Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json)
Hash identifier: BybuxSUI1FG69itVIlMvQLLgWIU4/s/060WnpM3K8KA=
Subject key identifier: 4D:92:98:CE:D0:3E:68:54:BB:6F:1D:3C:26:8C:99:00:5B:6A:4C:ED
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2B7920AE7B4033EFD95E49CED4BC613DF13E7212
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
Signing time: Fri 11 Apr 2025 00:10:10 +0000
ROA not before: Fri 11 Apr 2025 00:10:10 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:79:20:ae:7b:40:33:ef:d9:5e:49:ce:d4:bc:61:3d:f1:3e:72:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:10:10 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=06e12b8bff81356bd0c74f28eb610f30123a666c9391336f62d4a6f2cf1f7e76, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:59:85:a8:46:02:fe:7b:ad:27:9d:e3:e0:
d3:43:18:9b:27:1c:55:6c:02:47:30:0c:b7:db:a2:
13:f4:e6:6c:b5:ac:48:ec:4b:8e:6d:9c:22:a3:5c:
98:27:75:6d:75:ac:f4:f4:06:8d:e7:19:c5:85:99:
d7:e6:27:56:83:be:fc:d9:8b:e7:99:55:70:dd:54:
43:38:82:3e:42:93:69:58:41:ec:5d:f6:8d:e3:33:
e0:e5:3b:f6:bd:74:fd:14:32:3b:08:90:2e:58:16:
db:8b:f7:60:98:35:e7:44:43:c1:2c:f2:14:f9:75:
28:29:67:01:00:c3:b0:db:1e:56:86:12:13:1b:0e:
05:a5:2f:d5:41:74:60:e8:89:55:52:81:1f:1d:14:
29:f3:e7:77:92:5c:79:54:25:68:e3:13:61:9c:9d:
4c:2b:32:f7:f8:31:3f:3d:01:d0:b2:7a:18:3c:13:
72:01:fb:28:6f:43:84:be:e9:98:c0:20:5c:8e:70:
27:08:23:08:4f:17:19:ee:21:2c:cb:8e:7f:6b:e7:
05:c9:4b:6c:e2:3f:d1:d1:17:6a:2f:a9:07:40:91:
24:17:1b:73:5b:2b:94:9d:6b:8a:83:78:f6:04:e0:
f2:f0:25:d6:fb:32:76:c1:48:0d:d7:0f:e9:27:df:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:92:98:CE:D0:3E:68:54:BB:6F:1D:3C:26:8C:99:00:5B:6A:4C:ED
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.189.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ec:c6:53:81:1d:53:5e:01:54:51:20:3a:20:aa:40:77:50:
13:14:d3:0b:bc:aa:24:ce:87:7c:2b:ba:61:8f:c8:f3:0b:bf:
2d:f7:bd:06:5d:27:e7:e0:45:79:ac:a0:bf:df:da:ea:e6:b2:
ac:1c:52:07:0e:8c:aa:e7:cd:30:56:f4:fd:ef:c2:aa:41:7a:
5d:8c:2a:dc:58:b6:dc:d1:24:83:84:a4:70:77:81:71:9d:e2:
fc:2c:e8:72:97:51:e8:6a:94:8b:a4:b0:f5:0d:a7:0c:5d:3b:
44:69:66:b9:ee:b5:e0:a9:f3:a1:97:c9:3e:d0:18:46:a4:62:
6b:48:4b:42:88:22:a2:a0:4e:7e:79:bd:7f:4c:13:f5:23:79:
6e:46:75:ea:90:ec:a9:76:4e:a9:8b:a6:b6:28:4c:54:49:b8:
ae:85:e1:f7:2b:87:98:bb:f8:50:8d:f6:38:9c:d4:7b:8f:cf:
73:a7:e0:3c:aa:f9:a3:34:62:a9:da:8c:b3:c3:ba:9a:08:06:
1f:d6:d8:64:d8:c4:df:78:f1:8d:db:59:f9:2d:11:80:90:42:
61:a8:0f:d4:05:1b:82:bd:71:fa:6a:1d:17:89:f0:cd:e5:fa:
f8:3d:7a:25:4c:42:61:21:d1:71:2a:80:f6:c8:59:5e:5d:e0:
9d:22:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net