Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c60f310d-0c43-4d07-8125-da5e69321e3c.roa
File: c60f310d-0c43-4d07-8125-da5e69321e3c.roa (raw, json)
Hash identifier: I3fYx8lRxmKmq0oy/sZPQ6sALK8nI/6ku8EHBca0CaU=
Subject key identifier: 25:8B:F5:C0:53:5B:3B:FD:2F:B6:E3:C4:D1:F5:9F:A0:E5:5E:04:9F
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5F0B023551EABAA0CC39905912BDFCC72FA7F6CD
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c60f310d-0c43-4d07-8125-da5e69321e3c.roa
Signing time: Wed 04 Dec 2024 00:00:00 +0000
ROA not before: Wed 04 Dec 2024 00:00:00 +0000
ROA not after: Wed 08 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0b:02:35:51:ea:ba:a0:cc:39:90:59:12:bd:fc:c7:2f:a7:f6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 4 00:00:00 2024 GMT
Not After : Jan 8 23:59:59 2025 GMT
Subject: serialNumber=a3150ad55202dddcad48c487095e6d4e87fdb20734dea23967e0577be1aab218, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:67:8d:7b:12:87:a9:42:55:01:71:fe:5a:
10:ff:46:8a:5c:b6:7f:31:a8:70:bd:9b:06:bd:bf:
a2:2f:79:5e:4a:65:de:7e:51:ed:e5:de:56:ec:22:
db:11:56:6c:48:ff:e3:ca:9d:f8:d6:04:10:69:bd:
ff:41:b8:5a:36:c3:ae:0c:e4:a4:0a:1d:20:81:ec:
7b:c4:99:99:ec:a8:38:df:c6:88:7f:30:7c:e6:bf:
42:be:52:d2:2a:d1:8e:fc:57:e2:34:9f:8d:a2:35:
23:91:10:bc:6f:f7:19:cf:83:c1:55:12:4b:3e:d0:
1b:a7:b5:fe:ce:64:b0:65:f1:a1:e1:a1:1b:15:b1:
5f:fa:e0:f6:11:4c:1f:50:a1:a9:6c:21:e6:a4:a7:
e8:d0:8a:32:8a:f9:e5:3e:f1:c8:fa:f4:0b:8f:23:
c4:5e:90:cb:32:aa:48:83:3b:85:9b:44:8c:4b:3e:
c9:b7:bc:a4:46:99:1a:ed:16:86:4f:f1:96:b9:4b:
06:09:d2:a9:fe:ce:47:f4:fa:58:91:c9:ed:95:9f:
d6:55:97:a5:94:c4:59:73:4a:34:0c:e4:5d:93:04:
19:b3:ba:8c:d1:b4:25:26:c0:51:db:ce:42:de:5c:
74:a6:af:e6:a3:be:05:ce:1d:17:4e:cd:a2:6c:c5:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:F5:C0:53:5B:3B:FD:2F:B6:E3:C4:D1:F5:9F:A0:E5:5E:04:9F
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c60f310d-0c43-4d07-8125-da5e69321e3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.130.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a2:8f:0f:60:08:de:1a:a2:9f:30:eb:9c:46:8d:32:c5:eb:
b4:96:a7:1c:72:71:93:f8:c7:90:d1:38:05:f6:53:09:50:47:
2b:79:0e:63:8b:1a:d5:d5:b1:db:51:b1:5e:74:18:0d:bb:09:
eb:fd:3a:63:ff:53:86:c0:65:3e:0c:35:32:ca:d8:46:52:36:
63:e7:8d:fc:89:b9:41:31:5a:dc:65:98:db:62:30:14:c6:cf:
ee:8c:5e:b6:cf:c7:90:e4:44:62:65:17:ec:61:ec:59:45:1c:
1b:21:4d:4e:bb:53:93:1d:98:2d:29:06:76:3d:7d:9e:4c:15:
25:ab:a5:34:58:ed:a5:cc:97:6d:4a:97:d9:b1:4d:df:a7:21:
88:99:4d:39:eb:a6:ce:e7:03:67:78:f0:1d:55:22:a7:20:db:
60:51:a3:10:45:ca:d4:6d:9f:aa:8f:43:8d:ca:e1:8b:64:b3:
07:70:af:7c:1e:76:b1:f5:71:c3:6f:70:a2:db:a5:2a:a5:e4:
78:69:3e:47:82:55:d6:ad:8f:26:7b:26:bd:2d:ac:14:a6:db:
c8:f1:48:6f:0a:1a:91:04:8d:96:61:cb:35:70:1b:c6:9a:9f:
16:96:de:cb:44:f0:be:0b:87:a2:7b:c0:3e:10:7e:ed:73:1a:
bd:46:79:e2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXwsCNVHquqDMOZBZEr38xy+n9s0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMjA0MDAwMDAwWhcNMjUwMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzE1MGFkNTUyMDJkZGRjYWQ0OGM0ODcwOTVlNmQ0ZTg3
ZmRiMjA3MzRkZWEyMzk2N2UwNTc3YmUxYWFiMjE4MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1MWeNexKHqUJVAXH+WhD/Ropctn8xqHC9mwa9v6IveV5K
Zd5+Ue3l3lbsItsRVmxI/+PKnfjWBBBpvf9BuFo2w64M5KQKHSCB7HvEmZnsqDjf
xoh/MHzmv0K+UtIq0Y78V+I0n42iNSORELxv9xnPg8FVEks+0Buntf7OZLBl8aHh
oRsVsV/64PYRTB9QoalsIeakp+jQijKK+eU+8cj69AuPI8RekMsyqkiDO4WbRIxL
Psm3vKRGmRrtFoZP8Za5SwYJ0qn+zkf0+liRye2Vn9ZVl6WUxFlzSjQM5F2TBBmz
uozRtCUmwFHbzkLeXHSmr+ajvgXOHRdOzaJsxR55AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJYv1wFNbO/0vtuPE0fWfoOVeBJ8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2M2MGYzMTBkLTBjNDMtNGQwNy04MTI1LWRhNWU2OTMyMWUzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADON4IwDQYJKoZIhvcNAQELBQADggEBAJWijw9gCN4aop8w65xGjTLF67SW
pxxycZP4x5DROAX2UwlQRyt5DmOLGtXVsdtRsV50GA27Cev9OmP/U4bAZT4MNTLK
2EZSNmPnjfyJuUExWtxlmNtiMBTGz+6MXrbPx5DkRGJlF+xh7FlFHBshTU67U5Md
mC0pBnY9fZ5MFSWrpTRY7aXMl21Kl9mxTd+nIYiZTTnrps7nA2d48B1VIqcg22BR
oxBFytRtn6qPQ43K4Ytkswdwr3wedrH1ccNvcKLbpSql5HhpPkeCVdatjyZ7Jr0t
rBSm28jxSG8KGpEEjZZhyzVwG8aanxaW3stE8L4Lh6J7wD4Qfu1zGr1GeeI=
-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:25 2024 by rpki-client on console.sobornost.net