61:51:e7:fb:88:4b:91:73:9a:43:
d2:9f:86:85:9d:46:43:db:01:ba:07:df:99:1b:49:
19:80:0b:79:21:0e:80:1f:8d:42:06:2c:b0:ff:9b:
ef:07:55:39:d0:c1:53:dd:c2:a0:f8:27:93:91:0c:
de:d2:5a:1d:74:c1:1c:ce:60:f2:bb:d0:b4:27:a9:
2d:6f:e9:c8:89:76:6d:ac:a0:9c:35:39:43:fa:f3:
7c:a5:ae:7f:d1:ad:83:51:62:1c:49:a9:cd:fb:85:
0c:2b:20:8b:ab:1e:f3:87:37:8d:9d:0e:a0:8f:c9:
90:f0:9c:9a:f4:99:32:69:df:8a:a4:9f:01:80:87:
94:ad:8b:70:48:39:2c:ab:f5:fb:75:1b:18:72:bd:
34:45:5a:59:13:98:70:15:18:e1:47:2c:ee:35:08:
f9:b9:a2:3f:6b:9b:36:5d:43:54:43:e8:ab:fa:8c:
e8:a7:97:a8:05:3e:0d:b2:90:e5:24:a5:4a:77:1b:
cf:6f:a7:ab:95:7a:53:6d:31:44:e5:60:19:86:14:
cb:a6:5b:88:ec:e0:f6:0c:f0:d4:d1:a5:c7:d6:50:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:F7:48:3D:4F:BE:C9:CE:D3:5C:42:01:1D:B1:97:2E:DE:55:85
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bb743fb8-35af-4adc-a4f2-6d14f841f9f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.140.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4f:11:ec:35:b0:11:dd:80:e7:26:49:1d:ef:e5:ca:09:1e:
4e:1a:ac:42:45:a8:31:52:53:31:08:14:af:ef:a6:da:41:bc:
88:85:e5:69:cd:f0:4f:07:a2:61:02:d0:90:90:08:e5:bb:62:
de:e9:9d:56:14:ef:01:ba:8b:88:8a:29:8e:7e:95:87:5d:be:
98:2c:ca:00:d2:66:73:6e:c4:f8:4d:b3:d9:e1:f2:0f:2b:9f:
48:30:d5:8f:09:d3:b7:5e:ed:23:0b:54:71:18:bd:70:f4:24:
86:1f:a3:46:cf:5f:38:a1:31:8a:c9:46:ef:19:9f:04:00:27:
17:18:10:fa:31:90:60:89:e9:cd:4e:5d:50:c3:00:e6:e9:99:
32:ce:0a:02:44:3f:5a:5f:be:36:60:60:39:2b:8d:7e:07:3e:
74:d4:d5:b1:5f:03:71:4c:c4:cd:c7:d9:f6:bd:02:dc:71:2a:
88:4a:2e:70:73:61:f2:0d:e5:c1:78:a1:aa:2b:ef:14:5b:0e:
5d:0e:15:66:26:0d:1f:05:e8:f7:a7:80:91:c1:90:f6:e1:88:
92:7c:f1:15:d6:d0:88:88:4d:5a:9b:72:6c:a7:78:92:e9:6d:
fb:52:cd:0d:7a:f0:8c:bb:f8:f3:b1:a8:cf:b9:05:55:94:46:
65:d6:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net