Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cbd0e1b2-3598-4b4b-b57e-63a79a9c127b.roa
File: cbd0e1b2-3598-4b4b-b57e-63a79a9c127b.roa (raw, json)
Hash identifier: L8PeePKuneZn98l3tPWEXhUH/pJhafEQKLUFSKGKE3k=
Subject key identifier: 22:98:82:2E:B2:DF:4F:71:FD:D8:BE:B9:5F:E7:AC:2B:3F:39:9E:D0
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1A3C730F06CD71E04990A0B1F7B860EAADBEAB08
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cbd0e1b2-3598-4b4b-b57e-63a79a9c127b.roa
Signing time: Wed 30 Oct 2024 00:00:00 +0000
ROA not before: Wed 30 Oct 2024 00:00:00 +0000
ROA not after: Wed 04 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3c:73:0f:06:cd:71:e0:49:90:a0:b1:f7:b8:60:ea:ad:be:ab:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 30 00:00:00 2024 GMT
Not After : Dec 4 23:59:59 2024 GMT
Subject: serialNumber=46019ee171c7edca428317c5abc391cc12ac7d290b79bb5da36c32957a5c96ec, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:59:a0:f8:0b:04:37:3e:65:a1:7a:be:16:
8d:5c:88:da:fc:35:01:46:e7:17:ce:eb:f6:df:64:
21:38:11:17:2f:40:59:e6:67:8c:d5:ed:f2:30:bf:
00:6d:44:1c:bd:4e:e7:e2:a3:e1:e0:0b:3f:6d:fb:
00:41:8f:a2:ed:f7:29:e2:a9:6f:92:3a:2c:ae:d4:
88:6a:56:e1:d2:22:78:b0:fe:2f:de:36:a6:7a:e9:
5f:32:7e:f7:bb:27:df:df:52:f0:6a:8f:80:1f:26:
95:35:29:06:41:26:39:89:69:af:18:c2:f6:06:c3:
74:ce:18:99:09:51:0b:95:e1:8e:84:a6:d4:41:ca:
df:60:f0:f7:a4:00:c5:2f:5b:1d:e4:75:c3:bc:e1:
2c:0a:3d:54:c7:c8:4b:fe:51:c7:10:4a:f3:c6:1e:
7b:e3:1b:e5:89:ea:3d:ac:d1:86:3b:81:97:29:18:
d2:fc:9d:63:65:91:fa:67:bd:d9:1e:a4:64:56:53:
8f:5c:84:3b:76:5d:a0:f4:8f:3f:e1:26:b6:bf:45:
e1:5b:99:ad:76:1e:29:65:ce:0f:aa:d7:3c:fb:aa:
b7:fb:fb:30:0b:93:b6:95:e6:32:bf:5b:c0:d7:c0:
6e:23:f5:b1:f0:21:b9:8a:e2:6b:7d:e9:ce:09:39:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:82:2E:B2:DF:4F:71:FD:D8:BE:B9:5F:E7:AC:2B:3F:39:9E:D0
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cbd0e1b2-3598-4b4b-b57e-63a79a9c127b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.176.0/20
Signature Algorithm: sha256WithRSAEncryption
87:49:7f:2d:11:25:5e:9d:79:13:ea:64:91:3c:9f:2d:89:b4:
62:ae:7a:b9:5e:ef:96:2e:80:e7:b5:4b:de:52:69:f9:8a:97:
fb:ad:10:cd:76:82:c1:cd:a7:57:f1:a3:c6:46:61:a5:9b:e7:
93:c3:a9:81:a4:ea:11:5c:fd:61:ec:7a:76:94:da:64:08:42:
44:48:dc:fb:38:8d:13:81:b3:36:53:4e:c1:84:c0:71:61:2a:
67:f6:a8:43:76:60:48:5f:71:33:17:46:03:b1:73:5f:14:8c:
74:04:61:35:16:0c:8a:8b:75:99:b1:77:a4:11:7d:a9:ab:f1:
10:0b:f1:fd:0b:76:ad:31:1a:af:51:02:ff:c2:32:f0:21:af:
a0:db:f6:d9:77:28:fb:f1:4d:f3:f3:c1:af:94:b4:41:fc:89:
2a:b2:8b:4e:ee:20:47:1b:1f:53:2f:f2:26:41:b1:85:b5:8c:
b7:4d:94:e4:89:c0:a5:5f:c1:63:8e:e4:c5:0c:f7:21:1c:00:
9e:45:ee:36:2c:a5:91:da:53:a0:47:d8:e2:fa:9d:dc:70:0e:
a5:d7:dd:fa:e7:db:b3:73:b6:a6:8a:61:1a:63:8f:53:1a:4f:
a0:36:b8:36:f0:81:75:25:dd:d6:68:59:7f:0e:65:73:19:f2:
4a:eb:cc:9a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGjxzDwbNceBJkKCx97hg6q2+qwgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMDMwMDAwMDAwWhcNMjQxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NjAxOWVlMTcxYzdlZGNhNDI4MzE3YzVhYmMzOTFjYzEy
YWM3ZDI5MGI3OWJiNWRhMzZjMzI5NTdhNWM5NmVjMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtRlmg+AsENz5loXq+Fo1ciNr8NQFG5xfO6/bfZCE4ERcv
QFnmZ4zV7fIwvwBtRBy9Tufio+HgCz9t+wBBj6Lt9yniqW+SOiyu1IhqVuHSIniw
/i/eNqZ66V8yfve7J9/fUvBqj4AfJpU1KQZBJjmJaa8YwvYGw3TOGJkJUQuV4Y6E
ptRByt9g8PekAMUvWx3kdcO84SwKPVTHyEv+UccQSvPGHnvjG+WJ6j2s0YY7gZcp
GNL8nWNlkfpnvdkepGRWU49chDt2XaD0jz/hJra/ReFbma12Hillzg+q1zz7qrf7
+zALk7aV5jK/W8DXwG4j9bHwIbmK4mt96c4JObU1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIpiCLrLfT3H92L65X+esKz85ntAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2NiZDBlMWIyLTM1OTgtNGI0Yi1iNTdlLTYzYTc5YTljMTI3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARM37AwDQYJKoZIhvcNAQELBQADggEBAIdJfy0RJV6deRPqZJE8ny2JtGKu
erle75YugOe1S95SafmKl/utEM12gsHNp1fxo8ZGYaWb55PDqYGk6hFc/WHsenaU
2mQIQkRI3Ps4jROBszZTTsGEwHFhKmf2qEN2YEhfcTMXRgOxc18UjHQEYTUWDIqL
dZmxd6QRfamr8RAL8f0Ldq0xGq9RAv/CMvAhr6Db9tl3KPvxTfPzwa+UtEH8iSqy
i07uIEcbH1Mv8iZBsYW1jLdNlOSJwKVfwWOO5MUM9yEcAJ5F7jYspZHaU6BH2OL6
ndxwDqXX3frn27NztqaKYRpjj1MaT6A2uDbwgXUl3dZoWX8OZXMZ8krrzJo=
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net