Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa
File: c9752aac-8490-485f-92b7-6a6ba02b76d5.roa (raw, json)
Hash identifier: PhWYBPfO259HEuy/P5ZDn9ng74lTo+IF7+p6VDDwABw=
Subject key identifier: 28:6C:3B:4A:39:50:F4:A4:DA:D1:FB:3F:AB:DB:4E:BE:A2:C4:A8:A7
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 7BB739CCA3FEAA10C8A50088EBF231B1AAA2F256
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa
Signing time: Mon 31 Mar 2025 15:10:02 +0000
ROA not before: Mon 31 Mar 2025 15:10:02 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 199.127.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b7:39:cc:a3:fe:aa:10:c8:a5:00:88:eb:f2:31:b1:aa:a2:f2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 31 15:10:02 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=e4176f0d60679411ba1e30fba305b40e2d71ea69d6e8a3215f3d342f15239587, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:2c:62:62:1d:1c:44:17:e7:02:19:fe:4c:
73:3c:66:38:98:83:db:78:89:e5:6e:1f:a4:e6:a9:
cc:d6:ad:57:76:28:19:07:6d:80:0a:a2:da:e9:ab:
1d:56:c5:e6:ca:3a:a3:2d:4a:e4:bd:d0:fb:dd:00:
9a:fb:67:22:81:10:de:a7:34:c7:46:0f:03:68:ca:
1c:63:ae:54:ab:b0:7f:ae:ba:9e:98:d1:46:ea:02:
c1:05:c2:5d:04:cc:11:4a:3c:ee:e5:94:2f:84:23:
60:55:3a:ea:0d:1a:b7:ff:25:37:de:4e:c1:41:65:
48:2d:bc:30:3a:65:e4:ed:d2:b4:54:0d:f0:97:98:
72:e3:2b:11:93:16:a1:ed:a8:c2:45:8a:ab:7e:4a:
a7:5f:c8:b6:f8:b6:a2:85:ff:42:48:ba:88:d5:07:
13:18:19:ce:09:35:ae:c4:93:92:ec:13:42:e5:cc:
88:2b:24:86:0e:ab:a5:bc:b6:ce:6b:6f:16:7c:77:
5c:56:2f:cd:46:02:3b:7c:2c:fc:46:16:92:27:72:
09:4f:16:27:cb:e6:46:50:74:1e:6c:2f:69:82:56:
ab:1e:37:66:01:d3:bd:bc:ef:fa:0b:7e:5e:80:38:
d1:4b:6e:9a:a8:51:9c:15:f9:d4:8b:04:6b:eb:a9:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:3B:4A:39:50:F4:A4:DA:D1:FB:3F:AB:DB:4E:BE:A2:C4:A8:A7
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.127.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:a0:87:8a:23:1b:e5:95:f5:72:b3:77:9c:ff:73:35:30:45:
46:55:5a:b9:b4:9a:ad:82:54:44:a9:6c:e0:5c:42:8b:47:95:
c3:2a:be:72:45:94:3e:a7:e9:37:44:f2:79:b7:47:9d:e6:b0:
63:ea:e7:a6:14:e8:ff:4d:ed:99:88:af:af:f3:f2:a3:ae:4f:
8f:48:72:49:15:14:0b:a0:dd:01:1e:0b:02:54:fb:9d:83:9e:
12:c2:36:76:29:35:45:c9:9a:5f:72:65:aa:eb:8e:ba:ca:32:
79:8f:5d:90:c8:ff:04:0a:e2:3b:47:93:a4:ac:c8:b9:e9:fe:
49:2f:c1:7b:aa:f5:8a:9b:c2:1e:01:b6:ea:3d:fb:20:0c:ae:
8f:a6:4a:62:5d:09:85:d8:3b:34:7a:2a:de:4c:22:99:cb:7e:
f5:bf:ae:4c:e7:cd:ac:2c:89:91:73:28:b8:7e:30:c9:39:a2:
85:97:76:52:c8:b7:9c:c3:d9:c2:cc:11:90:e4:df:fd:4c:ed:
9b:2d:99:2d:2b:c2:49:87:7c:d6:54:ba:27:a9:ff:6e:7e:d7:
6b:ef:b8:0e:a7:98:80:99:af:6b:26:c1:d1:a3:cb:57:b1:d2:
2e:53:30:20:78:ea:15:0d:b8:ab:f0:2d:20:58:c4:eb:55:8c:
d0:4b:23:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net